Centralize audit events on single DC
Hi,I woluld like to know if it is in some way possible to collect in a single centralized location al the security audit events collected by all DCs in the same domain (Windows 2008 R2 and Windows 2003...
View ArticleEvent ID 13 for autoenrollment in DCs
After some firewall changes, some DCs in the Domain, not all, failed to renew Kerberos Authetication template, using auto-enrollmentThe strange thing is that we can enroll manually with success on...
View ArticleCertutil -crl
Hi,i'm following a tutorial to configure a two-tier pki hierarchy. I'm at the point to configure the AIA and CDP.When I enter certutil -crl on the issuing CA I get this:PS C:\Windows\system32>...
View ArticleWhy we need to Publish the Root CA Certificate and CRLon subordinate CA...
Why we need to Publish the Root CA Certificate and CRLon subordinate CA certenroll folder and local store and active directory ?Raghavendra Bhat
View ArticleWin 8 Bitlook Encryption C:\ without TPM how to ...
Mar. 05 2013 04:11~04:14 win8pro Win 8 Bitlook Encryption C:\ without TPM how to ... for the error retouch ?BleuOisou path ..// bitloock...\
View ArticleWhat type of Certs can SCEP create?
I have a RADIUS policy for WiFi access that requires a certificate to be on a WiFi device, e.g. iPhone. I have this working using Client Authentication certificates, but the process is very manual.We...
View ArticleLDAPS from client computer getting error: The certificate received from the...
Hello All,I have AD setup detailed as below:-Parent domain - parent.comChild domain - child.parent.comMachine part of parent.com – machine1.parent.com Using ldp.exe, I can connect to port 389 (non SSL...
View Article2008 R2 SP1 Can't start Active Directory Certificate Services - Object was...
Can't start Active Directory Certificate Services - Object was not found 0x80090011 (-2146893807)This is the resulte of the certutil -verifystore mymy ================ Certificate 0 ================...
View ArticleServer 2008 R1 Standard - Event 1025, Security-Licensing-SLC
Hi Guys,Hopefully this will be a quick one. I have looked on-line and although people have experienced the same issue, I have yet to see a response that adequately addresses exactly what impact this...
View ArticleDownload security updates for a windows server 2008 in a closed network(no...
May I know how to download up to the latest update for windows server 2008?I heard that I have to start from 2008, then 2009 up to updates for 2012
View ArticleLocal Groups in Windows 7
Hello, I am looking for detailed information about local groups in Windows 7 but I do not find anything. I want to know about differences in permissions on the registry, or another information that can...
View ArticleDirectAccess & 2-Factor Authentication
Please see my question here about DirectAccesshttp://social.technet.microsoft.com/Forums/en-US/forefrontedgeiag/thread/21cf1165-62dc-483e-9145-0e1e61683c5b
View Articleeventvwr
I just had a 'phone call from someone asking me to run this on my computer but it didn't feel right so I politely rang off - should I be running this command or ignore it?
View ArticleCertificate Strategy
Hello,I have a small environment where I want to host Exchange email (Web App) and Terminal Services via TS Gateway. Since both require an SSL certificate and port 443 could I just make one certificate...
View ArticleGetting a certificate for a server, remotely, using Get-Certificate
I am trying to use the PowerShell Get-Certificate cmdlet to get a cert for a server Virtual Machine from the vm host.Here's the scenairo.1. Host computer is Server2012 Enterprise with Hyper-V running....
View Article** Probelm with renewing self-signed certificate for Remote Desktop Gateway...
I have a Remote Desktop Gateway Server installed, certificate is self-signed.I works almost half year, I find the certificate will expire soon. SO I tried to renew this certificate through...
View ArticleFull-featured certutil on Windows 7 without installing WS2008 Resources Toolkit?
Since we are gluttons for punishment, we are attempting to do an enterprise-wide roll-out of s/MIME certificates without buying something like FIM or another certificate management tool. I am working...
View ArticleADCS Re issue Certificates to DCs
Hi We have a Root CA and 2 SUB CA in Win 2k8 R2 version. My DCs(around 5 out of 8) got certificates from the a SUB CA and other 3 DCs got certificate from Different SUB CA. i want to configure all the...
View ArticleDefault settings for a DC in a 2008 Domain
Is there any document out there that has what the default settings are for the security options and user rights assignments settings are for the DCs for Windows 2008. I can't load the MSDTC and get...
View ArticleI wanted to know if I need to change the CRL vailidy period , is it same as...
I wanted to know if I need to change the CRL vailidy period , is it same as CRL Overlap Period .Raghavendra Bhat
View Article