Monitoring Firewall Rule changes.
I have a Windows 2008 Server that has had several rules disabled that were enabled. Is there a way to find out who changed these rules and when?
View ArticleGenerate Code Signing certificate from a 2003 standalone CA
Hi all,I require a code signing certificate to digitally sign a few macros that will be deployed in my environment (all within the AD domain). We use a standalone Certificate Authority (Win Server...
View ArticleCertutil -backupkey Error
Getting an error attempting to backup my private key, and CA database.CertUtil: -backupKey command FAILED: 0x8009000b (-214893813)Certutil: Key not valid for use in specified state.I'm attempting to...
View ArticleWindows 2008 R2 Server Shared/folders Lose Security Settings.
I currently have UAC turned off because of other issues it causes. Currently we have an application that moves folders around under a Share, basically a document manager on the network. Periodically,...
View ArticleDisable "Automatically Connect when Network is in Range" via GPO
Hi All,So i have researched this to my whits end and I cannot find a solution to disabled the ability for a Windows XP client to connect to preferred wireless networks automatically...We need to have a...
View ArticleSecurity Group Modification & Impact on User Token
Hi all,I have a question that someone can hopefully provide some resolution to.---Scenario (Please notice there are 2 different domains (A & B):1) I create a Global Group in "Domain A" called...
View ArticleCDP and AIA location on same server with root CA
Hi,I want to configure a "Single Tier PKI Hierarchy" in my Windows 2008 AD Domain network.For this reason I have prepared a separate Server (CA01) to install the "Enterprise Root CA" and now I want to...
View ArticleCertificate Authority Issue
I'm trying to renew an Exchange 2010 certificate but when I navigate to http://CAservername/certsrv and click "Request a certificate" then "Submit a certificate request......" to get to the renewal...
View Articleadvanced audit policy dabbling and regretting
noticed a lot of "windows filtering platform" events on an 2008 r2 member server in a 2008 R2 domain.for grins, disabled windows filtering platform events on my GPO that sets audit settings. gpupdate...
View ArticleHow can 4 Windows 2003 web server freeze at the same time?
On Friday May 24th at 3:06, 4 separate Windows 2003 R2 SP2 web servers running IIS 6 froze up. The servers are installed on four Dell PE R300 servers. No crash dumps were generated, and there are no...
View ArticleNDES Installation - Service Account Selection Error - WIN32 1385 - Logon Failure
Hello All,Performing an installation with a client the other day. They have created a domain account. Together, we made changes to ensure the account satisfied the following conditions from the MS SCEP...
View ArticleAvoiding Smart Card certificates re-enrollment resulting from modifying the...
I'm working on configuring auto-renewal of the Smard Card certificates (Windows 2008 Enterprise sub-CA). As the process involves modifying the certificate template (the permissions at least), I'm...
View ArticleHow can I verify security settings on domain servers/workstations?
Hello,We are running a couple of server 2008 R2 DC's and pusing group policy to workstations/servers.Is there a way to double-check these settings are sticking 100%? (During a recent audit we have been...
View ArticleAnyones take on Steve Gibson's Opinion Of Internet Explorer handling of...
I am assuming Microsoft is aware of how Steve Gibson excoriates IE on his web site.https://www.grc.com/ssl/ev.htm--------------To quote:The Trouble With Internet Explorer:It's difficult to understand...
View ArticleAudit Failure Microsoft Windows security. 4625 Login
Reviewing log windows 2008 r2, found that windows 7 from two computer are constantly trying to start session. I spent antivirus, antispyware, malware, etc. and detects any virus, Trojan, worm, on...
View ArticleAlways Access Denied when choosing Automatically Enrol and Retrieve...
I am using 2008 R2 Certificate Services to issue certs across multiple forests (although don't let that muddy the waters).I have a need to issue certificates for use with s/ldap, so I have duplicated...
View ArticleHow to add\show uid in the subject of the certicate.
Hi,I'm trying to add a custom attribute (UID) to the subject name of certificates but could not figure how to do it..I'm trying to achive exactly what Brian Komar mentioned @...
View ArticleDisable private key export while creating pfx
Hi,We want to restrict the export of private key while the certificate is created at first place. We are testing to generate the certificate for a user and send the pfx file. While generating the...
View ArticleLingering Objects
When I run Repladmin /replsummary I see:NY-SERVER01 >60 days 3 / 29 10 (8606) Insufficient attribut s were given to create an object. This object may not exist because it may...
View ArticleRemove a single permission using ICACLS utility
HiI have a folder that contains two different ACL permissions on a single folder e.gmytestuser:(CI)(RX) mytestuser:(OI)(R)I want to remove only one permission from these two like the first one.I've...
View Article