Clik here to view.
Certificates in OAB
Hello all!I noticeda strange thingwithexchange :For each user, we have two certificates, one for signing and one for encrypting messages.Both are published in AD. Certificates are present inthe GAL as...
View Articlesetting up a proper ssl with a windows CA
i have a linux box that im trying to register a proper ssl key so its trusted in my ad environment.so my CA is setup and i can enroll certificates from windows boxes on the domain but having issues...
View ArticleSDDL in wecutil.exe example
Looking here: http://msdn.microsoft.com/en-us/library/windows/desktop/bb870973(v=vs.85).aspxThere is an example of an XML file for configuration...
View ArticleBaffling Security Permission Problem
Steps to recreate and test:1. Create a folder, name it TestRoot. Grant all permissions to Domain Admins, Domain Users.2. Create a sub-folder of TestRoot, name it TestFolder. Untick inherits permissions...
View ArticleInvisible files on AD domain network
All users are part of the Domain Users AD group on workstations that are part of a single domain. All have group-level permissions on the network share in question.User A has a folder called Mail on a...
View ArticleC: or System drive auditing access denied
I am trying to setup auditing on my entire C: drive which is also my System and boot drive. I am doing this to adhere to the DoD's STIG settings. These are rules the DoD wants to see on all their...
View ArticleServer 2008 EFS folder sharing not working
Hello, I need to setup a shared folder called backup which is encrypted from the server side. The client side software would then backup to the client computer to the backup folder. What I have done:1)...
View ArticleEntrust or Microsoft PKI
Could someone provide a high level comparison of the Entrust an Microsoft PKI?
View ArticleSecurity Logs - Audit Policy
Someone here could help me.I want to manager security log in a windows 2008 R2 SP1.I observe That in Local Security Policy-Audit Policy the policy are not enabled.When I saw the security log I observe...
View ArticleWindows Resource Protection - Not rolling back files
My understanding is that on windows 2008 r2 the windows resource protection is on by default and will restore the tampered files within a few minutes of tampering.testing shows this isn't happening...
View Articlewindows server 2008 resource kit tools for windows 7
Hi,I would like to get Windows Server Resource tools kit to run on Window 7 OS.As we know Windows Server 2003 Resource tools kit not compatible with Windows 7.Please let me know how can I get it?
View ArticleQuick Mode SA Idle Tomeout in Windows Server 2008 R2
We observed quick mode SA idle timeout appears as 300 sec in Windows 2008 R2. Is there a way to reduce the timeout value?
View ArticleHard coded CDP / AIA extension file names for Offline Root CA's issued certs
I'm new with ADCS, and need to confirm some things. I've set up a 2-tier PKI, and have placed the offline root CA certificate (CRT) and CRL files on a web server. When I configured the CDP and AIA...
View ArticleRDP SSL Failed "A revocation check could not be performed on this certificate"
Been searching all morning for a resolution to this with no luck.Topology:Offline Root CA (Windows 2012)Enterprise Subordinate CA (Windows 2012)Current Issue:Deployed certificate template and setup for...
View ArticleWindows 2008r2 CA
We currently are running the Enterprise CA on 2008r2 and it is issuing certs as SHA256 but the CA itself is still SHA1. Is there a way to make the CA SHA256. Our root CA was upgraded from 2003 to...
View Article2k3 is flooding the Huge UP traffic..!!! please help
i am running a windows server 2003 SP1, the server is installed with AD+ DNS Role.From last week few services like DNS.exe & tcpsvcs.exe are flooding UDP packets on the network which is consuming...
View Articleenrollment station
Heyi want to achive an enrollmen station that only from this station i will be able to enroll smart card and only authorized user will be able to.my thought is this:1) create an enrollment agent...
View ArticleChange single tier PKI into two tier PKI with temporary coexistance
Hello,i got some questions about a soft pki migration.in our active directory environment there is a single tier pki installed. One Root CA holding the root certificate and issuing every used...
View ArticleEFS Certificate manual renewal
Hi, we set up EFS in our domain (2008 r2) and use efs certificates installed on smartcards.The certificate are about to expire and we are trying to renew them with the same key pair, using a RA...
View ArticleNDES - Reusing a password for multiple devices
Hi there,I have a requirement to use NDES to issue certificates to a new Blackberry 10 fleet via SCEP. It appears that the Blackberry server assumes the Challenge returned from NDES will never change....
View Article