CA does not issue any more certificates after a restauration:...
Hello, I backed up my CA, and then, I restored it in another DC. I had to remove the first CA, that is why I backed it up, and then I restored it. Ever since then, the new CA is unable to issue...
View ArticleDomain Admin doesn't have local Administrator privileges
This was all done using Azure VMs.machine: server-dc Setup Windows 2012 R2 as a domain control with user 'testadmin' Domain: DEV Added a user 'domainadmin' and made a Member of all the same groups as...
View ArticleScripted change of own password.
Hello, I'm having 2 Windows Servers(A and B) that are not in domain, both running Windows Server 2008 R2. On server A I'm logged in as Administrator. On server B I have user account that is only...
View ArticleCA migration from 2003 to 2008 R2 server.
Hi,If the name of the destination server (Win2008) is different from the source server(Win2003). And later we decide to decommission the server(Win2003). What effect will be on the Certificate that are...
View ArticleRemote WMI new administrator account
I have a remote w2k8 server that i can access WMI via the administrator account. i have setup a second admin account so i can disable the account named administrator. I have added this new account to...
View ArticleWindows 7 clients cant update software without admin permissions.
Hello,We are using Windows 7 clients in a Win2008R2 Domain. We are also using a few specific software packages that everytime they are run, they check for updates. Unfortunatly, the updates fail...
View Articleblocked port 80?
hello, i dont know is im in right topic. we have astaro SG 110/120 we have 2 servers 1.AD/DNS/DHCP win serv 2003 2.MSQL/files/programs serv 2003 the main problem is that on 1 server is blocked port...
View ArticleSSL Certificate keeps changing on IIS7
The problem is the SSL certificate just keeps on changing. If we restart our modem the certificate would show just fine for a couple of minutes then it would start giving out a wrong SSL certificate...
View ArticleDisableIPSourceRouting registry key on Server 2012 R2
Hi,We have security scanning software which is complaining that the DisableIPSourceRoutingregistry key is missing. I've found plenty of old articles about adding the key and setting it to 2 to stop...
View ArticleCRL not publishing to web server in DMZ. The directory name is invalid....
We have a Windows 2008 Root CA and a Windows 2008 Subordinate CA. We have the CRL's published to a DMZ server using a script. This has been working fine for many months. Now suddenly the CRL publishing...
View ArticleSystem error 5 has occured.
Windows 2012-R2 domain environment.I have added an open source application into windows services.when I try to start the service I get below errorC:\>net start servicenameSystem error 5 has...
View Articlecert enrollment using mmc
I am trying to enroll a cert using mmc, this user "test123" has an AD account and has read and enroll right on the cert template. I log on to the domain on the user pc using the user account...
View ArticleActive Directory Certificate Services
Hello,I have an issue with CRL and delta CRL which I cannot publishthe errors are:1. Active Directory Certificate services could not publish a Delta CRL for key 0 to the following location:...
View ArticleAudit changes to Certificate Templates - 2008 R2
I am trying to find a way to audit any changes that are made to certificate templates but I can not find a way. Has anyone done this before and know how to configure?
View Article0x8002801c error when trying to unregister scrrun.dll Win2008 R2 64bit
For the DoD STIGS, they want you to unregister the File System Component and their steps are to unregister scrrun.dllI'm on Win2008 R2, SP1, 64bit. I open a command prompt with 'run as administrator',...
View ArticleAdding Password Complexity - Effect on existing passwords
We are running a Windows 2008 domain. We need to implement password complexity via group policies. How will this effect existing users? Any reference links would be great incase this change goes...
View ArticleRequest SAN Certificate from 2003 server to 2008 Internal CA
I'm trying to request a SAN certificate from a 2003 Server running Exchange 2007 to an internal CA running on Server 2008.Using the MMC, Certificates (Local Computer) I can see the existing self-signed...
View ArticleTest Lab Guide: Deploying an AD CS Two-Tier PKI Hierarchy
I am looking to make a fairly diverse LAB setup. With multiple domains to represent merged companies and companies that just work with each other.One of the big things this LAB will have is Exchange...
View ArticleError when enrolling ACS CryptoMate64 for Smartcard Logon
I am configuring windows 2008 R@ CA so that domain users can use USB tokens (ACS CryptoMate64 ) to logon into the domain.when i try "ENroll on behalf of.." from administrator Personal container...
View ArticleWindows Security Events - List of Symbolic Names
I'm looking for a list of all Security Event IDs including the Symbolic Names.Microsoft provides a list of the Security Audit Event IDs for each Windows Version though this list lacks the Symbolic...
View Article