Is my LDAP connection Secure
Hi,We have LDAPS enabled with a third party certificate and it is working fine internally using ldp.exe.However if I don't have port 389 open as well as 636 ldap isn't working externally. If I set the...
View ArticleLogon history
HiI was trying to take my users logon duration from 2008 server as my HR team need to validate their productivity,i have noticed that i am able to take only user logon time as well as the log off ,But...
View ArticleHow AD adminstartor track list of certificates installed on a client machine...
Hi All, Is there any possible way to track certificates installed on a client machine( connected or not connected to domain) as an Active Directory Adminstrator.I know it is possible to audit Event...
View ArticleClik here to view.
[Forum FAQ] Introduce three common parameters of Logon Events
There are lots of threads querying about logon events. In this article, we will introduce some simple but efficient ways to help us better understand user logon events. Logon Type Logon type is a...
View ArticleHow Shared folders can be accessed without any authentication by one of my...
Hi this is Lava, One of the Local Client administrator is accessing all the folders which are shared in the Server 2012R2, even though the administrator do not have any permission to all those shared...
View ArticleRoot CA role removed, restored from Netbackup System State
The CA is server 2003.This morning the CA feature was inadvertently removed from the server.We restored the System state from the previous night's backup.The CA is now showing, with all certificates...
View ArticleCRL publishing Issues - Issuing CA
Hi, The issuing CA and CDP is running on separate win 2012 servers. The CRL publishing interval is 1 day. For some reason, the CRLs are not getting published automatically every day. It gets...
View ArticleGet the Expiration Date of Certification of Authority CRL
Hello EvrybodyI want to monitor the CRL (Certificate Revocation List) and only the following options:Next CRL PublishNext CRL UpdateMy Idea was to get this two Attributes with powershell, and write an...
View ArticleEvent 4769 flooding Security logs (2008R2)
Hello --I have a 2008R2 DC that is generating around 50 of these msgs per minute: A Kerberos service ticket was requested. Account Information: Account Name: Account Domain: Logon GUID:...
View ArticleWindows Server 2008 R2 Domain Controller NOT logging EventID 4740
EventID 4740 (account lockout) is not being logged to the event viewer. When searching through the security log there are none to be found. Having accounts locked out and no logging is driving me nuts....
View ArticleFull control for system administrators
Hi I understand that system administrators are given full control to all files/ folders of the local disk drives, network drives for daily IT operation. Because my firm has some sensitive information...
View ArticleImport a CA-certificate into issuing Enterprise CA error
Hello, I am deploying two-tier hierarchy (Root CA - Standalone Root, Issuing CA - Enterprise CA on Active Directory).Root CA CAPolicy.inf [Version] Signature= "$Windows NT$" [certsrv_server]...
View ArticlePut an Enterprise CA in AD environment where we have 2 Standalone CAs
Hya,We have two Standalone CA authority servers in our AD environment one being our Radius server(both 2008 r2 Standard)and one being on a DC.We would like to create a new Enterprise CA which is going...
View ArticleSchannel Returns "SEC_E_CERT_UNKNOWN" for Valid Server Certificate
Hello,I'm implementing 802.1x security solution and everything works execpt that when I enable "verify server cerificate" on client I get Reason-Code = 23 Reason = Unexpected error. Possible error in...
View Articlefile locked by account that no longer exists
Hi all. I'm not sure exactly where to pose this question, but it may be security related so here goes...Over the past few months users have been randomly getting a notification that files are locked...
View ArticleAudit Failure a lot of EventID 4776 from my own server
Hello,I know that is a common problem for a lot of people. Let me explain:I have a Server 2008 R2 and I am getting a lot of Audit Failurs in the event viewer. about 5 per second. All of them the same...
View ArticleDon't give me any hyperlinks
Hello,I just need to meet some audit requirements. I am not a cryptography expert and have no desire to become one. Just want to make errors go away on a LOCAL WINDOWS DOMAIN. We have an Enterprise CA....
View ArticleDomain Controllers Authentication certificate autoenrollment, when will it be...
1.Does the 'domain controllers authentication certificate' will immediate active as primary certificate to replace the old one after it enrolled? If not, where to find out how many hours/days will it...
View ArticleIs it possible to configure a Certificate Authority not to override any...
Hi All,I have a certificate request with modified certificate extensions in Microsoft CA and I want to issue that request with that extensions. However, when I issued the certificate, voila! The...
View ArticleActive directory Certificate services-Error
Hi community members,We have a two node Active directory certificate server running on windows server 2008r2.It was working fine and i was able to issue a couple of certificates.however when i was...
View Article