In Ex2007/Win2008 our old server (Porter, decommissioned) was a member of "Cert Publishers" and "Exchange Domain Servers".

In Ex2013/Win2012 our new server (Pebbles) is not a member of these two groups.

Does Pebbles need to be a member of the two groups ("Cert Publishers" and "Exchange Domain Servers") that Porter was?

Hi

Once you install exchange 2013 it will be put part of the groups it needs to be part of.

Was your previous server a 2010 or 2007 server?

Yes, Ex2007/Win2008 was our old server. 

I was pretty sure that Ex2013 would automatically add the groups it needs when it installs.  Just wanted to confirm it.

Also, can I remove the "Cert Publishers" and "Exchange Domain Servers" groups from AD; beings that the old server (Ex2007) is the only member in it as of now?

Hi,

Members of the Cert Publishers group are authorized to publish certificates for User objects in Active Directory. Its the default built-in Security Group,and actually we cant remove  it. By default, there are no members in this group.

Refer from

https://technet.microsoft.com/en-us/library/dn579255.aspx?f=255&MSPPError=-2147217396#BKMK_CertPublishers

Best Regards.