Certificate key usage in standalone CA
I have a problem with a standalone sub CA. Certificate must be able to sign Outlook mails, encrypt them and sign Word documents, so in certqtp.inc I've changed rgAvailReqTypes parametr for my...
View ArticleWindows 8.1 Certificate Renewal Error on AD CS 2008
Configuration: Windows Server 2008 Enterprise AD CS Root/intermediate, Domain Win 2008 R2, Windows 8.1 and Win 7 clientsWhen attempting to renew a email encryption certificate using the same key via...
View ArticleBest Antivirus Software
Hello Guys,I am in an environment that have two servers and a new one is coming soon. 1. Microsoft Server 2003 R2 Stranded editions service pack 2 (running sql server)2. Small Business server 2011...
View ArticleAD CS - Length of the field exceeds maximum length
Hello,I have an issue when generating a Certificate in my local AD CS because I have too many SAN. This is mainly for testing purpose but it seems that when my SAN-field exceeds 8192(guesstimate, its...
View ArticleCreating limited admin account
Hello,We are using Win2008R2 Std Active Directory and I would like to create a new group for new IT starters. They will need access to join computers to the domain, install software on domain...
View ArticleVulnerblity issue on windows server 2003
Hi ,My name is Senthil R and i am working in KITP as a Regional system.Kindly help me on below issue and unable to get this KB Number(2671387) on Microsoft Website.Help me to fix the issue.Error...
View ArticleAutomatic renewal of certificates through CEP / CES.
We currently have a PKI on Windows 2008 R2 and in this case as customers use notebooks with Windows 7 SP1. I have problem with the automatic renewal of computer certificate through CEP / CES. Services...
View ArticleHow to redirect internal link (OWA, ECP ) from Https to Http in Exchange 2010
Hi,I have installed Exchange 2010 Sp3 in my company. How can I redirect all the queries coming to "HTTPS" to "HTTP"I want to open OWA & ECP with HTTP. Thanks
View ArticleHow do I give full directory access aside from Delete
I have a 2003 R2 File Server. There is a directory on a file share I need to give a group full rights to excluding deletion. I have gone into the security tabs for the group, went to advanced...
View ArticleAccount Lockout - Reset account lockout counter after
Hi Expert,Would you know any disadvantages if we set the Account Lockout Policy - Reset account lockout counter after to longer value e.g. 24 hours or maximum of 99,999 minutes.?Regards,Jhun
View ArticleDomain Users being added to Local Administrator Group with no existing Policy
This may seem strange, but I am having a very strange problem. I just inherited an AD 2003 with a single DC. 90% of the client stations are Windows 7. The problem I have is that the Domain Users...
View ArticleHow does AppLocker classify files?
For example, when a user double-clicks 'actually-a-malicious-exe.txt' - does AppLocker classify by content actions ("Wait a minute, this is trying to launch a process"), or solely by file extension?...
View ArticleWindows Server 2012 R2 Certificate Services - Online Responder DNS Alias
I am setting up a 2012 R2 PKI. Going with an offline standalone Root with an enterprise issuing CA. This is how I'd like to configure OSCP if possible & supported.Build an OSCP array. Members will...
View ArticleUsing code signing certificate results in classnotfoundexception
We are running a certificate authority on windows 2012. Our programming section developed a java application on linux and wanted to code sign it. They created a csr and sent it to me. I created a...
View ArticleInstalling intermediate CA on foreign devices.
Hello, we are implementing https decryption and re-encryption on our Ironport webfiltering device. I have generated a CSR and had it sign by our CA with the subordinate CA template. Everything works...
View ArticleAD CS Key Recovery Agent problem
Hi,I currently have a 2008 AD CS setup with an offline root and an entrprise subordinate CA. I am testing out key recovery on the EntCA. I found a article Certificate Services example implementation:...
View ArticleSecurtiy Bulletins for 2012 server
Hi,We are planning to deploy a new 2012 server and also we've existing 2000,2003 & 2008 servers. For these servers has updated with below security bulletins. And whether the fixes to these...
View ArticlePassword reset customization
We are running 2008 R2 Active Directory, staff log in to Windows machines on the domain so we have no issues with password reset settings there.The issue we have is that we have students logging in...
View ArticleClik here to view.
CEP & CES Post Installation Error
Hi I need some help with this error.....I don't find any useful information about this error Both CES & CEP same error..Rene Anton
View ArticleACTIVE DIRECTORY CERTIFICATE SERVICE
Team,I an trying to publish my CRL to a webserver and I did the ffg-- configured the CA--- installed ADCS correctly--created an IIS server and created a virtual directory called certdata--on the CA I...
View Article