Deny user to logon locally but allow them through an application.
Hi!I have a set of computer that should logon automatically and launch an application (HMI) from which the users control certain tasks within a factory. At the same time I want most users to be unable...
View ArticleHow to Set Deny Users to Move one Folder to Another but Allow them full...
Hi,We have a network drive called Drive P (for example) and under Drive P are Folder A and Folder B. SCENARIO1. Security Group Folder A gives full rights to Folder A (all subfolders and files)....
View ArticleHow to Prevent LM Hash from Being Saved in Memory
Hi, my company is looking to improve security in our mixed Server 2003 & Server 2008 R2 environment by protecting against pass the hash attacks. We are in the process of implementing 15-character...
View ArticleAccount Lockout: WHERE it comes from?
Greetings, We are suffering from several users account lockouts on our domain, and we cannot find a solution.I've read most of the usually linked threads about this, such as this one, this one or this...
View Articletest SCEP - error 503, service unavailable
Hello,I completed SCEP NDES installation on a Server 2008 R2 VM following the procedure document on...
View ArticleOffice Temp files not deleting on network share
I have multiple users (but not all) who when they open an office file and close it the office temp file is renamed to an 8 bit.tmp file and doesn't autodelete.1. the file won't be deleted, even by...
View ArticleHow Can I View Certificate Store for a Specific User on a Remote Machine
I am working on a project to implement 802.1x wireless authentication. This will require both computer and user certificates in the local certificates store on each computer using wireless.I know the...
View ArticleCertReq - Obtaining the private key - Urgent Question Thx
Hello,I need to request a website certificate to enable ssl within my DMZ Server.We are currently using a Windows Server 2008 PKI Enterprise Issuing CA within the trusted network.Unfortunately I can't...
View ArticleEnabling LDAP over SSL
LDAP over SSL was initially configured using our 2003 domain DCs but we now have our roles spread between 2 x 2008 DC's (one of the 2003 DC's is now off because it failed, the other is still working as...
View ArticleIPSEC Main mode only 2008R2 - 2008R2 over NAT
I have two 2008 R2 server behind routers will all ports mapped on the external firewall which i'm trying to connect via IPSEC.Network 1Network 2Local 10.64.240.13- FirewallInternetFirewall - Local...
View ArticleA certificate chain could not be built to a trusted root authority
HelloI am trying to establish in virtual test environment PKI in 2008 R2 and now I'm stuck so I need your help and advice for further steps. I've installed standalone root CA with CA role (it will be...
View ArticleCertificate error on server
Hello We are running Windows 7 desktops and Windows 2008 Server servers. I need to get to an external website: https://shop.mydomain.com When I go to the website on my desktop it works fine, however...
View ArticleEnterprise Sub CA backup / restore in Virtul environment
Dear All , We have a physical standalone offline Root CA enterprise Sub CA , online responders in a virtual environment. Backup Strategies are as follows On the Root CA ##################### 1-...
View ArticleServer 2008 and Bitlocker USB Flash Drive Issue
Server 2008 R2 SP1Installing Bitlocker without TPM. Changed policy per instructions.Turn Bitlocker ON.Checks are OK.Step to write Bitlocker key to USB drive - No error reported. Printed and saved...
View Articlecertmgr.exe
Hello,I have downloaded sst (serialized store ) files from Microsoft site. I need to add/delete certs from these files into java keystore. What is the best way of doing that?certmgr.msc can add files...
View ArticleInstalling root CA in different server without removing first root CA reference
Hi,My OS : win 2008-R2-enterprise edition.My problem: I have installed Enterprise root CA on server1(name: WINGW1) and after that I removed it using servermanager->role->remove.I did not perform...
View Articleunquote path with spaces in services in auto type
We encountered the following vulnerability while scanning machines at work. I have address the issue in others forums to suggest for a course of action by time being vendor provide an update to their...
View ArticleHow to check Windows 2003 server has proper Domain Controller certificate
How to check Windows 2003 server has proper Domain Controller certificateI have generated new Domain Controller certificate using certificate authority wizard. But when used the certificate for client...
View ArticleIs the local system account the same as the computer account in this scenario?
Hi,I'm having a problem trying to get a PC to access a remote file share at login.The share contains an msi that is to be installed before the user logs in. I take it that the software will be...
View ArticleOffice 365 ADFS 2.0 /SSO Integration lost all access to portal and e-mails
I have integrated SSO and ADFS2 with office 365 for a customer and now I'm unable to sign in with any credentials what so ever. I keep getting this message whenever I try to sign in.Your organization...
View Article