Active Directory Certificate Services
Hi there, we actually have a Windows Server 2008 SBS server running, And we wanted to make so clean-up into it. Actually there is the certlog located into : C:\Windows\System32\winevt\Logs...
View ArticleHow does Windows or IIS protect a certificate or it's private key?
My question is of a basic nature. And I think that it boils down to constraining file system and registry access. But would like to have that confirmed by someone who has Windows experience. In general...
View Article401 - Unauthorized: Access is denied due to invalid credentials
After installing MSCEP, enter http://Server2008/certsrv/mscep_admin in the browser.Enter correct user name and password in pop-up box. Windows 2008 keeps rejecting the correct user name and password....
View ArticleCA - no certificate templates could be found.
Dear All,I have a 2008 Domain Controller with the CA Server role installed with the issue that the Web-Enrolement procedure is not working proper. I can´t request any cert´s using the web-browser. Cert...
View ArticleDaily event ID 529 on DC but the account last wrong password is few weeks...
Hi,Our security team is getting the event log as below but we are not sure why it was generated. Check at 172.25.72.26 does not have such event but we're getting it all the time during the 12noon on...
View ArticleUnable to export private key after installing new cert on IIS 7
I am simply trying to apply a public cert to IIS server then export that cert with private as .pfx file, and it just isn't working! I generate the request via IIS, send the CSR to public CA (network...
View ArticleWindows Firewall has a port open but when I do a port scan the port is closed
Hello,I have a new door entry device that is being installed that has a internal IP address of say 192.168.200.12 that requires port 3001 to be open. The device is reachable via ping and is plugged...
View ArticleCustom Request Attributes
there are the three custom request attributes found on requests in certificate services CA. They are the CDC, RMD and CCM. what are their exact meanings? The CDC looks like being the identity...
View ArticleWindows 2008 R2 - Multiple Vendor DNS Query ID Field Prediction Cache Poisoning
Hi GuysRecently we had our audit report last month, one of the finding make me confused, we has one item call "Multiple Vendor DNS Query ID Field Prediction Cache Poisoning" in risk level is high. I...
View ArticleUnable to receive an email by task scheduler on audit failure in windows...
Deal All,I am sorry in advance if i would be on wrong forum, i have created a task on Server 2008 r2 Domain controller that when an audit failure event triggered in windows security log then an email...
View ArticleWindows Firewall - block/allow incoming connections by MAC Address
I want to create a Windows Firewall inbound rule to allow an inbound connection to a specific port only if the remote device is identified with a MAC Address in a subset of MAC Addresses I predefine....
View ArticleCertificate Service Migration
I have a PKI in Windows Server 2003:1. A Stand-Alone Root CA - "Offline" - "Windows Server 2003 x32 Enterprise Edition".2. An Enterprise Subordinate CA - "Online" - "Windows Server 2003 x32 Enterprise...
View ArticleCan't update USBPORT.SYS
I keep getting hit on by my security department scans because a handful of Windows 2008 R2 VMs have an old version of usbport.sys. I have applied the required patches but the file doesn't update. There...
View ArticleCannot stop user "servr" from creating user account and using 99% cpu in task...
For W2008R2 that has been running successfully for several years, recently noticed task svchost with user name servr consuming 99% of the cpu cycles. Deleted user servr, but it keeps coming back....
View ArticleBest practice to securely format a solid state hard drive.
Hey guys i am not sure this is in the right place or even belongs on this forum but here we go. I am going to be participating in a security project and the goal is to recover data from formatted...
View ArticleAuthentication v Encryption & PKI
I am reading a book named PKI Uncovered (Cisco Press) that gives an intro Security.The book states two facts:1. In Authentication - the message is encrypted using the sender's private key and...
View ArticleCreating private CA/PKI for certificates
HiWe are looking at creating our own internal PKI for certificate generation. A client machine will request the certificate and the CA will generate this per user.Some questions:i. When the certificate...
View Articlerisk of using domain admin to deploy software
helloIs there a risk of using domain admin to deploy software such antivirus? the antivirus server uses domain admin account to deploy the av agent for client computers. So if a client computer has...
View Articleconvert subordinate CA to Root CA
Hi,may be a silly question,but the previous admin was fired and he leave me all problem, I'm working on fixing the problems, one of them is that he was lost the root CA (no backup - Windows 2003...
View ArticleClik here to view.
BitLocker - no information in AD
Hello,We have Windows 2012 Domain Controllers. Domain level is 2012. Backup to AD is enabled through GPO.It is not backing it up. Any ideas?Thank you.
View Article