account unknown in user profiles
On all our domain controllers (server 2003 R2 and 2008) we have found an "account unknown" listed under My computer-properties advance-user profiles-settings. My concern is that the Account Unknown...
View ArticleWhy we need to Publish the Root CA Certificate and CRLon subordinate CA...
Why we need to Publish the Root CA Certificate and CRLon subordinate CA certenroll folder and local store and active directory ?Raghavendra Bhat
View ArticleCertificate Service - Web Enrolment - Mobile Devices
Hi all,-I have set up a server with a client certificate with web enrolment on Server 2008 R2 Standard, IIS7, which is working with Windows computers across the web from our DMZ. The certificates work...
View ArticleWindows 2008 Core Server - CA, how to set permissions on templates
using Certutil how do i set permission on templates. If I do a certutil -v -catemplates all the templates show access denied. This is a subCA but I cannot renew his cert.
View ArticleGetting a certificate for a server, remotely, using Get-Certificate
I am trying to use the PowerShell Get-Certificate cmdlet to get a cert for a server Virtual Machine from the vm host.Here's the scenairo.1. Host computer is Server2012 Enterprise with Hyper-V running....
View ArticleProblems with Root CA, unable to process certificate requests
Hi there,We have been asked by a client to renew their Exchange server certificate, however when we tried to renew the cert we received the following error:Event ID 22 Certification AuthorityActive...
View ArticleAppLocker allows unsigned apps to start using a publisher rule?
Hi all,I am looking at deploying AppLocker policies to prevent unauthorized software from being executed. I have created a test lab (fully patched W2K8 R2 SP1) for this purpose but have hit the...
View ArticleImpersonation of a user to start an application
I am having a problem here with impersonation of users.What i need to do is to set all domain users from one group to impersonate one domain user which needs to start one .exe process on the server. I...
View ArticleHow to add custom field into PKI request
Hello,I have a question concerning our PKI infrastructure.Can I add to our stand alone CA custom field.I mean if somebody enter web site htp://OURCa/certsrv/---> "Web Browser Certificate" or...
View ArticleCertificate for Non-Domain Computers
Hello,I am trying to request a device certificate for laptops that are not on my domain. I am referencing this article to set up my CA....
View ArticleShould ServerB certificate live in ServerA's Personal \ Certificates store.
So we have some contractors doing work for us, and today they called me for help. While helping them I Remote Desktop connected to one of their machines, and using the MMC Certificate (Computer) snap...
View ArticleMissed firewall on W2k8 R2
Hi!After running "boot.wim.exe" firewall service of server lost.How can I recover it?(The Windews Deployment Service boot.wim didn't worked correctly.)
View ArticleDoes Microsoft have product like PGP Netshare?
Hi AllI am wondering if Microsoft has an application like PGP's Netshare or MacAfee end node encryption? We have a PCI requirement to create shared folders that will store PCI data. It needs to be...
View ArticleKSP, SafeNet Key Storage Provide, Generete a Private Key
I use KSP for generate a private key in a HSM, SafeNet Key Storage Provider in specific but when process end the private key is doesn't storage in HSM, this is storage in the machine. How to do for...
View ArticleAD CS private key export
I have a standalone root CA in a domain. I set the "Follow the settings in the certificate template, if applicable, Otherwise, automatically issue the certificate" option set. This is simulating auto...
View ArticleHow to assign a certificate to a service?
Essentially just what it says. I know when I launch the MMC and try to add a Certificates snap in it asks me if I want a User, Computer, or Service snap in, so how do you marry a cert to a windows...
View ArticleHow can I give permissions to the user "Network Service" so it can access the...
Hello,I am trying to give permissions to the user "Network Service" so it can access the local machine root certificate storage, but I am not sure if I am doing it right. In the Registry Editor in...
View ArticleClik here to view.
CA continuously autoenrolls to the same client computers
This problem might be related to the following problem I have explained in this thread: http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/da890a64-736e-4bae-b9d8-427a5cf3a0edFor...
View ArticleCertificates for default FIM accounts misuse
HiI've had a look at the configuration of our enterprise PKI. We're using a Windows 2008 R2 EE server for the CA, FIM CM and a dedicated SQL DB. FIM CM creates three default accounts (FIM-EnrollAgent,...
View ArticleUser can't move files
I'm working in Windows Server 2008. I have a user account that has been given permission to Modify a folder, that is set to apply to the folder, subfolders and files. When the user tries to grab...
View Article