Install rights for a simple domain user
Hi Everyone,We have Windows Server 2016. I have a simple domain user who run/manage applications and services on this server and it works fine. I would like to give 3 kind of permissions for this...
View ArticleCRL and CACertPublication URL unclear
Hello everyone,I am installing an internal root CA at the moment. I came to a point, where I wondered, if everything is configured as intended. Since I am not very experienced in setting up a PKI...
View ArticleUAC changes are not in log event?
Dear Community,on a Windows Server 2012 R2 Standard edition, i try to find the log event of changes on UAC level (disable, enable, change severity of UAC level) but i can't find.I search o Event Viewer...
View ArticleCached credentials and disabled accounts
Hi,Scenario:User Account John signing to workstation using his domain credentials. On that workstation also Max has been signed earlier. Max have administrative credentials ot the workstation.John ask...
View ArticleHow to verify the private key in certificate
Hi Everyone,Can we verify the private key of certificate using certutil.I would like to verify one certificate, which is not showing key symbol in personal store. I believe if its not showing key...
View ArticleReplace a damaged CA Server with a new one
Hi all, Our domain has a CA Windows 2008 Server running since many years now. It got damaged and we spend several days trying to restore it. Oddly, while it was down for several days, nothing impacted...
View ArticleSending request to OCSP server manually
Hi All,I am testing customized SCOM pack pertaining to PKI/OCSP. Below is the event which comes from OCSP server whenever the CRL gets expire and CA is not in active state.1) I am stopping the CA...
View ArticleWindows Server 2012R2 | Windows Event Forwarder Issues (Event: 102 / Code: 5004)
Hey all, I'm currently trying to implement Event collection in our environment but, I cannot get WEF working. The following are things I've done: 1. Configured winrm on the client and collector...
View ArticleHow much of my web browsing can my landlord see?
I live in the UK, in a complex of apartments, about 50 apartments under one roof. My landlord is what in the UK is called a housing association, a private body that provides housing to poorer...
View ArticlePort Enable in Firewall
Hi All,I have enable these ports "137,138,445" on windows server 2012 r2 firewall in base server and in VM also but still this port showing blocked.We have to open these ports for sharing purpose to...
View ArticleAdding a Cert to Root CA store in PowerShell/.NET - how to avoid the popup?
For testing, I am creating a self-signed certificate I am using in the testing. I want to make my local machine test it, so I just copy it into the local root store. Sadly, Copy-Item with the...
View ArticleSurface Go in Win 10 S mode giving 0x80090016 and "keyset does not exist"...
Hello, I have a Surface Go (64Gb model) running Windows 10 in S mode that has been rock solid for the past month and a half I have had it. However, today I attempted to sign into the device and was...
View ArticleClik here to view.
Revoking Subordinate CA Certificate
Hi Technet, I'm currently in the process of setting up a new subordinate CA. We're using our current OpenSSL root CA to sign the CSR for our Windows Subordinate CA. Unfortunately we're having a few...
View ArticleMicrosoft CRL Validation (crl.microsoft.com)
Hi,I am trying to Implement to fix an issue in microsoft application startup delay in a disconnected environment. Its trying to access crl.microsoft.com. So its trying validate the certificate in CRL...
View ArticleHow to create a cert with Data Encipherment (10) key usage using AD CS???
I have to create a very specific certificate that has a key usage of "Data Encipherment (10)". I can create self-signed certs with this by using the "New-SelfSignedCertificate -Type...
View ArticleClik here to view.
Question about Windows Audit Logging policy - I'm seeing conflicting settings
Hello experts, We are running Active Directory current Domain function level is Server 2012 R2 and Forest functional level is 2008 R2. I have a quick question about Windows Audit logging for...
View ArticleADCS cannot import PFX file with CA certificate and ECDSA private key
I had used ADCS to create Standalone Subordinate CAs before, with ADCS generating the ECDSA P256 private key (using the ECDSA_P256#Microsoft Software Key Storage Provider) and a CSR, then the parent CA...
View ArticleSetting up ipsec
Hello,Is it possible to setup ipsec to secure my networks traffic? I i only find tutorials for vpn.Many tha ks.
View ArticleCN=MS-Organization-P2P-Access [2018] expired
We have got the below SCOM alert from couple of Windows 2016 standard servers Kindly suggest a fix for this issue, else is there any best practice to cleanup from registry The certificate expires in 0...
View Article