Windows update signing certificate invalid on Windows version prior to 8.1
Hi Everybody,Hopefully this is the right section for my question.On a Windows 2008 server, we have a replica WSUS installed. An update is not being installed as the certificate verification fails. When...
View Article401 - Unauthorized: Access is denied due to invalid credentials
After installing MSCEP, enter http://Server2008/certsrv/mscep_admin in the browser.Enter correct user name and password in pop-up box. Windows 2008 keeps rejecting the correct user name and password....
View ArticleEffects of Disabling Null Sessions on Domain Controllers
I have been tasked with finding out what will happen to our domain controllers and the systems that depend on them when we make the change to disable null sessions on our domain controllers. We are...
View ArticleCan I setup a seperate PKI infra in the same domain along with current PKI...
I have a offline root CA running Windows 2003 and a Enterprise Sub CA running Windows server 2003. I want to move to Windows server 2012. Can I deploy a offline root CA running Windows server 2012 and...
View ArticleAutomatic Smart Card Certificate Renewal
We have a problem where our Smart Card certificates are starting to expire but the automatic renewal process is failing.Is it actually possible to auto renew Smart Card certs without requiring any user...
View ArticleRemoving a Certificate Authority from a domain when the physical server no...
So I have two certificate authorities in a domain that I inherited that were set up on servers that have been taken out of service years ago, so I am not able to do the proper CA uninstall. I get...
View ArticleLDAP over SSL on Windows 2012R2 Server DCs - TLS 1.2 not working
Hi there,We've upgraded our DCs from 2008 R2 to 2012 R2.After moving the Enterprise CA from 2008 R2 to 2012 R2 domain controller (same IP, same hostname) according to this guide:...
View ArticleHow to enable TLS 1.2 on Windows Server 2012 R2 for LDAPS clients.
I have some OpenLDAP servers that were pointed to Windows Server 2003 using LDAPS, working fine. New AD boxes running Windows Server 2012 R2, and now I am getting this error:"An TLS 1.2 connection...
View ArticleRemote Desktop Certificate Deleted Accidently
I have accidently deleted the Remote Desktop certificate from my windows server 2012 r2 server. Is there a way to bring it back?
View ArticleUnknown user name or bad password
Hi theredoes anyone know whether there is a way to see if a server is connecting to another server on the network at log on?basically, we have two sites, connected via a vpn, but seperate domains and...
View ArticleClik here to view.
NO password not working on CERTSRV
I have Exchange 2010 on server 2008R2 I have root CA installed and and also web enrollment feature is also installed this was before I joined the company and now the exchange certificate is going to...
View ArticleWhat do I need the Computer certificate for in an Active Directory domain?...
So we are trying to clean up the thousands of certificate we have deployed. We are on a 2008 R2 Active Directory and have been using certs for about a decade. With all of our machines auto enrolling...
View ArticleAttempting to use certreq -enroll to enroll to a client authentication...
This has been an issue for a while now. Trying to use certreq -enroll -machine [Template Name] on Windows 7 machines fails with not implemented. When I run this command with the -q flag I see that...
View ArticlePKI: Auto enrollment of SmartCard Certificates
Hi there,We are setting up a new SmartCard setup for users to logon with, but we are having issues with the users auto-enrolling the certificates. Our setup looks like this:1. The certificates are...
View Articlenet user and random passwords
When using net user <username> /random with default settings everything works fine.The moment /minpwlen is set to anything higher than 8 (with or without complexity requirements enabled and...
View ArticleProblem setting up OCSP in LAB "Bad signing certificate on Array Controller"...
Hello Can someone please help me with the following question.In my LAB I have setup the following (MSDB subscription)Windows 2003 R2 Active Directory (Forest and Domain at "Windows Server 2003"...
View ArticleMS CA gives error "The Parameter Is Incorrect"
Hi,I have a two tier CA hierarchy that was working just fine (receiving the certification request and issuing the certificates accordingly) since two months. I was updating the CRL configuration e.g....
View ArticleMy home network has been hijacked by 169.254.18.61 and I need help...
My event logs show that it has rewritten policy and has taken my ip address. I have blocked and blocked and blocked and this morning at 4am, while I was working, I found that he had opened a guest...
View ArticleComparision between Microsoft Products Vs Manage Engine?
During my review between Microsoft Products like WSUS, SCCM & SCOM we have recieved a proposal from Manage Engine that they have all in one solution and even better then Microsoft solution. the...
View ArticleReplacing SHA-1 certificate with SHA-2
We have a certificate that needs to be replaced. It is currently SHA-1, and we wish to replace it with SHA-2. We created a new certificate request and have received the replacement. The Root...
View Article