Assign a certificate to active directory certificate store in server core RODC
Hello Experts,I have deployed RODC on Windows Server 2008 R2 Server Core and placed in the DMZ, There is a requirement to enabled LDAPs authentication on server core, but i can not find any commands...
View ArticlePKI Question - How do I delete a new custom Applicaiton Policy we mistyped.
Hello,I have a quick question -- we were following the steps defined in this MSDN blog to create RDP certificates....
View ArticleAccess denied message in BAT log folder
Hello All,We have this issue while running Batch jobs in one of our servers.When running this particular batch file, it is supposed to send a log to a file called "doDaily.log"This is how the variable...
View ArticleNon domain-joined Clients (CES/CEP)
Hello Everyone!This is my first post to the security forum and it is not an overly familiar tech for me so please be gentle. :)I am looking at building a lab to test a web based application for a...
View ArticleAccount Login 675 errors
I have a domain with 2 DCs, an old 2003 DC and a new 2012 DC. On the 2003 DC, we're getting slammed with 675 errors. They are all coming from a server running 2012 that is used only for syncing AD and...
View ArticleAttempting to use certreq -enroll to enroll to a client authentication...
This has been an issue for a while now. Trying to use certreq -enroll -machine [Template Name] on Windows 7 machines fails with not implemented. When I run this command with the -q flag I see that...
View Articlealternative domain name on one DC
Hi,on a dns server, I create a domain with name "lab.local", then I add new domain "domain1" in this zone, it's URL is "domain1.lab.local".but when I configure a PC named "PC1" to join the domain...
View ArticleOffline Enterprise Root CA utilising a HSM
An Offline Enterprise Root CA is usually frowned upon in PKI circles but this is the case with Root CAs installed on servers with their private key material. Standalone Root CAs not attached to a...
View ArticleError Starting Certificate Authority after upgrading in place from Server...
Hope this is the place to seek help with Active Directory Certificate Services. We recently upgraded in place an issuing CA in our lab from 2003 to 2008 and the upgrade of the OS was successful but...
View ArticleUser directory on Windows 2008 R2 Server.
Hi,I have noticed that on our server a userdirectory has been created.c:\Users\user_name01\This should not be possible due to the server is unaccessible to the user and rdp at userlevel are switched...
View ArticleMS Security Essentials for Server 2012 R2
I've had MS Security Essentials installed on my Server 2008 R2 Foundation, but now that I've upgraded to 2012 R2 Foundation, MS Security Essentials won't install. It gives an error message saying that...
View ArticleKerberos based SSO (with PKI used for initial authentication) in Windows...
I am working on enabling Kerberos based SSO (with PKI used for initial authentication) in my test lab.Domain controller is windows server 2012 R2, Access resources are few web applications hosted on...
View ArticleUnable to update untrusted certificates store
Hi all, I have KB2813430 installed on my company's Server 2008R2 machines and have followed the instructions in the document linked below, but still am unable to get the Untrusted Certificate store to...
View ArticleActive Directory Cert Services Will Not Start
I am unable to renew certs in my domain. My CA ADCS will not start, error from event log "Active Directory Certificate Services did not start: Could not load or verify the current CA certificate....
View ArticleUNABLE TO RETRIVE RMS TEMPLATE
HI ,I install RMS on standalone serverin our file server just we go to file management task and go to action : i find ( cannot retrieve RMS templates )need suggestions. MCP MCSA MCSE MCT MCTS CCNA
View ArticleAll accounts in active directory are locked
Suddenly all account became locked and it still continue. I disconnect the server from network, restart and the problem keep on. Moreover, with the server without network i create a new account and it...
View ArticleIPAK destroying Adv Firewall connections
Last month we have deployed the IPAK on windows server 2008 R2 servers, which later on found some Application has been stopped running. Found there was a firewall Inbound connections were in blocked...
View ArticleCertificate Web Enrollment Policy Service, Access was denied by the remote...
Hi,After installing the Certificate Web Enrollment Policy Service and the Certificate Web Enrollment Service by MS white paper. I am stuck at entering the URI in a GPO. When I enter the URI and click...
View ArticleNew bug in IIS/SSL code ?
Hello Team,Windows 2012 R2 Datacenter with all patches. IIS with SSL and SCEP (NDES) service.Problem occurs only when client is proposing SSL RSA cipher suite. For DH cipher suite everything is working...
View ArticleTLS fallback protection in IE for POODLE remediation
So Chrome supports TLS_FALLBACK_SCSV now and Mozilla has announced that they would have it in early 2015. Does MS have plans to enable support for this in IE to address the SSLv3 vulnerability?
View Article