Certificate and Event Error Queries
Hi,Please bear with me as I am inexperienced when it comes to CA and DC's. I have been going through the Event Viewer on our only DC (Server 2003) and it keeps kicking out a few errors. I'm not aware...
View ArticleIs there a way for an end user to see who has membership in a security group
Windows Server 2008 R2 Active Directory DomainWindows 7 workstationsI am looking for a way that my end users can look at a folder security tab and then discover who has membership in the security...
View ArticleEFS recovery agent
Hello Geeks,In windows 2012R2 CA , I duplicated recovery efs agent template , then in security tab added my agent and grant enroll and autoenroll,in properties of CA server , added the recovery...
View ArticleCertificate Authority 2008 - Renewed RootCA Certificate crl
heyi had renewed my root CA certificate and i noticed that this certificate has the "CDP" attribute in it.i cannot understand why, because i know that root ca's certificate does not need this...
View ArticleError loading default templates on new Enterprise Root CA
Good day! Deploy the new (first) Enterprise Root CA in our domain was completed successfully, but whit a warning - unable to upload the default certificate templates. Wizard advised to check the rights...
View ArticleLDAP over SSL on Windows 2012R2 Server DCs - TLS 1.2 not working
Hi there,We've upgraded our DCs from 2008 R2 to 2012 R2.After moving the Enterprise CA from 2008 R2 to 2012 R2 domain controller (same IP, same hostname) according to this guide:...
View ArticleProblems Disabling SSL v2
Our organization is in the process of coming into PCI compliance. If you've had to do this, then you know that you need to disable SSL v2. We have three servers running IIS which are outward facing....
View ArticleAllow user to bind and filter LDAP and change password
Hi,We've set up a system where an OpenLDAP and Windows AD sync passwords, which currently works fine. However, we use a domain admin to connect to the LDAP and change passwords, which is a bit of a...
View ArticleuserCertificate Attribute Role
I am looking to understand the userCertificate attribute role. The networks I work with use smart card authentication and the userCertificate attribute tends to get filled up with expired smart cards...
View ArticleCompiled list of ADCS related Hotfixes & Issues
To make it easier for the community to track what hotfixes and updates have been released by Microsoft for Active Directory Certificate Services (ADCS) and related features, I have compiled a digest...
View ArticleLogin Fails in Exchange server
Hello community,Days ago I adopt in my organization the OSSEC HIDS tool, and we are having good results, but one repetitive alerts is causing me a lots of dubs.Every couple of minutes I recibe and...
View ArticleForwarding Security Events - The locale specific resource for the desired...
In a Win2008R2 DC i´ve configured a collecton from source config and i can successfully colletc the selected events form my 19 DCsI have a Mix of Win2008R2 and WIn2012R2 DCs, all english standard...
View ArticleI have KB2677070 and KB2813430 installed on Win Server 2008 R2 x64 SP1 (Std....
I'm working with Windows Server 2008 R2 x64 Std. Edition, w/SP1, fully patched, in a security environment.We run a security scanner (required by customer) to look for vulnerabilities on our systems....
View ArticleAD CS 2012 R2 Disaster Recovery
Hi.I have a scenario where we're looking to deploy a standalone root CA with Enterprise Sub CA. We will also be using cross forest certification. However, we're looking at deploying a second Sub CA at...
View Articleantivirus update server
Can anyone tell me as how to update anti-virus from server to client machine.
View ArticleSigning .JAR files using OpenSSL for Windows
HelloCan someone please help me with the following question.I have a code signing certicate in my X509 store "LocalMachine\My" which I can use for signing PowerShell scripts for...
View ArticleSHA1 Deprecation
Microsoft announced on November 12th, 2013 that they will be deprecating SHA1 on January 1st, 2017.Announcement here: http://blogs.technet.com/b/pki/archive/2013/11/12/sha1-deprecation-policy.aspxWe...
View ArticleSMB2 Server Denial of Service
Hi,My firewall has detected the "SMB2 Server Denial of Service" on one of our domain controller servers based on windows server 2008R2. Is there any workaround or updates/patches that could help me...
View Articlentopng compilation and installation on Windows Server 2008 R2
Hi All, need some help on how to compile ntopng source to windows 64-bit OS.I tried to look for some good solutions but nothing.Cheers, JK
View ArticleQuick Mode SA Idle Tomeout in Windows Server 2008 R2
We observed quick mode SA idle timeout appears as 300 sec in Windows 2008 R2. Is there a way to reduce the timeout value?
View Article