Issues With Microsoft Security Update Q2855844
On every one of our Windows 2008 Standard Edition 32-bit servers the Q2855844 update errors out during the installation. Is anyone else having an issue with this update? This is what is in the...
View ArticleNTFS security deny user to modify folder, but allow software to modify folder...
Operating system is Windows server 2012 i want users to be able to run certain software (let's call it: WorkTech); the shortcut for this software is in user's desktop. WorkTech makes a folder when...
View Articleusing x509store for download pfx file - user account
helloI am looking for x509store c# code for download an existing pfx from my ca under ASP.net functionhelp needed please.
View ArticleWindows Server 2012 R2 robocopy not copying inherited directory permission...
Can anyone here please help me with Robocopy on Windows Server 2012 R2 to copy the file server content from \\OldFileServer\Data share into the local S:\Data drive ?here's my script that I use to copy...
View ArticleRemove unwanted issues Root certificates
Do some typos in my AIA and CDP ldap paths I had to re-issue a new certificate from my offline root three times. So within the trusted root certificate authority on all my clients their are three root...
View ArticleNT SERVICE\ALL SERVICES?!?!
On a fresh install of 2008 R2 I have "NT SERVICE\ALL SERVICES" listed in gpedit.msc for "Log on as a service". Where can I get more information about this account/group?
View Article401 - Unauthorized: Access is denied due to invalid credentials
After installing MSCEP, enter http://Server2008/certsrv/mscep_admin in the browser.Enter correct user name and password in pop-up box. Windows 2008 keeps rejecting the correct user name and password....
View ArticleCertification Authority 6.1 SP1 Functional Level Windows 2012 R2
Hi!My Enterprise wants to know if this supported CA 6.1 SP1 to continue operating if the client update your AD DS environment with AD DS Windows Server domain controllers 2012 R2 and raise the...
View ArticleAD CS Web Enrollment Error - "public key does not meet the minimum size...
I've installed a standalone root CA and a enterprise subordinate CA in our environment - both are Windows 2008 R2. Everything is working except for Web Enrollment using a custom User template. I...
View ArticleAuto blocking attacking IP address?!
Dear all,Sorry if this already been answered. I spent an hour on the forum to search, but didn't find something useful.The question, I believe many already asked, is: when you left your Windows Server...
View ArticleCertificate creating and key export is disabled.
I have a .cer, or the text generated by a CSR tool. This text contains the Certificate request text as well as RSA Private key as per below.I am trying to create an export of the cert with the key...
View ArticleHow to check what certificate is being used for SSL (LDAPS) connections?
We have VeriSign certificates on our domain controllers so that people can make LDAPS (secure LDAP) connections on port 636. These certificates are located in the Certificates (Local Computer) ->...
View ArticlePKI Training and Resources
Any recommendations on advanced PKI Training? I've taken the "Designing and Managing a Microsoft Windows Public Key Infrastructure" course however it doesn't go into great detail on the many...
View Article[ActiveDirectory] User with two SID - NTFS Leak
Hello,I have a security problem with an account that has access to data which is normally protected (NTFS).This account is not member of any group that has access to this data, but it can create view...
View ArticleEnterprise PKI - Unable to download, error AIA and OCSP
I just added a subordinate CA to my environment and am trying to get these two errors worked out. The AIA location that points to my subCA's cert errors in pkiview.msc stating it is unable to...
View ArticleMultiple Windows 2012 R2 subordinate issuing CAs, how do I make one preferred...
Hello,A while back I posted a question on another discussion thread regarding re-issuing new root CA with FQDN -...
View Articlecertutil.exe - listing expiring certificates
D:\>certutil -restrict "NotAfter<=01/01/2016,NotAfter>=01/31/2014" -out "RequestID,RequesterName" -view CertUtil: The system cannot find the file specified. Can someone, in the name of God,...
View Articlewhich organizations control Pubic valid CA server?
hi frindsi need to know, in the world, which organization or organizations are responsible in controlling & justifying public valid CA servers?my 2nd question is, which website can i refer to see a...
View ArticleConfigure CDP - using of delta CRLs
hellohow to allow using of delta CRLs on ca server?any configuration or guide please.thank you.vadislav
View Articledelegation basics steps - startpoint
Hey everybodyI'm trying to set delegation in my domain for some services with user / machine account-I just want to know the basics steps for getting started,Wait for replay here10xJulia
View Article