IE8 i get an prompt to add "http://" to the trusted sites.
When i try to navigate to certain websites in IE8 i get an prompt to add "http://" to the trusted sites.If i try to add it i get a message saying its an invalid wildcard sequence.How can i get IE to...
View ArticleKerberos Security / KDC errors
Hello.I have installed a Windows Server 2008R2 with AD DS (DNS, DHCP) and SQL 2008x64.Had a problem with SQL server agent that could not start with the default account (NT AUTHORITY/ LOCAL SYSTEM) so I...
View ArticleCertificate Template: create Custom OID
Hi,I need to create certificates with a Custom OID. The only way I found is to modify the certificate template (User) and to add it to to the Application Policies as explained here: On the Extensions...
View Articleproblem running pkisync.ps1 script from source forest as event triggered task
hi, I am trying to implement cross-forest certificate enrollment with win2008r2 and have been following the steps outline in http://technet.microsoft.com/en-us/library/ff955845(v=ws.10).aspx and have...
View ArticleClik here to view.
Problem Running Security Configuration Wizard On 2003 R2 Servers
Hi,I'm trying to run SCW on 2k3 R2 SP2 servers. After the "Select Server" stage, I get the error: "The selected server must be running Windows Server 2003 Service Pack 1":Tried to remove SCW and...
View Article401 - Unauthorized: Access is denied due to invalid credentials
After installing MSCEP, enter http://Server2008/certsrv/mscep_admin in the browser.Enter correct user name and password in pop-up box. Windows 2008 keeps rejecting the correct user name and password....
View ArticleSecurity alert Event ID: 529 Logon type: 3
Logon Failure:Reason: Unknown user name or bad passwordUser Name: susan (different every few mins)Domain:Logon Type: 3Logon Process: Advapi Authentication Package:...
View ArticleAD CS netscape extension
Hi, I need to add the netscape extenision 2.16.840.1.113730.1.1 in my certificate. I've enabled this OID in my CA. How to set the value ? I need to set static value for all client's certificates. I've...
View ArticleKB2829361 Significant Performance Degredation after applying
After installing KB2829361 I noticed a significant delay in processing input requests. This was easily overlooked if you don't know what you are looking for. Before installing, if I started up a:1....
View Article2008 r2 server security help
Ok, so me and a friend mutually own a server together. Since I'm better at coding and research, he wanted me to try and hack our site.. To see what kind of potential security exploits we may have, well...
View ArticleBest path to stop using the Administrator account?
Hi, My organization is running a domain at the 2k8 R2 functional level, and for the life of the organization, the IT department (myself included) has been undisciplined about not using the...
View ArticleCertificat Authority services can't start : event ID 100 can't find object
Hi, I got a single AD DS with CA role installed on itSince one month I got this issue : the service cannot start with this specific errorCode : Can't find object. 0x80090011 (-2146893807) Nom du...
View ArticleKRB_AP_ERR_MODIFIED
I'm receiving an error from one of my dc's, and it goes like this: The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server lparham1$. The target name used was...
View ArticleCertificate Authority errors
Hello,I am install Exchange server 2013 on server 2012 and one of the requirement is to install Enterprise Certificate. After follow the steps required by Microsoft I run into this problems.Event ID:...
View ArticleMicrosoft Windows Hardware Certificate Expired
How to update the Microsoft windows hardware certificate when is expire?
View ArticleCannot find object or property. 0x80092004 (-2146885628)
Hi,I am not able to install the certificate using the below command, strangely the same command had worked earlier ...certreq - accept "certificatename"Please do let us know what is the reason why it...
View ArticleProblems with security logs
Hi!I have a few of virtual machines on the Hyper-V for testing:1. Win Server 2008 R2 Enterprise - Domain Controller2. Win Server 2008 R2 Enterprise - SQL 2008 R2 Express3. Win Server 2008 R2 Enterprise...
View ArticleSecurity Group Modification & Impact on User Token
Hi all,I have a question that someone can hopefully provide some resolution to.---Scenario (Please notice there are 2 different domains (A & B):1) I create a Global Group in "Domain A" called...
View ArticleClik here to view.
Autoenroll fails with: "DNS name does not exist"
"Active Directory Certificate Services denied request 7054 because DNS name does not exist. 0x800725f2 (WIN32: 9714). The request was for DOMAIN\COMPUTER$. Additional information: Denied by Policy...
View ArticleHow to Reset Administrator Password Windows Server 2008r2
I recently logged on to our domain controller with the Administrator account and got the message that the password had expired. I changed the password in the displayed fields.After the session, an...
View Article