Add Administrator Privileged to a exe file using Command line in win 2008...
Hi,How to add Run As Administrator privileged to a Exe file from command line in Windows 2008 R2 Server.Please give suggestion to this problem. Thanks,N.Satish
View ArticleEnterprise PKI - all http locations Unable To Download
First off all servers are 2008R2 (latest updates installed) w/Forest-Domain 2008R2, all CAs (RCA, SCA) are installed on DCs that are VMs (HyperV 2008R2). I utilize SCM 2.5 for GPO settings on the DCs...
View ArticleWindows Firewall doesn't work as advertised: "File and Sharing (SMB-in)"...
Hello,I'm trying to understand whether I'm the one who's crazy, doing something wrong, or whether Windows Firewall was designed to be broken (and stay that way through Windows Server 2008 R2!)When I go...
View ArticleHow to save Client Logs in Domain Server 2008 r2
Dear alli want save logs of server and Domain client users in domain server example : when domain users Login to clients computer when some access remote desktop of Clients or Domain servers etc.how i...
View ArticleProlific number of Windows error reports pertaining to 2008 R2 certificate...
Hi, We've recently added our domain enterprise certificate authority to SCOM, and it's come to light there are a significant number of Application Error and Windows Error Reporting events coming from...
View Articleisa maintenance
I have two ISA servers on a Hyper V and the hard drive the ISA's are on is almost out of space. Is there any maintenance (remove log files etc..), that can be done (other than shrink volume and defrag)...
View ArticleStart and Stop Service from multiple non-Administrator user account
I have a Windows Service named, say,ABC. And I need to give a non-Administrator user, UserA,UserB,UserC, the permissions to Start/Stop this particular service. My service runs on a variety of Windows...
View ArticleEstimating NTDS.dit size increase for Credential Roaming
I found this thread about estimating the size increase in the NTDS.dit file after enabling Credential...
View ArticleCertificate Template: create Custom OID
Hi,I need to create certificates with a Custom OID. The only way I found is to modify the certificate template (User) and to add it to to the Application Policies as explained here: On the Extensions...
View ArticleUser A getting certificates auto-enrolled under the name of User X
Hi, I have a Enterprise CA running on Windows 2008 R2. Recently several users (Say A, B and C ) got certificates auto-enrolled under the name of user X. User X has never logged on to PCs of the other...
View ArticleHow do I configure certificate renewal period on an offline Root?
I have subCA that is enrolling into a offlineRoot. How/where do I configure the expiration date for the subCA? How do I configure the CRL properties (expiration, next update, etc)?
View ArticleCA / NDES Virtual Directory Structure Missing in IIS 7 unable to implement...
We've recently finiallized both an Enterprice 2008 R2 CA and NDES service installtion configuration. All services are running, to include web enrollment for both. CA sits on a DC, as required, and...
View ArticleClik here to view.
Is it right when it use the KCD(Kerberos Constrained Delegation) across domains.
Hi Sir,I don't still exactly KCD(Kerberos Constrained Delegation across domains) feature what it is.But, when I read the Technet web page, it seemed best matched to the situation that I want to...
View ArticleTrouble enabling NDES logging
Hi,I am trying to enable logging for Certificate Services Network Device Enrollment Service (NDES). I am following the instructions in the book "Windows Server 2008 PKI and Certificate Security" on...
View ArticlePKI - Security
We have a problem with permissions in security tab. We have several branch offices with single AD Domain.Every branch has a Certification Authority. AD Domain contains an OU for each branch. Question:...
View ArticleIM role holders in child domains are not GCs. Why can't they get a...
I already knew clients need to be able to contact a root domain DC/GC to get a certificate, but I did not know there would be a certificate enrollment problem with child domain Infrastructure Master...
View ArticleIssuing CA installation
Hi All, I have basic question on Subordinate CA installation. I have a 2 tier hierarchy for PKI in my test lab. As per the procedure, after the subca is installed, the .req file will need to be carried...
View ArticleIssuing CA Certificate Template + capolicy.inf problem
Hi, I have already built a Windows 2008 R2 Intermediate CA and configured a custom Subordinate CA template. Now, I am trying to build a 2008 R2 Issuing CA and running into all sorts of problems....
View ArticleOverride OCSP URL in AIA Field
Other than from GPO, how can I override OCSP URL in AIA field for the local workstation (or the domain controller) to point to a specific Responder for certificate validation?
View ArticleStand Alone CA:Win 2008 RC2: How to add Certificate Policy Extension to...
I have always used the CApolicy.inf to set the Certificate Policy extension values in the CA certs. Now I need to add the Certificate Policy extension to our non-CA end user certs. It doesn't appear I...
View Article