As Shweta points out - Without somewhere alternative to store your recovery key - you don't want to simply remove SSG without giving this some more thought. Assuming your PC's are domained (on-prem) - this is fairly easy, RK's will go into AD but you need to make sure AD and GPO's are configured accordingly for this to happen.