Guest account access - how can I determine what is attempting this?
HI All,Please see following alerts from our Server 2008 Standard server:Can you help?An account failed to log on.Subject: Security ID: CONTOSO\administrator Account Name:...
View ArticleWe have ROOT CA and Subordinate CA in the enterprise . Found certficate...
We have ROOT CA and Subordinate CA in the enterprise . Found certficate issued from both the CA to clients. Any reasons for this issue ?Raghavendra Bhat
View ArticleClik here to view.
Cannot sort in file/folder access control list in 8 or Server 2012
I use Windows 8 and Server 2012 Datacenter (with GUI). In 7/2008R2, I was formerly able to get properties on a file or folder, go to Security tab, click Advanced, and sort the access control list by...
View ArticleAD CS Key Archival Certutil -getkey
Hi guys, After searching a while on the internet. I will post my question here.I'm trying to get a key from a certificate. So i enter this command in command prompt. certutil -getkey...
View ArticleEvent ID 529 issues
We are getting these failures every 10 minutes in our security log. It happens for 18 users so 18 failure events every 10 minutes.Any tips on troubleshooting what is causing this?The IP address below...
View ArticleWindows 2008 SCEP Network Device Enrollment Serivce
I was wondering if anyone knows what the prerequisites are for the Network Device Enrollment Service in W2k8?I know it requires enterprise version of server, but that's all I can find.I'm specifically...
View Articledifferent ocsp servers for internet and intranet users
Hi All,We are now in designing phase of Two Tier Microsoft PKI 2008 R2. Our security team has raised concerned about OCSP/CDP server as it will open for anonymous access and asking whether can we have...
View ArticleMSMQ Returns "Timeout" Exception, Windows Server 2008 Showing Logon Failures...
Hi, hoping someone could help with this, it's driving me nuts. I'm on a development workstation running Windows 7 Pro 32-bit. We really heavily in our development environment on MSMQ services....
View ArticleModify NTFS perm qstn. Also scripting permission changes with powershell
Hi, I'm wondering why giving a user Modify perm on a folder gives them Delete permission, but not Delete Subfolders and Files. My assumption is that it's because Delete trumps Delete Subfolders and...
View ArticleSingle Sign-on VS Legal Disclaimer Banner
I just noticed that when we use SSO with our disk encryption, it hangs at the legal banner prompt in Windows and the user has to click though that to continue.It didn't seem like a big deal except that...
View ArticleMS Base Smart Card CSP not available on the CA
HiI am looking at Virtual Smartcards on Windows 8, and am struggling with enrolment. From following the evaluation guide provided by MS, there is one step that I cannot complete as part of setting up...
View ArticleLog user change password in domain
Dear allAny method to log user change domain password?And where (which workstation) it change?thx a lotQ K
View ArticleHow to create a Self-signed cert with long expiration date?
Hi,I'm running Windows 2008 R2, when I create a self signed cert, the expiration date is only one year out. How would I generate a self signed cert for 5 or 10 years....or can I? Thanks,J
View ArticleServer 2008 and custom password filters?
We are preparing to migrate to Windows Server 2008 for our domain. In our Windows 2003 domain, we have a custom password filter and it works properly. When I try to use the same DLL in our Windows 2008...
View ArticleSecurity Compliance Manager - beta baseline for SQL Server 2008/SQL Server...
Hello,I'm looking for a baseline for MS Security Compliance Manager to do an audit on SQL Server 2008/SQL Server 2008 R2. Microsoft announced this beta baseline earlier. I need to do a security audit...
View ArticleSmart Cards
If smart cards are used for AD authentication, does the user still need to know their user password and change the password as regularly as recommended without a smart card.What costs and...
View ArticleInstall a CA using an existing certificate
When I install a new CA, if I select the "use an existing private key" / "select a certificate and use its associated private key", I'm shown a list of certificates, which are the certificates of the...
View ArticleTurn of automatic root certificates
I want to Turn off Automatic Root Certificates Update, which I feel can be done using the group Policy. But I am not sure what Repercussion it going to have. From the description I realise that if we...
View ArticleDisallow a service to run unsigned .dll files.
Hi all,I have some .dll files that are running with my IIS. These files are signed by a certificate I made. My question is how can I ensure that IIS (or another service/computer) only run those .dll...
View ArticleSonic wall tz200 vpn tunnel and permissions
I have two tz200 sonicwalls and have created a vpn tunnel.One side sees the network resourses just fine but when I try to get to the other side it tells me "you might not have permission to use this...
View Article