Updates could not be installed KB958869, KB2412687, KB967723, KB948590, KB956802
Hi All,Please kindly need your help. I have windows server 2003 32 bit. I have a warning from our internal security. They are says one of our server need to update some of windows security...
View ArticleNDES/SCEP for MDM via SCCM & Intune
We've recently deployed a NDES/SCEP server for certificate distribution via SCCM & Intune.Can a single NDES server be used to deploy certificates from two templates (for example user and machine...
View ArticlePKI Training and Resources
Any recommendations on advanced PKI Training? I've taken the "Designing and Managing a Microsoft Windows Public Key Infrastructure" course however it doesn't go into great detail on the many...
View ArticleAUDITPOL.EXE - User rights assignments needed.
OS: Server 2008R2 Std.What user rights assignments are required in order to use the following command:C:\windows\system32>auditpol /set /subcategory:"Network Policy Server" /success:enable...
View ArticleClik here to view.
Certificate Store
Team,Can I have link for understanding the Certificate Store? Main purpose is which certificate will be published in which store?In addition, which ext.(PFX & Cer/CRT) file will be stored in which...
View ArticleClik here to view.
Certificate Trust
I have env. like below & need to build the CA trust between Prod & Test.PRODOffline ROOT CA | Policy CA (Online) | Issueing CA (Online)Test Root CA (Online)...
View ArticleFindout previous deleted domain controller computer name frome SID
Hi I recently suspicious that some one in my company join new additional domain controller to my primary DC and after replication and get the domain controller partitions ,he disjoint the new...
View ArticleRevoked Certificate Removal
Hello!I have a certificate revocation issue that I'm hoping to find some information on.The backstory: I had a machine signing certificate template that issued certificates to 500+ computers in my...
View ArticleLost all permissions in Windows Server 2012
I installed a new server for a client 3 months ago. The new server runs Windows Server 2012 Standard. Everything was fine until randomly i could not open the Chrome icon on the taskbar. Error said...
View ArticleRoot CA not allowing LDAPs anymore. "Domain controller template using: client...
Root CA not allowing LDAPs anymore. "Domain controller template using: client authentication, Server Authentication template."Our Certificate Authority server has suddenly stopped allowing ldaps to...
View ArticleClik here to view.
A Basic Question about brut force key recovery attack
Hello I am now to the area and trying to learn more about Cryptography I have a very basic question, can someone please help me out Now I see that the longer the key being using for encryption the...
View ArticleRequest through http, but I cannot get a Computer certificate
Hello,From a client I type in my browser: http://dc1/certsrv.Then I get to a screen where I can choose among these certificates: User, Basic EFS, Administrator....and a few more ; but I don't see...
View ArticleIKEv2 VPN Certificate Problem
We have deployed a Strongswan based IPSec VPN on our premises that uses Certificate authentication. It works great with all OSs except from Windows. When trying to connect to the VPN we get Error 798:...
View ArticleConsiderations for 802.1x Port Based and Wi-Fi Certificate Authentication
Lately, we have been going back and for with the thought of doing certificate authentication for Wi-Fi and Port. We have Server 2012 PKI and CA and it seems fairly straight forward to pump out a...
View ArticleYou do not have sufficient permissions to enroll with SCEP
i'd like to allow "power" users on our network team to obtain certs for routers, switches, waps, etc... i've added these accounts to the local iis_iusrs group on the ca with the ndes role services, but...
View ArticleThis security ID may not be assigned as the owner of this objec
I want to set owner for the file and I get the following error.This security ID may not be assigned as the owner of this object
View ArticleList of all the certificates on smart card
I have asmart cardwith recorded threecertificatesthe same usertolog in bycard.One of thesecertificates isrevoked,and the twoare good.I havea domainpolicysetto read,all certificatesfrom the...
View ArticleADFS 3.0 - to - ADFS 3.0 Redirection for claims-based authentication
Hi,I have the following environments(s):- Users in DomainX - let's call a single user "UserInX" - ADFS 3.0 (WinServer 2012 R2) using ActiveDirectory for credentials, also in DomainX - call this "AdfsX"...
View Articleaccount locked out from RD server when no session is open?
Windows 2008R2 DCs, two in one site, one in anotherWindows 2008 functional levelI've had two instances in the past week where users, several hours after changing their passwords, had their accounts...
View Article