You need to ensure that you can install the Active Directory Certificate Services (AD CS) Certificate Enrollment Web Service on the network
You need to perform an offline defragmentation of the Active Directory database on the domain controller