Windows 2008 PKI: problem issuing certificate using specific CA certificate
Sometimes (for example, during a changeover period) Certification Authority may have more than one valid CA certificate (and key pair, of course): new CA certificate is already issued and installed,...
View ArticleWindows Server 2008 R2 NTFS Permissions
How to allow user to create folder but deny the same user to delete the same folder after creation?
View ArticleAdd windows firewall with advanced security log to windows 2008 Standard SP2...
Hi all,I would like to see wether which user did turn Windows Firewall ON/OFF and at what time on Windows 2008 Standard SP2.As what I had checked I could see this on Windows 7 (Event...
View ArticleWindows 2012 Security Checklist
Hello All, Good Day. I am looking for Windows 2012 server security checklist, would you kindly assist me by providing Wintel 2012 standard/recommended check-list ASAP? Thanks in advance.
View ArticleCertificate private key on another computer
Hello,I've made a request from one computer that got removed (VM) before the certificate request was handled by our certificate provider.I still have the initial request (not the ini, the req file),...
View ArticleGet a DC back into the domain after toumbstone event
I had an issue where my cmos battery died which caused my Exchange server which was a DC and GC to get toumbstoned out of the domain. How can I get it back into the domain? The exchange server is still...
View ArticleClik here to view.
How to verify if kerberos being used or not
I have configured Kerberos authentication in my SharePoint 2013 environment. on a client machine I purge the kerberos tokens by using (klist purge) and then I browse SharePoint.I also keep fiddler,...
View ArticleClik here to view.
Some events in the Security Event Log are missing when the archive file is...
I am using Group Policy to control our event logs. I have enabled "backup log automatically when full" and "retain old events". When the Security log gets full, it renames it as...
View ArticleTools for managing digitial certificates, sending expiration reminders, etc
are you guys being held accountable for when the certs you issued to users, servers, applications left and right come due to expire? lately we are being held accountable for when certs expire and the...
View ArticleCA request - Windows Server 2012 - Subject Alternate Name
Hi, On 2008 R2 SubCA I used .inf file to create certificates with SAN. I used the following extension: [Extensions] 2.5.29.17 = "{text}" _continue_ = "dns=name.domain.com$dns=othername" This does...
View ArticleRun-time error '429'
Hello all, When run a project which programed by VB, it received a Message Box "Run-time error '429':ActiveX component can't create object". This project need to connect SQL...
View ArticleUninstalling AD CS when all certificates are expired?
Hello all, thanks in advance for any help you may be able to give. I'll be the first to admit I'm not an expert on certificates, but I've read a ton of information online and I can't seem to find a...
View ArticleW2008 R2 is not applying Domain Audit Policy or Domain Controller Audit policy
The situation is thisAfter enabling Advance Audit Policy on the Domain Controllers OU, one of the DCs does not apply the Domain Controllers Audit Policy (every other DCs in the OU does it) and after a...
View ArticleVirus or spyware slow down th Internet access
Out client is running Exchange 2010 on Windows 2008 R2. Their Internet access speed 20M for download and 4MB for upload. If they let the Exchange runs for a coupe days, the whole network have a problem...
View ArticleWindows firewall not blocking IP
Hi,I'm running a public authoritative DNS server (non recursive). I am getting hundreds of bogus requests a minute from a specific IP and would like to block this IP. I've added the IP to an inbound...
View ArticleTGTs across Devices.
I have an app (Android) using Kerberos 5 to get a TGT. If i login to that app on 2 separate devices using the same account, does each device generate a separate TGT and thus session, or does device 2,...
View ArticleAccess Denied retrieving My Certificate Information as an Application Pool...
This is a Windows Server 2008 R2 infrastructureWe have an IIS application pool account (let's call it IWAM_app) that needs a private key and matching certificate to decrypt data retrieved from a...
View ArticleStore Bitlocker Recovery Key in Windows 2008 AD DS
Hi everyone,I'm trying to store my recovery key of Windows 7 64bit into AD which is running on Windows 2008 R2 64bit. Anytime I try to store my key I get a permission warning: "you don't have...
View ArticleBitLocker Help - Windows 2012 Server & Windows 8
Hi:We have Windows Server 2012 as our DC's and trying to deploy Windows 8 as our clients through SCCM 2012 Sp1. Through the task sequence, we have Bitlocker getting enabled and asking it to be stored...
View Article"Catastrophic Failure" error in PKI MMC after revoking a certificate
Configuration: Enterprise Subordinate CA Server 2008 R2 SP1 (db was migrated from an old 2003 CA) ~5GB database file (we just removed old records and did a compaction which made no change to...
View Article