NETSH firewall add ------------ duplicate entries?????
I have a question about the NETSH command and firewalls.. ... Anyone elese can chime also... thanks!I have a script that i found on the net.. Bascially i'm having trouble with duplicate netries being...
View Articlewindows server administrator account will get locked
someone help me windows server administrator account will get locked & second question members domain admin account also get lockedsccmghost@hotmail.com
View ArticleInstalling Domain Controller certificates remotely - private key remains on...
Using a 3rd party CA (Entrust), I have successfully requested and installed Domain Controller certificates via the Certificates MMC snap-in.I did this from one Domain Controller, and then just used the...
View Articleenterprise CA on a 2003 DC - move to 2012 DC?
I'm looking for guidance on replacing a CA that's on a server 2003 DC with a CA on a server 2012 r1 DC. Is it possible to backup/restore here? They are just computer certificates, if i revoke and...
View ArticleHow to verify CA root certificate?
When the client downloads CA root certificate from the CA server , how to verify that the root certificate is actually from the CA server from which we want to connect?
View ArticleCannot filter by user in Event Viewer security log
This was posted in the Exchange forum (because its an Exchange server) but one of the mods thought I would have better luck posting here.- W2K8 SP2- E2K7 SP2 I attempt to logon to OWA (Outlook Web...
View ArticlePerformance of queries against large AD CS databases - how to optimize?
I am asking experts with experience with AD CS databases with 100.000s or millions of certificate to confirm or correct my "theories".I am aware of these two articles that state performance is not an...
View ArticleReplacing enterprise CA(2008 R2) - Do I need to move EFS Recovery Agent...
We are planning migrate the exsisting all DCs to 2012 with new hardware. It's including CA and clients are using EFS. Is there any effects on clients using EFS? Do I have to export the recovery agent...
View ArticleImplementing BitLocker network unlook over multiple networks with one WDS
We plan to deploy Bitlocker with network unlock for our Windows Server 2012. The Requirements are fulfilled. It works for our core network. We now want to use the WDS in the core network to unlock...
View ArticleHow to create a "new" root certificate that has FQDN in Windows 2012 R2
Our IT manager came across something interesting regarding "short-names", "On October 1, 2016, all publicly trusted SSL/TLS certificates with an internal name or reserved IP address will be revoked...
View ArticleCertificate Enroll Errors RPC Server Is Unavailable
I have a scenario in which I would like some advice before moving on. We have a Server 2012 root CA that was put in about a year-year and a half ago and at the same time there was another 2008 R2 root...
View ArticleCertificate Revocation Question
I have servers in a "closed" network, ie no access to the World Wide Web (WWW). I have server errors within the CAPI2 log that I want to resolve. I know these errors are valid because it can't reach...
View ArticleA question and out CA 'domain controller' templates, and kerbros/KDC in general
Hello AllCan someone please help me with the following question. This may be two questions (so if you think I have to post separately please let me know).I was reading an MS article called "Active...
View ArticleEnroll on Behalf of Smartcard Logon Certificate
I've stood up a Server 2008 R2 Enterprise CA, and created a duplicate "Smartcard Logon" template.On the client (whether it's on Win7 or Win8), I success requested and received an Enrollment Agent...
View ArticleEnterprise PKI - Unable to download, error AIA and OCSP
I just added a subordinate CA to my environment and am trying to get these two errors worked out. The AIA location that points to my subCA's cert errors in pkiview.msc stating it is unable to...
View ArticleCheck certificate template
Hi All,I have server certificate, how can I check which certificate template was used in it?Faizan
View ArticleSSL Certificate Issues in Windows Server 2003
I have a 2003 R2 SP2 Standard server. I have a certificate issued by a trusted CA. The certificate opens and displays the "The integrity of this certificate cannot be guaranteed. The certificate may be...
View ArticleHow to create a certificate templates for NPS server/client authentication
I recently removed our old CA, following a KB article on how to decomission a CA. I then followed this guide to build a two-tier PKI hierarchy (1 offline root CA, 1 subordinate CA):...
View ArticleEvent 4674: "An operation was attempted on a privileged object" on Windows...
A while ago I enabled auditing on my WS2008 Servers and started noticing the following event repeating in the Securtiy log.Log Name: SecuritySource: Microsoft-Windows-Security-AuditingDate:...
View ArticleWindows 2012 AD security group.
Which Windows 2012 Active Directory security group would give a domain user and a workstation joined to the domain a "Windows 7 Enterprise" Internet activations rights? We want to allow certain...
View Article