Log all IP's and usernames that connects to server shares
I need to log all usernames and ip addresses that connects to file server (Windows Server 2008). What would be the best way to do this?
View ArticleCross-Certification for Non-Windows Clients
Still trying to get more information on getting my SHA256 root CA certificate signed by my SHA1 root CA (temporarily), and having non-Windows entities recognize that:Creating Cross-Certification...
View Articlecould create encrypted files but then couldn't read them
We have a shared folder on a server where a scanner puts files. Users access that share from their systems. We encrypted the folder. The scanner could still create files in the folder but then when...
View Article0x8007064a (WIN32: 1610 ERROR_BAD_CONFIGURATION) - Kurt Hudson's article or lab
Kurt Hudson's article or labWhen importing the Sub CA request file into the ROOT CA Server I receive the following error message:From Powershell: Certificate not issued (Denied) Error Parsing Request...
View Articlecannot enroll a customize "smart card connexion" template
Hello everyone !Sorry for my bad English i am Frenchi create a new template for "enrollment agent" Only change name and security right for enrollment My ca has no enrollment agent restrictions i hadded...
View ArticleSecurity Logging for login to domain machine (ie. windows 7)
Hi AllI have a difficult question here. would like to know how to solve this from the event log; system and security log.I worked in a MNC. would like to check the login status of my IT staff. below...
View ArticleUnwanted User Accounts in Domain Controller
I have a Server 2012 R2 Data Center Domain Controller. When I go to Control Panel / Manage User Accounts I am seeing several users in the User Accounts box that should not be there. When I try to...
View ArticlePKI and security question
Hi,What is the security implication of exporting PKI certificates with their private keys? Also, what's the security implication of self-signed certs?Thanks
View Articleaccounts being created with administrative group rights
Hello,The server is a Windows 2003 R2 Enterprise fully patched used for Shared Hosting purposes. It runs Hsphere control panel. I am trying to identify how the following hack is happening. 1) There...
View ArticleUser failed logon attempts are not logged in the security log
Hi,I face a problem with the security log. I have 2 DCs with W2K3 R2 x86 SP2. Auditing for logon events, is enabled for both success and failure, for all DCs, member servers, and computers via group...
View ArticleDriver installation issues for Power Users
In my company, I'm a Power User but the system see me as Standard User and does not allow me continue the installation of drivers the hardware installed on the machine to complete the installation and...
View ArticleIssues installing .net updates offline
Attempting to install KB2972215 and KB2972216 to a couple of windows 2008R2 x64 systems give the "Generic Trust Failure" error. As far as I can tell, they are attempting to authenticate to microsoft,...
View ArticleError 0x803d0013 (-2143485933 WS_W_ENDPOINT_FAULT_RECEIVED)
I've setup and configured the Root CA (offline), Subordinate CA, CEP, CES servers in my network.I configured AD GPO to deploy the certificates and any domain computer works fine.When I try this on a...
View ArticleCertificate Chain Stripped?
Hi, I have made a copy of the IPSEC (offline) template for the purpose of securing a VPN tunnel. I can request the certificate fine through the mmc snapin however when received the certificate path tab...
View ArticleTrying to retire a Win2003 DC that has Certification Authority installed
I have an old Win2003 DC that has a CA running on it. I think it was installed specifically for RADIUS use with authenticated Wifi clients on a Cisco WLC. The Win2003 DC is now the last of the...
View ArticleRights delegation
I'm tracking all the ways to delegate rights in AD. I want to create a custom Delegation wizard by using the delegwiz.inf. I want to provide the ability to junior admins to create an OU but with no...
View ArticleMMC and Service account (MSSQLSERVER)
Hi,I am not sure where to post this question. After seeing couple of questions asked in this forum, I thought of doing same. Currently we are storing certificates on windows 2008 servers which also act...
View ArticleProblem with CDP Locations
Hello,I am experiencing an issue. My setup is as follows:Offline Root CAEnterprise Issuing SubCARecently I was attempting to set up EAP-TLS for a wired network test. I ran into Radius error code 259....
View ArticlePKI - Create certificate from .csr file.
Hi,Ive been sent a .csr file to be used to create an internal web certificate, can anyone advise how to do this as I cannot find any instructions on this. We dont have a cert serv website so typicaly...
View Article