Clik here to view.
Cannot sort in file/folder access control list in 8 or Server 2012
I use Windows 8 and Server 2012 Datacenter (with GUI). In 7/2008R2, I was formerly able to get properties on a file or folder, go to Security tab, click Advanced, and sort the access control list by...
View ArticleWifi users failed to authenticate after certificate renewed
hi team, I have some IAS /CA issue need your advice, thanks. we have a wifi network, Aruba WIFI AP, IAS radius server, 2008 root and sub CA servers, AD. after we renew the expiring cert on subordintate...
View ArticleRoot Domain - Enterprise Admin Group
Hi Everyone,Is there a way to completely remove Enterprise admin group/Root-Administrator right from Child domain? (i.e. removing only Enterprise admin group from child domain-administrators group...
View ArticleHow safe is it to run Windows Server 2008 R2 datacenter without SP1?
I manage a Windows VPS on hosteurope.de. I've been trying to update it to SP1 - it says Windows Update are disable by group policy, and workarounds found online don't seem to work - same thing for...
View ArticleDownload for ISA 2006
I'm trying to find a download for ISA 2006 install files but I cant find it anywhere.Can someone point me in the right direction.Yes i know its old, but its needs for what im trying to do.
View ArticleMaximum number of acl entries on a NTFS partition?
Hi,For a NTFS drive, is there a limitation of ACLs for a folder? I'm not sure if I can set infinite number of ACLs.
View ArticleDo I have to use an FQDN for the CRL server name?
I have several test domains. They have no network access to each other. I'm setting up certificate services for them. I'd like to share a single (standalone) Root CA and a single standalone Policy...
View ArticleSmart card logon errors on domain controller
I am running a network with two domain controllers, both configured for smart card logon. Both servers were working with no errors but then they started giving users errors the first 3 or 4 times they...
View ArticleLocked out as Administrator
C: drive is box will not share files. Locked denied access.No drives on computer system are allowed by (myself) adminstrator. Unableto configure/change/remove user accounts. Unable to share files....
View Article802.1X Null User SID
Hello! We're using 802.1x with user authentication with some success. However, there are a couple users that will get notifications that "additional authentication is required". They type their...
View ArticleAD CS netscape extension
Hi, I need to add the netscape extenision 2.16.840.1.113730.1.1 in my certificate. I've enabled this OID in my CA. How to set the value ? I need to set static value for all client's certificates. I've...
View ArticleCertGetCertificateChain() method fails revocation check
Hi, We have implemented OCSP on our gateway using CertGetCertificateChain API. However, though certutil -url verifies the certificate on the gateway correctly, the API returns the following value in...
View ArticleAdmin shares available to non-administrative users over loopback address
I have several RemoteApp hosts, they all have MS excel installed. All hosts are covered with multiple lockdown technologies including Applocker, Group Policy and IPSec. All drives are restricted via...
View ArticleProblems with security logs
Hi!I have a few of virtual machines on the Hyper-V for testing:1. Win Server 2008 R2 Enterprise - Domain Controller2. Win Server 2008 R2 Enterprise - SQL 2008 R2 Express3. Win Server 2008 R2 Enterprise...
View ArticleKB2813170 causes reboot loop on Server 2003 x64 servers
After installing KB2813170 (which updates the kernel) and rebooting, on one of my servers running Windows Server 2003 Enterprise Edition x64 SP2 begins to boot up, but then shows an error screen (which...
View ArticleDisabling the TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA cipher suite
Hi,I'm trying to figure out how to disable the TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA cipher suite on a Windows Server 2003 Enterprise Edition x64. In general, I'm trying to disable the weak ciphers, and...
View ArticleWindows 2012 DA - Windows 7 Client CRL problem
I have a windows 2012 DA configuration using an internal MS-PKI. The CRL is published externally and included in the certificates. Windows 7 clients in my pilot can connect just fine, as long as the...
View ArticleCertificate Authority could not be verified because a server is currently...
I have a standalone machine that is running the Exchange 2010 Edge role. As part of this function, I need to assign a TLS certificate to the server. I am using the instructions provided...
View Articlelog the mac address of client logging into DC?
Does anyone know if Server 2008 R2 logs the mac address of a user's client computer that's logging into the domain controller? And if not, any way to make it do that?
View Article