Unable to select "Use TLS 1.1" and "Use TLS 1.2"
Hi,In order to connect via VPN to one of our client's network, it is required to have IE browser configured to use TLS 1.1 and TLS 1.2. If I try to check the boxes next to them under IE Tools/Internet...
View ArticleProblem with CertEnroll library and request with Subject Alternative Names...
I have generated a certificate request with SANs using an inf file like this:[Version] Signature="$Windows NT$" [NewRequest] Subject = "CN=someone,DC=acme,DC=com" KeyLength = 2048 [Extensions]...
View ArticleWindows Server 2008 firewall. Inbound connection is blocked as outbound?
I connect using "Computer Management" from computer A to computer B. Both computers are Windows Server 2008 x64 with all current hotfixes. The connection succeedes, and I don't even try to open any of...
View ArticleWindows server 2008 loses time constantly
I have a server 2008 Enterprise server that constantly loses exactly one hour. I reset it, reboot, it does it again. I checked all the obvious things. Time zone, DST, EST. I once found a command to run...
View Articlepublish Internal simple Http site to Internet and force external client to...
HiI have a http site in my internal LAN domain , recently manager ask me to publish the web site to internet for our external employee .--the web site is http and its simple site without any...
View Article"Error Parsing Request The request subject name is invalid or too long" when...
HI, I am using a Windows 2008 server, SP2 with the latest updates on. I am trying to use a .csr file that I have created on a 3rd party (Nextplane) system to create a certificate however when I...
View Articleis there an Active Directory Audit reporting product from microsoft ?
Is there an Active Directory change control product from microsoft ? Example, an alert generated when someone add themselves to domain admin group or modify a group policy object ?More specifically, is...
View ArticleCertSvc is not starting due to database restore operation
Hi, Whenever I tried to start the certificate service I get the following error, Active Directory Certificate Services did not start: Unable to initialize the database connection for SubCA01....
View ArticleERROR: The process "XXXX.exe" with PID 2732 could not be terminated. Reason:...
Hello,I set up a new Server 2010 and I am an administrator on the local machine and on the domain.I am trying to stop a process with taskkill /F /IM xxx.exe command and got the error : ERROR: The...
View ArticleGrant access to modify membership of local administrator group
helloI am active directory administrator and i like to grant a certain user access to modify membership of the local administrator group for computers in a specific OU only. i tried to do that via...
View Article.net patches not listed in wmic qfe list
Hello, Trying to find a way to see if the following patch KB2604092 and others are installed from DOS prompt...wmic qfe list and a query against Win32_QuickFixEngineering seem to list all but the...
View ArticleCert based auth act as second factor authentication in Office 365?
Team, Looking for second level of auth. besides SSO by ADFS 2.0 or 3.0 as Primary auth. BING gave me option of MFA by Office 365, but we dont want to go with it. Looking at technet article :...
View ArticleThree tier PKI - support both SHA-1 and SHA-2
Hey guys,We're about to implement a new three tier PKI - root, intermediate and Issuing CA's... is it possible to have the root and intermediate configured as SHA-1, and have multiple Issuing CA's -...
View ArticleAutomatic certificate enrollment for local system failed (0x800706ba) The RPC...
I'm getting the auto-enrollment error above not because of a configuration error but for the reason that the Root CA machine was taken out of service and disposed of! So the unable to contact is a true...
View ArticleHow could I know whether Microsoft patch need reboot or not ?
We use win2003R2 and win2008R2 and so on in the domain environment.When we apply the Microsoft-provided patch, is there any way to know it need OS reboot in advance ?
View Articlemrtstub.exe malware or not?
So, I've been having a malware problem, and I found the file mrtstub.exe, and of course I search for it on the internet and a site says that it is malware and to remove it. So, I did. When I first...
View Articlebecause of security error we can not connect to remote computer
remote desktop disconnectedbecause of security error, the client could not connect to the remote computer. Verify that you have logged on to the network, and then try connecting again
View ArticleCannot export private key: "key not valid for use in specified state"
Hi,This is a bit of a long story but I hope someone can give us some guidance.We use authentication certificates issued from our own Enterprise CA to control user and machine authentication via...
View ArticleRemote desktop connecting to another machine
We have a web server which is located outside our windows domain and we have been accessing the machine using remote desktop by entering the IP address and password until this morning. When i enter the...
View Articlecopy CRLs after certutil -CRL
hi!I am trying to copy CRLs automatically to another server (running under Linux). So what I do is:certutil -crl and scp to somewhereWhen I do this as Domain admin, it works, when I do this as a...
View Article