Changing password through LDAP resets the "cannot change password" option
Hi,Since we're working in a complex environment with both OpenLDAP and AD, we're syncing both LDAPs' user passwords. This works very nicely, but recently we've decided to use a single point of entry of...
View ArticleCert service wont service-specific error 2148081683 (0x80092013).
Help!windows 2003 sp2.The cert services wont start, service-specific error 2148081683 (0x80092013).The box has been rebooted but the error still persistsAny suggetions as to how and resolve?
View ArticlePKI - Signing a CRL with an new validity period.
I would like to schedule a task to sign the current CRL with a longer validity period. This CRL would only be published if the CA was down and more time was needed to fix the problem than what the...
View ArticleComputer Logon Times
I work at a Community College and I am having trouble finding a way to restrict computer logon times. I know how to restrict individual users using their account properties, but is there a way to...
View ArticleNPS server with wildcard certificate and PEAP MS-CHAP v2 authentication
I've read through many threads in the forums, and looked at various design guides and configuration instructions, including the technet article often referenced, PEAP-MS-CHAP v2-based Authentication,...
View Articleis there any form based revocation page in web enrollment ?
is there any form based revocation page in web enrollment ?
View Articleprevent autoenrollment from renewing a single certificate template
hello,can I disable automatic renewal just for a single certificate template? I thing it is not possible.I have the certificate autoenrollment technology enabled so that it automatically renews all...
View ArticleDoes Sdelete Program need system rebooting or shutdown normally?
I use Sdelete from Ms Technet.(http://technet.microsoft.com/en-us/sysinternals/bb897443.aspx)Just one simple question,Does Sdelete need system rebooting or normal shutdown after completing process?The...
View ArticleHow to close port 135 on Windows server 2008 R2?
Hi All, We are having our servers hardened and we failed on a penetration test because port 135 is open on our 2008 R2. they said i should close those ports. i am searching over the net but all i saw...
View ArticleOpenDNS
HelloI have set up a windows server 2008 R2 AD for testing and I have been told by our network security guys that the DNS set on my test machine is open and this is dangerous. I did have the firewall...
View ArticleHow to disable anonymous acces to ipc$ share?
hi all,due to security reason we have to disable all anonymous access shares etc through the settings of diable smb null sessions etc.we have set several GPO settings and can verify that the registry...
View ArticleMove Certificate Authority from One server to another
Hello,We have a CA role installed on one of the windows 2008 server. We are planning to move this Certificate Authority role to another server as the existing server is going to be decommissioned soon....
View ArticleCreate Uniform Resource Access Custom Certificate Request
Hello,I am trying to create a IP-HTTPS Uniform Resource Access / Direct Access Certificate Request so that I can send it to Thwate as we do not want to manage a public CLR. I am following the...
View ArticleCan i have 2 Enterprise Sub-ordinate CA in the same domain for different Sites?
I am working on Secure Wifi Implementation for a client who has single domain. The client is repsonsible for America Site alone where i am implementing the secure wifi. Now i read many articles and...
View Articlerunning signed ActiveX
HiI am trying to deploy a commercial application to my users. The application contains a client software and users need to access specific website. But when accessing that website, it says "an activeX...
View ArticleBest practice settings for Computer Template Certificate and Server Template...
Hi,We are going to deploy a new computer certificate to all workstations and laptops.At the same time we are changing SubCA to a new one and eventually decommissioning the old one so we have...
View ArticleIPSEC connection fail on iSCSI NAS drive.
I have windows 2003/2008 server ipsec is startup as bypass mode & connected to NAS via iSCSI (NetApp DataFort) which connection will fail. Then initial connection will change to secure mode but...
View ArticleMigrating the computer to another domain in the same forest but the...
Hi,We are migrating computer objects and users from one domain to another in the same forest using ADMT.Example:From domain: olddomain.contoso.comTo domain: newdomain.contoso.comWe can see that after...
View ArticleNetwork credentials only retained for a period.
Hi,I have a Server 2008 and Windows 7 VM setup and in both instances I'm having problems with the network credentials to other servers being retained.I have one credential linked to a web server...
View ArticleCA / NDES Virtual Directory Structure Missing in IIS 7 unable to implement...
We've recently finiallized both an Enterprice 2008 R2 CA and NDES service installtion configuration. All services are running, to include web enrollment for both. CA sits on a DC, as required, and...
View Article