Virtual Memory - Paging File setup
I have setup a page file on one of my drives (windows server 2008 R2), looks OK after I rebooted the server. But when I checked on the following day it was set to NONE. Is there any way to find logs on...
View ArticleHigh network i/o spike when opening network folder with certain exe file and...
I have an application that is opened from network share and worked fine for years. Up until several months ago I started to notice the icon the the exe file not displaying right away when browsing the...
View ArticleIs SubinACL working properly on Windows 2008 R2 ?
Hi everyone, Please, I would like to know if SubinACL software is working fine on Windows 2008 R2. In the software page :...
View ArticleDo i need anti-virus on windows server 2012 if i run exchange server on it
Hi people,If i run exchange server 2013 on my windows server 2012. Do I need a antivirus to my machine i use online anti/malware spam. But do i still need a protection ? Of course my firewall is...
View ArticleOCSP - DMZ Redirect
Hi,we implemented our new pki with root and Sub ca. CRL checks works fine with http://pki.domain.tld/crl/subca.crl. OCSP Server Install and Setup is done. Internally the ocsp revocation checks works.We...
View ArticleCertificate informations
Hello Team.Can i have a command to get the list of all certificates which are issued by a Certificate template. I tried to use the filter option in the "issued certificates" folder, but i am unable to...
View ArticleUpdate Root Certificate and Untrusted Certificate lists in a disconnected...
I've been attempting to update The root certificate list and the untrusted certificate lists in a disconnected environment.I have installed the update that allows me to configure this: KB2813430.I...
View ArticleRenewal of Auto-enrolled certificates made through web enrollment
I have a scenario where users request certificates through web enrollment. We have certificate templates with Auto enrollment which are working fine. Users request a certificate and there is no need of...
View ArticleBlock Auditing of VSS locations
Hi,I need to have File System Auditing turned on to monitor my file servers. I've got my SACLs setup monitoring domain accounts. However, every time a backup runs my security logs are overrun with...
View Articletrack down certificate installation source
Not sure if this is the right place to post this. I will give it a try anyway.I found that all our domain machines have some old certificates installed in the local trusted root store. These...
View ArticleWhat is an KDC Root Key
can someone please answer the following questionI understand what a KDC is and I understand what a root certificate is (e.g. self signed CA cert)However I am not clear in what a KDC Root Key is in the...
View ArticleDisable Windows SHA-1 deprecation enforcement.
Hello Team,I could see a white paper that says that the below Registry key change can stop SHA-1 Deprecation.HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType...
View ArticleHow to strip down NTFS level security of cmd.exe down to only 'local admins'...
Hello, For IRS security requirements, we need to restrict access to C:\Windows\System32\cmd.exe for web servers to the following: System: Full ControlLocal Administrators: Full ControlBut default...
View ArticleOffline Root CA Deleted!!!
Hello, While decommissioning over 150 or so virtual machines with approval, my new hire mistakenly deleted the VM that was our offline Enterprise Root CA (it was powered off for over a year) and...
View ArticleWindows 2012 : Email Notification for Password Change.
HiWhether any option to get the E-mail notification after changing the password by the any user in the AD.Infrastructure : Windows 2012 DC and Exchange 2010
View ArticleWant Certificate Revocation to happen immediately or within 30 minutes
I have just built a new PKI infrastructure but i noticed that after revoking a certificate, it does not apply till the next day. I have reduced the CRL delta to 30 minutes. It pass 2 hours now but its...
View ArticleClik here to view.
Windows 7 fails to enroll Certificate, but Windows 2012 works fine
I have come across a deployment where Windows Server 2012 R2 based two-tier CA is deployed (offline root CA, enterprise sub CA). Both Root CA and Sub CA installed on dedicated physical servers...
View ArticleClik here to view.
domain administrator privileges denied
I am the network administrator of a network containing 6 servers and about 30 client computers. The domain is a windows 2008 R2. Today I went to all the computer to change a setting in Local security...
View ArticleDuplicated Digital Certificate
Hello everyone dose anybody know how can i determine the parent of duplicated certificate template in Microsoft CA? I have some template certificates and I want to know is there any way to find from...
View ArticleCannot backup root CA
After we migrated our root CA to 2012R2 we have not been able to backup the root CA. The error is:"Windows cannot backup one or more private keys because the CSP does not support key export".In the...
View Article