Windows 2008 Certificate Authority Upgrade to Windows 2012R2
I am currently running a Windows 2008 Standard edition CA in a Windows 2008 domain (version 44). I would like to migrate the CA role off the Windows 2008 server onto a Windows 2012R2 server. Both...
View ArticleHou to do intra-forest domain migration of enterprise sub-ordinate CA
Hi,We have a parent-child multi domain AD environment . The root CA is placed in parent domain (Domain-A) and one enterprise sub-CA & one enterprise NDES CA in child domain (Domain-B). We have...
View ArticleWAP login / Radius / Windows 7
It was suggested I cross-post my question here (it is also is in the Directory Services and Network forums).We are trying to log into laptops wirelessly. The users can only log into laptops that they...
View ArticleEvent ID 4624 Logon Type 3 - Being overwhelmed!!!
Hello. We've recently started logging all info from in-scope (for PCI DSS compliance) windows Server 2008 R2 servers and I am configuring alerting on certain types of event ID, one of them being 4624....
View Articleafter deploy in server, integrated Security works for all users but only one...
hi i'd like to ask for help.here is a brief introduction. i publish a web project on a server(the name,"server-deploy"),(it connect with sql server datavvase with connection string of database...
View ArticleRemove a CA?
HiI've inherited a domain with a CA running on a Windows Server 2008 R2 member server. I've been told it was set up originally to issue machine certificates for a wireless system we no longer use.As...
View ArticleTrusted Root GPO Question
PKI Gurus,I'm working with a client who has pushed out a Trusted Root certificate via theDefault Domain Policy.Computer configuration\Windows settings\Security Settings\Public key policies\Trusted Root...
View ArticleClik here to view.
Certificate requests failing
I am suddenly having issues with web certificate requests. I currently have one Root CA, one Policy CA and one online Issuing CA (All 2008). Cert requests in the past using the default "Web Server",...
View ArticleWindows 2008 R2 not registering logon events to 2003 RDP sessions
Hi,I have few windows 2008 R2 terminal servers which I use to RDP into other 2008/2003 servers.The audit policy for logon/logoff event for success of failure is setup for all servers via group...
View ArticleAD CS or PKI content comments or questions
You can ask technical questions about AD CS, PKI, or provide feedback about a document on this Security Forum. Please, remember to search the forum for your answer or issue before creating a new...
View ArticlePKI -- Required Certificate Fields
I have been trying to update some expired Certs in our domain serviced by an internal CA. The security team creates them and I get tasked with installing them. On some I get errors because the names...
View ArticleHundreds of audit events 4624, 4634, and 4672 every second on Server 2008 SP2...
I have a Windows Server 2008 SP2 Domain Controller that is logging about 400 to 500 audit events per second in the security log. I get repeated entries of: 4624 Logon4634 Logoff4672 Special Logon I...
View ArticleServer Access
What tools and commands are available to a malicious insider to access resources (data/software) on a windows server, be it win2k, 2003, 2008 etc. Say for example a naughty employee (domain user) finds...
View ArticleAuditing Access file & LogParser
Hi everyone, I'm running a w2k3 and I need to audit success on files on a specific folder ... I activated auditing for the everyone group on this folder, and started to watch my logs ... I want to know...
View ArticleRecurring Security Log errors 4624, 4672, 4634
We have only ten workstations, all WinXP Pro, except for one Windows 7 machine.We have have a Windows 2003 Server SP2, a Windows Server 2003 R2, and just added a Windows Server 2008 R2 with all updates...
View ArticleCertificate Enrollment Web Service for cross forest Certificate Enrollment
We are planning to implement Windows Server 2012 ADCS. We have resources in multiple un-trusted AD Forests for which certificates have to be issued. These resources include Windows Servers, VMware ESX,...
View ArticleFirewall ports needed for remote management?
Hey guys,Does anyone know the ports needed so that I can remotely connect to other Win7 computer through compmgmt.msc, regedit, msinfo32, remote rsop.msc, etc? I think those are just rpc connections,...
View ArticleI think a snap in was taken from my computer and in order for him to...
I am very confused about what is going on
View ArticleHELP - Cannot Restore Shadow Copies - Access Denied - Security Restrictions?
Server 2008 environment. Attempting to restore from shadow copy. Attempts to do so while logged in as enterprise administrator returns error: You do not have permission to access...
View ArticleCA EFS cert encryption issue
First off I want to reference this thread, this is the exact issue I am having.Other PostOnce item to add to this is that I am able to encrypt the file when I log in as domain admin, but not with any...
View Article