problem setting up Certificate on NLB
Hello All, not sure if posting on the right channel. We have the following scenario, 2 Windows 2008 R2 Servers with the same application on IIS, on Server A we have setup a NLB virtual address, so it...
View ArticleCertificate Template Subject Name built from AD
Hi,I have configured a certificate template to build from AD and have chosen Common Name for subject and DNS name for the SAN. I was hoping that choosing Common Name that I would get what is in the CN...
View ArticleConfigure Cisco ASA - Microsoft CA Certificates
Hi All, we have a cisco ASA and a windows 2008 r2 certificate authority. We require our cisco vpn client users to have a user certificate installed on their remote PCs to authenticate with the cisco....
View ArticleI have a CSR, how do I get a Server 2102 R2 CA to issue a certificate?
In fact I have two CSRs that I would like to get certificates for: one from a Sonicwall firewall, one from a Lync 2010 Edge server which is not domain joined.I have a CA which has been upgraded many...
View ArticleMessage wasn't delivered because of security policies
Hi,Can you please help us identify the problem wherein all users in our company cannot send emails outside the organisation with the following message:"Your message wasn't delivered because of security...
View ArticleRobocopy not copying NTFS permissions
Hi All, got a 2008 64bit server, copying a 100 GB folder from one disk to another on the same server. And randomly robocopy does not apply NTFS permissions to folders at root level. It leaves them to...
View ArticleWindows Server 2012 R2 robocopy not copying inherited directory permission...
Can anyone here please help me with Robocopy on Windows Server 2012 R2 to copy the file server content from \\OldFileServer\Data share into the local S:\Data drive ?here's my script that I use to copy...
View Article"Trust Relationship between the Domain Controller and the Client was lost"
We’ve been encountering trust relationship issue between workstations and the domain. On several occasions workstations prevent users from logging-in, it shows up with this error "Your account is...
View ArticleAudit Failure 4625 help
Hello,I've recently started noticing these audit failures in our security log (typically about 500 or so a day) and am looking for a little "decryption" to assist in finding the root issue. Log Name:...
View ArticleProblem Generating a certificate request
I have a couple of Windows 2003 R2 SP2 servers hosting several instances of ADAM. I am using certreq to generate the certificate requests for these servers so I can use SSL in connecting to ADAM but...
View ArticleBest Practices regarding AIA and CDP extensions
Based on the guide "AD CS Step by Step Guide: Two Tier PKI Hierarchy Deployment", I'll have both internal and external users (with a CDP in the DMZ) so I have a few questions regarding the...
View ArticleOK icacls command that should work but doesn't.
icacls "c:\windows\system32\spool\PRINTERS" /grant administrators:(IO)(CI)(OI)F /t When some of my systems go to print a PDF the spooler just locks up. I can't control what type of PDF files are...
View ArticleCan Exchange ditribution lists be used for folder security
Hello,is it possible to use exchange distributon lists as folder security on a windws file server?Advantage would be that only the distribution list should be updated in order to change folder...
View ArticleUsing certutil to export information for a specific template
Hi,I am trying to get a report on certificates issued for a specific template. I am trying to get all information for:template:...
View ArticleWindows Server 2003 and problem with SSL connection (TLS)
Hi,We are forcing a problem with SLL/TLS connection on a machine Windows Server 2003 SP2. We spent hours trying to solve it without any result. SYMPTOMS No SSL connection can be established in any...
View ArticleClik here to view.
Server 2012 Three Teir PKI Deployment
Hi I've been test building this on the bench prior to deployment.I have;1x Offline Root CA 1x Online Intermediate Subordinate Enterprise CA 2x Issuing Enterprise Subordinate Enterprise CA's 1x Issuing...
View ArticleADFS web agent error when creating a site with Citrix Web interface
Hello,Not sure if this is the right place to post this but I'm facing this issue on a production citrix server and i'm trying to create a site where it authenticates thru ADFS. In the final process of...
View ArticleIssuing CA's CRL checking not working
I installed Enterprise subordinate issuing CA with certutil -setreg ca\CRLFlags +CRLF_REVCHECK_IGNORE_OFFLINE so Issuing CA is able to start. I am publishing CRL in a website and able to access CRL...
View ArticleADCS: Export public certificates from CA database using certutil
I need to export a large quantity of users' public certificates from the CA database. I don't want private keys; just the certs. Either Base64 or DER is fine. Is it possible to do this with...
View ArticleCA Missing Templates in Enable Certificate Templates
One of the other admins recently reinstalled our only CA server, and since then a bunch of certificates that were formerly available are no longer issuable. After going to the Enable Certificate...
View Article