SSTP VPN client PEAP certificate with Smart Card Logon not working on Windows...
Hello,I have come across a weird problem with client certificates on Windows 8. The clients have been issued Client Authentication and Smart Card Logon certificates. Everything works fine from Windows...
View ArticleIP Protocol ID 50 (ESP).
I have IP Protocol ID 50 (ESP) allowed on my Windows 2008 R2 Windows firewall and working fine.My question how do I monitor that IP port number through the command line (netstat) whether it's in a...
View ArticleDecrypt files
I work at has EFS issue. All files are encrypted on file server (end user home share). end users certificates expired that encrypted the file. Now encrypted file can not be opened or decrypted by end...
View ArticleAuditing Tab Options - Apply to
Could someone please define the Advanced security settings properties page - permissions tab- auditing entries-apply to options- ? I need to apply RO access to a file within a folder. The requestor...
View ArticleDon't Know How To Change Certificate Key Usage Properties
I am trying to provide a domain controller certificate to a 3rd party vendor that handles password changes. I logged onto a domain controller as an enterprise admin. I used the Certificate Request...
View ArticleHow to install and start Bitlocker Recovery Password Viewer on Windows Server...
I have spent several hours trying to find documentation on how to set up full BitLocker recovery information on a Domain Controller in a pure W2K12 environment. There seems to be a lot of steps and...
View ArticleContinuesly am receiving logon and logoff security events logs in windows...
Please help me out in this am Continuesly receiving logon and logoff security events logs in windows server 2008 why this is happening and how to resolve it?
View ArticleSome settings are managed by your system administrator
In Internet Explorer 7, theSecurity tab of the Internet Options dialog box displays the following message to indicate that settings are managed by the system administrator: Some settings are managed by...
View ArticleRe-issuing new certs to all users transparently if there is a risk certs been...
To avoid service disruption what is best method to get new certs auto enrolled to all workstations and computers ? want a method ideally without revoking the old certificates first until new certs...
View ArticleWhat certificate validation checks are done in CryptoAPI?
Dear all,I was reading NPS-related certificate page on technet:Certificate Requirements for PEAP and EAPhttp://technet.microsoft.com/en-us/library/cc731363.aspxI was going through this sentence:The...
View ArticleSecure Server Certificate about to expire - Event ID 64
I have two Windows 2008 R2 domain controllers running in native mode. The DC holding the all the primary roles is logging Event ID 64 on a regular basis: Certificate for local system with Thumbprint...
View ArticleCould not connect to the Active Directory. Active Directory Certificate...
Event properties – Event 91, Level Error, Event ID 91, Date and time 5/10/2012 11:29:48AM, Service CertificationAuthority-------General: Could not connect to the Active Directory.Active Directory...
View ArticleWindows Server 2008 R2 and UAC and "you don't currently have permission to...
Running Windows 2008 R2 server. I would like to continue leveraging the UAC feature. I have these two UAC settings deployed via a GPO:1. User Account Control: Behavior of the elevation prompt or...
View Article401 - Unauthorized: Access is denied due to invalid credentials
After installing MSCEP, enter http://Server2008/certsrv/mscep_admin in the browser.Enter correct user name and password in pop-up box. Windows 2008 keeps rejecting the correct user name and password....
View ArticleCertUtil.exe on Windows7 Admin Of 2008 PKI Server
On a client PC running XP SP3 with CertUtil.exe installed it is possible to revove a certificate on a 2008 PKI server using the following command:certutil.exe -v -config...
View ArticleDoes creating Forest trusts merge DNS?
Hello, just a quick question before I create a forest trust...I have mydomain.int and mydomain.co.uk (Both with DNS servers), and I want mydomain.int DNS not to propagate to the internet. If I create a...
View ArticleMultiple root CA's exist in domain
I inherited a domain structure that has taken me awhile to clean up. Long story short, the previous administrator had no idea what he was doing. He had attempted to install root CA's on multiple...
View ArticleKill expired SBS certificate
We were running a SBS2003 server and have since (around 2 years ago) migrated off of SBS and currently have Windows 2008 r2 domain controllers and Excahnge 2010. Recently, all the systems have been...
View Articlewindows ACL
Hi,Is there a power shell command which generates report of the groups and individuals who have rights to a network shared folder?Thanks.
View ArticleCan't log into the Administrator account on SBS 2011
We are having some Quickbooks problems were Remote Desktop users can't create PDF's from invoices. It says unable to create PDF & try again. Quickbooks support is trying to login in remotely (not...
View Article