New Certificate Authority problem for RDP

[xcalibur]

Hello everyone, this is my first post here!

So I got tasked with migrating a CA from an old Server 2003 install to a new Windows Server2012 r2 machine. I then found out that for some weird reason there were other servers on the domain acting as a CA which I understand is a NO-NO. Anyway, I sucessfully set up AD CS on the new server (which is also a DC) and have confirmed it's working properly.

Problem is, now I'm finding some of our production servers complain about a certificate identity when we go to RDP to them.

Is this something that could be fixed client side or server side? My guess is that the certificate from the new CA has to be reissued on the problem servers. Anyone have experience with this or can point me in the right direction?

 

thanks