Kerberos Error 52 (Response too big) on MacOS
Hello Everyone,For one of the Mac machines Kerberos authentication fails with the following error.Client sends AS-REQDC responds with PreAuthRequiredClient Sends AS-REQ again with encrypted time...
View ArticleEvent ID 10028 - DCOM Error while installing web enrollment
Hi,I have encountered the following error while installing Certificate Authority Web enrollment:Active Directory Certificate Services setup failed with the following error: The RPC server is...
View ArticleUpgradation of Windows Server 2008 Enterprise Root CA and Subordinate CA to...
Is it possible to upgrade a Windows Server 2008 Enterprise Root CA and Subordinate CA directly to Server 2016 and is there any special thing that needs to be taken care of before upgrading the PKI...
View ArticleMultiple SmartCard Certificate Chaining
Hello, I've observed a strange behavior of smart card certificates. I use my SmartCard on different virtual machines. In the certificate store I can find my SmartCard certificate, which is identical on...
View ArticleNew-PAMRequest: Cannot validate argument on parameter 'Role'. The argument is...
Hello, I am trying to configure PAW scenario from this link: https://docs.microsoft.com/pl-pl/microsoft-identity-manager/pam/step-7-elevate-user-accessI stuck on the moment, when I have to run...
View ArticleS/MIME Email Encryption and Signing Using Internal Microsoft Enterprise Root CA
Is it possible to encrypt and digitally sign emails using Microsoft Internal Enterprise Root CA or a Third Party Certificate Services has to be implemented to do this job?Also, if anyone can let me...
View ArticleHow to enable support for Authenticated encryption (AEAD) cipher suites on...
Dear contributors,Qualys SSL LABS are reporting that an https portal running on a Windows Server does not have Authenticated encryption (AEAD) cipher suites enabled. I have not managed to get a...
View ArticlePermissions error during Cross-Forest Cert enrollment
Hello,When attempting to manually enroll for a Cert on a 2012 R2 server, I get the 'Certificate types are not available' msg with the 'You cannot request a cert at this time because no certificate...
View ArticleCN=MS-Organization-P2P-Access [2018] expired
We have got the below SCOM alert from couple of Windows 2016 standard servers Kindly suggest a fix for this issue, else is there any best practice to cleanup from registry The certificate expires in 0...
View ArticleUsing PS to generate INF file from cert
Howdy all,I am more of a Linux guy and got thrown into trying to figure out what to do about an ldap certificate that is expiring on a windows box because our windows guy quit. The windows server...
View ArticleEnroll Certificate from Domain Computer with Local User?
Is it possible to manually enroll a computer certificate on a domain joined computer while logged on as LOCAL\Administrator?I've tried through MMC and PowerShell using Get-Certificate, but both methods...
View ArticleUser cannot create connection when using windows10
My company has 2 servers with implemented kerberos . The first server is SSAS, SQL Server (version 2008 and no firewall) and the second server is SSRS (version 2008 and no firewall). Last month user A...
View Articlemrt.exe/_p WTF (Stands for: "Why The Frustration) Is this file good or bad????
Where do I find the signature for this as yet unidentified file so I can see if it has a MS signature?mrt.exe/_p
View ArticleWhat antivirus software do I run to protect Server2012 ?
I have files running on a desktop instance of Server 2012 ... and when I transfer the files to my Windows 10 workstation ... Windows Defender flags than as containing a virus. I now realize I am not...
View ArticleWindows Server 2012R2 | Windows Event Forwarder Issues (Event: 102 / Code: 5004)
Hey all, I'm currently trying to implement Event collection in our environment but, I cannot get WEF working. The following are things I've done: 1. Configured winrm on the client and collector...
View ArticleHardening of windows server 2012 and 2016
please suggest me for hardening of windows server 2012 and 2016
View ArticleSystem Services Template in local server security settings
Can anybody confirm whether microsoft has removed the system services from server local security settings for windows server 2012.When opening secpol.msc, it is not showing.how and where can i get it.
View ArticleI want o deploy bit-locker on My file server in domain environment and...
Hi Support,I want o deploy bit-locker on My file server in domain environment and multiple client will be access file serve. 1. How to protect organization data.2. How to deploy on client machine.
View ArticleAT command in 2008 Standard R2 broken after recent security updates
Did anyone noticed that after the Spectre and Meltdown patches recently released, any newly scheduled tasks, created using the AT command are broken? The task is created, but when you open Task...
View ArticleSSL for Web Enreoll server.
We have a root CA and the same server has NPS feature installed. This root CA also has aCertificate Authority Web Enrollment role installed. The SSL cert has expired for this Web enroll server.Domain...
View Article