Script running against IIS
Hi All, I've got an IIS box that appears to have an exploit script running against it everyday. When I look at the IIS logs there are multiple entries similar to this one: 2013-05-29 12:14:35...
View ArticleCA Enrollment Web Services
I want to be able to use Certificate Enrollment Web Service and Certificate Enrollment Policy Web Service for Internet-based domain members to enroll and renew their certificates. I have a couple...
View ArticleRemoving an IIS server's IP address from HTTP responses + IIS 7.5
How do i remove IIS 7.5 server's IP address from HTTP responses? Can someone helpKarthik R
View ArticleClient Certificates and new computer names.
For SCCM HTTPS use we have enabled an auto-Enrollment policy for all computer objects in our domain. They are getting the client cert just fine and it gets created with their computer name. My...
View ArticleOCSP Siging template issueing certificate frequently
OCSP Signing template configured with 1 year validity, still I can see many issued certificate using this certificate template. Is this default behaviour. Thanks
View ArticleHow to configure ActiveDirectory to write Bitlocker and TPM Information
Hi,i want to configure the ActiveDirectory(its a Windows Server 2012) for saving centralized the Bitlocker and TPM informations. I have read already some guides but i got still some Errors.as i read i...
View ArticlePermission ACL file
Hi everyone!I'm trying to copy the files into a file server windows to linux server, I have a problem, those files don't maintain the permissions of windows. I see that I can create a acl file with...
View ArticleAccessing WEB sites with Certificates takes too long on Windows Server 2008...
Hello,I wonder if somebody can help me clarifying this issue.I have installed Windows Server 2008 R2 Standard with SP1 on a new server. All Users (direct connected or remote desktop connected) do...
View ArticleSpecify the Issuance Policies in Certificate Template
HiI am trying to specify the issuance policy with a newly created certificate template in our subordinated CA. I already got OID and CPS location and tried to put this information by "New issuance...
View ArticleWindows Server 2012 Certificate Authority General Setup Questions
I have been spending several days trying to understand CA stuff in Windows 2012 and have surfed a bunch of Internet postings and am slowly getting there. I've experimented a bit, but this is taking too...
View ArticleIs IPsec with AES on Server 2012 possible?
I have a few servers running Windows Server 2012 Datacenter and I want to protect their communications with IPsec. I have no problem setting up these policies, but I cannot figure out how to get them...
View ArticleCertificate Auto Enrollment / Automatic Certificate Managment a good idea?...
STD Server 2003R2 / 2008R2 (NON SBS Domains)Hello,1) In general i wanted to know if Certificate Auto Enrollment is a good idea. I have seen this at some customer sites and never used it.I guess in...
View ArticleSubversion of PKI by Domain Admins - who really has the "Keys"
In trying to learn about Internal PKI in order to enhance network security, I (like others) became intrigued with the notion of an offline Root CA. On the other hand, two mechanisms exist to push Root...
View ArticleI need help resetting a forgotten password in Windows Server 2008 R2...
Because I've not logged in to my Windows Server VM in a really long time, I've completely forgotten my administrator password. I found a method provided by Squall36 that I was sure would work [...
View ArticleCertificate Error - New WSE Install
Error - Can't find SSL webpage after migrating profiles using connect computer wizard. I set up a new user account on server. Migrated Win 7 old account using Connect Computer Wizard. Deleted the...
View ArticleSpecifying certificate for command line tool
Hi, I understand how certificates work and have written GUI tool with native selection dialogs.However I'm not sure what exactly identify certificate is user runs command line tool.For example user...
View ArticleHow can I turn off Event ID 5156 AND 5145 in the Security Event Log?
Hi,I have a high volume web service. Everytime there is a connection from the outside, it logs this in my security event log.I want to turn this off.How can I stop the logging of event id 5156 on the...
View Articleproblem with getting cert by requset.inf file
created a reuset like what I wrote in the bellow and get a cert with SAN attrib.but in TS configuration doesn't show me that cert .I compared two cert and found that the requst name of last cert refers...
View ArticleSecurity Issue.
I have configured a DC. on server 2008 system & created a OU for my office requirement, the problem I am facing is with the security.Comp Name -abc-dcDC name abc.inIP - 1xx.0xx.0xx.1xxDNS -...
View ArticleAdmin shares available to non-administrative users over loopback address
I have several RemoteApp hosts, they all have MS excel installed. All hosts are covered with multiple lockdown technologies including Applocker, Group Policy and IPSec. All drives are restricted via...
View Article