Credential Roaming - deleting certificates
In an environment where Crednetial Roaming is enabled, when a user deletes a certificate am I right in thinking that certificate should not remain visible to the user whilst the tombstone period runs...
View ArticleBHOLD Core UI Settings
Hi,I have Installed Bhold Core Interface Version :5.0.1992 with all the Modules.When i try to open Home-->Model-->Users, Im getting the Error <<Warning{Requested registry access is not...
View ArticleMoving ISA2000 in different hardware
we are planning to Moving ISA2000 in different hardware, please advice steps. Server Name and IPaddress will be same
View ArticleAutomatic renewal of certificates through CEP / CES.
We currently have a PKI on Windows 2008 R2 and in this case as customers use notebooks with Windows 7 SP1. I have problem with the automatic renewal of computer certificate through CEP / CES. Services...
View ArticlePer URI based IP acl
Hi,Does IIS suppport per URI based IP acl? Looks like I can only set IP acl for everything
View ArticleSSTP VPN client PEAP certificate with Smart Card Logon not working on Windows...
Hello,I have come across a weird problem with client certificates on Windows 8. The clients have been issued Client Authentication and Smart Card Logon certificates. Everything works fine from Windows...
View ArticleSecurtiy database & User management
Hi All,I have a very big problem: since last friday all the computers of my domain have the mention "The security database on the server does not have a computer account for this workstation trust...
View ArticleHow to delegate the computer objects.
Hi All,I have delegated computers object on specified OU. I have followed the below steps for delegating controls to the user. I have noticed that, users are able to create computer object and they...
View ArticleSecure Server Certificate about to expire - Event ID 64
I have two Windows 2008 R2 domain controllers running in native mode. The DC holding the all the primary roles is logging Event ID 64 on a regular basis: Certificate for local system with Thumbprint...
View ArticleHow to duplicate ACLs for a hidden /Windows subdirectory
Directed here by the moderator of answers.microsoft.com. Please redirect me as necessary. I need to duplicate the ACLs from a peer sub-directory of /Windows to another with recursion. The target...
View ArticleWindows 2012 DA - Windows 7 Client CRL problem
I have a windows 2012 DA configuration using an internal MS-PKI. The CRL is published externally and included in the certificates. Windows 7 clients in my pilot can connect just fine, as long as the...
View Article2008 r2 domain controller cannot get cert from 2003 CA
A bit of background, currently have our CA on a 2003 server with two domain controllers one domain controller is 2008 R2 and one is still 2003 (in the process of creating a new 2008 R2 one). The 2003...
View ArticleIP Protocol ID 50 (ESP).
I have IP Protocol ID 50 (ESP) allowed on my Windows 2008 R2 Windows firewall and working fine.My question how do I monitor that IP port number through the command line (netstat) whether it's in a...
View ArticleFirewall - allow access to web site with changing IP address
I'm using Windows Firewall with Advanced Security on Windows Server 2007 SP2. Outbound connections are blocked except for specified exceptions. I need the computer to access forecast.weather.gov....
View ArticleReset password on Windows Server 2008 R2
Hi All, We have an Employee Self Service application running on standalone server. One of the feature of the application is "forgotten password", so employees can reset their own passwords. It works...
View ArticleThe revocation function was unable to check revocation because the revocation...
Hi,Implemented a two-tier PKI solution as follows:ROOT CA (OFFLINE) Issuing CA (Windows 2008 R2 SP1 Enterprise Edition) PKIVIEW reports no issues.Auto enrollment works on most of the estate but on...
View ArticleSecurity alert Event ID:4625 Logon type: 3
Our company is getting the same security alert 100-200 times a day in the morning, can anyone please help?An account failed to log on.Subject:Security ID: NULL SIDAccount Name: -Account Domain: -Logon...
View ArticleC: or System drive auditing access denied
I am trying to setup auditing on my entire C: drive which is also my System and boot drive. I am doing this to adhere to the DoD's STIG settings. These are rules the DoD wants to see on all their...
View ArticleEnable server manager access for nonadmin
hi, my boss want me to enable one supporter to access server manager on windows 2012 remote. he is not administrator. i looked about winrm remote but with no luck. please help. thank you.
View Articlecouple of certificate authority issues
2008 R2 Standard domain. the CA *was* upgraded from 2003. 1. if i create a new certificate template at the 2008 Enterprise CA level, it does not appear on the web enrollment site. only templates...
View Article