Windows Server 2008 R2 Certificate Authority does write certificates to configured AIA locations

I have a stand-alone root and enterprise issuing CA hierarchy. Both are configured with and AIA location to write a copy of the CA certificate to C:\Windows\system32\CertSrv\CertEnroll\<CaName><CertificateName>.crt
REG value below:
1:C:\Windows\system32\CertSrv\CertEnroll\%3%4.crt
When the certificate services is restarted, the certificate file written to the location is as if the default configuration was still in place. EG: C:\Windows\system32\CertSrv\CertEnroll\<ServerDNSName>_<CaName><CertificateName>.crt
Can this be fixed or do I need to manually create the file?

Hi,
Any update?
Please let us know if you would like further assistance.
TechNet Subscriber Support
If you are
TechNet Subscription
user and have any feedback on our support quality, please send your feedback
here.
Regards, Yan Li

Similar Messages

WAAS WITH WINDOWS SERVER 2008 AND CERTIFICATE

172.20.203.3:135
172.20.1.191:2751
PT AD Int Error
172.20.221.205:51786
172.20.1.176:80
PT In Progress
172.20.1.191:2751
172.20.203.3:135
PT AD Int Error
172.20.221.3:443
172.20.1.29:25403
PT AD Int Error
172.20.1.176:80
172.20.221.250:64345
PT In Progress
172.20.221.250:64345
172.20.1.176:80
PT In Progress
172.20.203.222:57837
172.20.1.232:80
PT In Progress
172.20.1.138:2249
172.20.140.218:139
PT AD Int Error
172.20.1.29:25403
172.20.221.3:443
PT AD Int Error
172.20.1.29:25452
172.20.221.3:443
PT AD Int Error
172.20.1.138:2241
172.20.140.218:445
PT AD Int Error
172.20.1.29:25411
172.20.221.3:443
PT AD Int Error
172.20.1.187:8014
172.20.221.250:64349
PT In Progress
172.20.1.176:80
172.20.221.205:51786
PT In Progress
172.20.140.218:445
172.20.1.138:2241
PT AD Int Error
172.20.221.3:443
172.20.1.29:25452
PT AD Int Error
172.20.1.138:1942
172.20.221.3:445
PT In Progress
SMB Digital Signing is enabled by default on Domain Controllers - I'll double check, but don't believe it is enabled across ALL 2008 Server, but it would be worth checking.
Digital Signing is designed to prevent man in the middle attacks - which is precisely what WAAS is doing
Turning it of generally improves speed by around 20% even without WAAS, and lets WAAS use full DRE and the CIFS adapter to cache files.
Any problems, just raise a TAC case and my boys will help you out
Edit: Link from MS which discusses it in more detail and how to turn off:
http://support.microsoft.com/?kbid=887429
According to that, it's NOT enabled across the board in 2008, just on the DC's.
My company uses waas, as you can see above whenever i try to do the implementation waas is giving me the following message "pt in ad error"for all the connections that will be compatible with windows, I did some research and what's above has to do with the digital windows certificate which waas is struggling to open due to the code encrypted in the certificate. do you happen to have a way of enabling the certificate within the module. another option would be to disable the certificate in windows server 2008?

Thiago,
PT AD Int Error has nothing to do with SMB digital signatures. PT AD Int error means TFO auto-discovery failed and could not negotiate an optimized flow; this is during the TCP 3-way handshake before digital signatures even come into play
A common reason for PT AD Int Error status is another device in the path before WAAS has filled up the TCP options field with other data, thus leaving no room for WAAS to put it's TCP opt 0x21.
Once you resolve the PT AD Int Error problem and a CIFS AO negotiated policy occurs, if the server/client require digital signatures then you will see the connection as T,G,D,L or T,G (meaning Generic AO).
If digital signatures are not required the CIFS connections will show as T,C,D,L.
I suggest you take packet captures on both client and server side WAEs to see how SYN and SYN-ACK packets are reaching the WAE and see if the options field is filed with data before reaching the WAE.
If this is part of a WAAS PoC/ Demo feel free to open a case with the PDI team.
http://www.cisco.com/web/partners/tools/pdi.html
Otherwise, if this is in production please open a case with TAC.
Regards,
Mike Korenbaum
Cisco Data Center PDI Help Desk
http://www.cisco.com/go/pdihelpdesk

Unable to install SCCM client on Windows Server 2008 R2 - certificate permission error?

I am trying to comply with corporate policy, which is, have an SCCM agent or client on every Windows device. I have successfully used the provided SCCM installer on other Windows 2008 R2 servers. However for one particular server I cannot get the SCCM agent
to install successfully. I've searched forums and documentation, but can't find a solution. Part of the problem is the lack of feedback by SCCM on what is wrong. I think I have narrowed down the symptom to the following error messages from the "C:\Windows\CCM\Logs\ClientIDManagerStartup.log":
[LOG[Certificate [Thumbprint C559304C1598F17641D0732EB9EB787169A25FA7] issued to 'SMS' doesn't have private key or caller doesn't have access to private key.
[LOG[Failed in GetCertificate(...): 0x87d00281]LOG]!><time="10:56:59.014+300" date="04-17-2014" component="ClientIDManagerStartup" context="" type="3" thread="3024" file="ccmcert.cpp:2122">
[LOG[CCMCreateAuthHeaders failed (0x8009200b).]LOG]!><time="10:56:59.014+300" date="04-17-2014" component="ClientIDManagerStartup" context="" type="3" thread="3024" file="clientauthutil.cpp:978">
When I use the Certificates MMC snap in to look at installed certs on this Windows Server 2008 R2 machine, there are plenty of normal and expected certificates there. There is also a branch called SMS with hundreds of entries, I have no idea what that is.
The above error seems to indicate a permissions issue. What do I do to fix this SCCM install? It seems like a server cert issue, not an SCCM issue, so I'm posting to the Windows Server forums.
Thanks in advance.
Thanks

this maybe helpful...
http://www.jamesbannanit.com/2011/04/certificate-requirements-for-sccm-2012/
should be asked in SCCM forum...
http://social.technet.microsoft.com/Forums/en-US/home?forum=configmanagerdeployment
Best,
Howtodo

Windows Server 2012 VSS error "The system writer is missing"

Hello All,
I have a HP server that I have just installed Server 2012 standard, SQL Server 2012 and Sharepoint 2013.
When I try to take bare metal backup I get the error: "The system writer is missing", I have tried the backup as the local admin and domain admin.
The backup will only work if I decide to back up C:, once I select "Bare Metal" or "System State" the backup fails.
I have tried this solution: http://technet.microsoft.com/en-us/library/cc734021.aspx but have not had any luck yet.
When I run the command "vssadmin list writers" I can not see "System Writer" listed.
How can I add/turn on the System Writer?

Hi,
The system writer fails due to the fact that the trusted installer & system accounts are missing permissions to files in the directory %windir%\winsxs\filemaps\.
To resolve this issue, please run the following commands from an administrative elevated Command Window:
CD c:\windows\system32
Takeown /f %windir%\winsxs\filemaps\* /a
icacls %windir%\winsxs\filemaps\*.* /grant "NT AUTHORITY\SYSTEM:(RX)"
icacls %windir%\winsxs\filemaps\*.* /grant "NT Service\trustedinstaller:(F)"
icacls %windir%\winsxs\filemaps\*.* /grant "BUILTIN\Users:(RX)"
For more information, please also refer to the following links:
Discussion Forum FAQ: VSS System Writer is missing.
http://social.technet.microsoft.com/Forums/en-US/winserverfiles/thread/0b1eb10a-d666-4f5e-b657-c93b1d754a7f
Failure during Windows Server 2008 System State Backup & System Writer Missing
http://blogs.technet.com/b/chrad/archive/2009/11/18/failure-during-windows-server-2008-system-state-backup-system-writer-missing.aspx
Regards,
Arthur Li
TechNet Community Support

Windows Server 2008 and Firewall Logging

Our Windows server 2008 R2 domain controller does not appear to be logging anything into the windows firewall log: c:\windows\system32\logfiles\firewall\pfirewall.log. The file is always blank. Every 2003 server and 2008 R2 non-dc work fine.
I'm a little stumped. The firewalls are configured via GPO's and appear to be applied ok.
I compared the 2003 and 2008 configuration and did notice one discrepancy:
The 2003 windows firewall service runs as the local system account. It's effective permissions to the pfirewall.log file is "full control"
However, the 2008 firewall service runs as "LOCAL SERVICE". This account has read-only permissions to the pfirewall.log file.
I haven't changed anything as this is a production server. I was hoping for some guidance before I start changing default settings. Any ideas why the pfirewall.log file is always blank?
Thanks!

Hi,
Generally, C:\Windows\System32\LogFiles\Firewall\firewall.log has the following permission settings:
NT SERVICE\MpsSvc:(F)
NT AUTHORITY\SYSTEM:(F)
BUILTIN\Administrators:(F)
BUILTIN\Network Configuration Operators:(F)
Please make sure MPSSvc (Windows Firewall service) has Full Control on this file.
Thanks.
This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question.
This can be beneficial to other community members reading the thread.
This worked for me on a 2008 R2 DC that had somehow dropped the MpsSvc account off the Permissions list. In my case the pfirewall.log file wasn't even being created, so I had to modify permissions for the "%systemroot%\System32\LogFiles\Firewall"
folder.
Adding the MpsSvc account can be tricky if you're not familiar with where to look. Here are some supplemental instructions that might prove useful to those like myself who might not do this type of thing every day. Remember that these instructions for for
a 2008 R2 Domain Controller.
Open the "%systemroot%\System32\LogFiles\Firewall" folder. If necessary, "Click Continue to permanently get access to this folder."
Right-click the empty space in the Firewall folder and click Properties.
Go to the Security tab and click the Edit button.
In the "Permissions for Firewall" window, click the Add
button. The next step is where it gets tricky.
Click the Object Types button and in the window that opens, make sure the
Service Accounts box is checked. Click OK.
Now click the Locations button. In the window that opens, make sure you change the default selection from the domain name to your Domain Controller's hostname (e.g. DC01).
Click OK.
In the object names text field, type "NT SERVICE\MpsSvc". If you were to simply enter "MpsSvc" it wouldn't work. This is not case sensitive, but the context of your entry is very specific.
Click Check Names and your entry should automatically change to an underlined "MpsSvc" value.
Click OK.
Back on the "Permissions for Firewall" window, you can give MpsSvc
Full Control of the Firewall folder, then click OK.
You'll see a warning about changing permission settings on system folders. Read it, and if you accept the risk, click
Yes. (Otherwise click No and enjoy your non-existent firewall logs.)
Click OK again to save your changes and close the
Firewall Properties window.
You may have to restart the Windows Firewall service before the firewall log file will appear.
You should also run a "gpupdate" just to make sure your settings are permanent and aren't being overridden by a GPO somewhere out there in Active Directory.
That's all folks!
"This posting is provided "AS IS" with no warranties, and confers no rights."
-Mike

How do I run a non-server program on Windows Server 2008

I currently run a synchronization software application on my desktop in order to backup and synchronize over 600GB of data. I would like to install this on our server, which runs Windows Server 2008, but the software does not provide for installation
on this operating system. I continue to receive a message stating that the software may not run properly on Windows Server OS, but it does not allow me to bypass this message. Is there any way to create a partition or trick the software into thinking
that it is running on a different operating system or do I have to abandon Server 2008 and install a basic home operating system in order to run this software? Any help would be tremendously appreciated.
Thanks!

Hi,
According to your description, my understanding is that you want to install an software which is not supported by Windows Server.
Try to install this software in other compatibility mode:
1. Right-click the installation program and select properties.
2. Select Compatibility tab, select the checkbox Run this program in compatibility mode for.
3. try to use different OS to install this program.
Besides, you may right-click the installation program and select Run as administrator.
Above are my personal suggestion and just for your reference. If the problem still exit, I suggest you to connect the software‘s support/form for better help.
If you want to backup date, I suggest you to use Windows Server Backup, you may reference the link below for detailed information:
http://technet.microsoft.com/en-us/library/cc770757.aspx
Best Regards,
Eve Wang

What is the most powerful books for Windows server 2008 and R2?

Hi,
There are many books out there that cover Windows server 2k8 and its R2 successor but i wonder which ones to focus on. In the same time, all books are for one purpose, "Windows Server 2008". Each author has his/her own view on the platform. I don't
want to read them all just to avoid confusions and complications.
These are the list of books that i have along with books that i finished reading them:
Exam 70-640 Configuring Windows Server® 2008 Active Directory® (Finished this)
Exam 70-642 Configuring Windows Server 2008 Network Infrastructure (Finished this)
Exam 70-643 Configuring Windows Server 2008 Application Infrastructure
(Finished this)
Exam 70-646 Windows_Server__2008_Server_Administrator_Second_Edition (Finished this)
Mastering_Windows_Server_2008_R2 (Finished this)
McGraw.Hill.Microsoft.Windows.Server.2008.Administration.Feb.2008
McGraw.Hill.Microsoft.Windows.Server.2008.The.Complete.Reference.Feb.2008
OReilly.Windows.Server.2008.The.Definitive.Guide.Mar.2008
Sams.Teach.Yourself.Windows.Server.2008.in.24.Hours.May.2008
Sybex.MCTS.Windows.Server.2008.Active.Directory.Configuration.Study.Guide
Windows Server 2008 Active Directory Resource Kit (Finished this)
Windows Server 2008 Networking and Network Access Protection (Finished this)
Windows Server 2008 Unleashed
Windows Server 2008 R2 Unleashed
Do you think the unfinished books worth reading?
Appreciate your help.

Thank you for the reply. My goal is to read everything (ins and outs) about Win 2008 and R2 platforms before i jump into Win 2012. I have pretty good experience in certain roles in Win 2008 such ADDS and ADCS. As clarified, i've finished a good number of
books but i want to make sure that i didn't miss a single piece of information that maybe covered in another book.
Honestly, i find the Technet docs are informative but daunting. On the other hand, books written by authors are more friendly because authors can throw jokes while explaining a certain technology, which makes the reader more attracted to the topic. In addition,
examples, practices, labbing, and quizzes in the books are more fun.

10.1.0.2.0 database download link needed for window server 2008 64bit

Here is our plan. We are currently running oracle 10.1.0.2 database on a windowsServer 2003 32 bit.
Now we would like to migrate the database to 10gR2 and run it on our new server windows server 2008 64bit. After doing research, I think I need to go through the following step:
1) install 10.1.0.2 on our new server,
2) clone the database using the current back up data on the new server.
3) install 10gR2 on the new server.
4) using dbua to upgrade the older database to the new version.
Please let me know whether those steps are correct.
If yes, where can I download 10.1.0.2 version database for 64bit window server 2008?
The only link I can find is http://www.oracle.com/technology/software/products/database/index.html
but 10gR1 not listed.
Thank you very much!

Welcome to the forums !
10gR1 is de-supported, hence you will not find any download links. You will have to create an SR to see if Support can mail you the install media.
How big is the database ? One other option you have is to export the 10.1.0.2 database and import into 10gR2 on the new server. This will achieve the upgrade in one step and will not require the intermediate 10.1.0.2 version on the new server.
http://download.oracle.com/docs/cd/B19306_01/server.102/b14238/preup.htm#BABFHFIJ
MOS Doc 419550.1- Different Upgrade Methods For Upgrading Your Database
HTH
Srini

URGENT! CF8 on Windows Server 2008 WEB

Hi,
Can anyone here please tell me if Coldfusion 8 will run on "Windows Server 2008 Web"?
It does not list it in ther system requirements? Better still has anyone here actually installed it on this version opersating system?
Thanks,
Aaron

Thanks for the prompt reply mate!
I have already had a look for some online help but have been unsuccessful thus far. There does not seem to be much with regard to the "WEB" edition. Do you know of any please?
I have already installed CF8 on our PC running Win Server 2008 Web. At the end of the install the only error I got was that it couldn't access the CF Admin setup page because the MIME types were not recognised. I then added those through IIS but when I went to the CF Admin page it is all in goobily ****....if you know what I mean?

Access Denied DNS Server 'Windows Server 2008 R2 and Install AD (PDC) and ADD (BDC=Additional AD)

hi
I Have
Windows server 2008 R2 and Install Active Directory
Install and configuration for windows server 2008 PDC (Primary Domain Controller) and BDC (Additionall Domain Controller)
Error
A security Package specific Error Occurrred. would you like to add it anyway
and
Access Denied Console Other Domain AD
and Nslookup
C:\Users\admin>nslookup pdc
Server: bdc.*.*
Address: 10.0.X.X
Name: pdc.*.*
Addresses: 10.0.1.11
10.0.X.X

Hello,
your description is a bit confusing. You get the error message when you try to add the other DC to the DNS management console on one machine?
Both DCs belong to the same domain according to your description?
Please post an unedited ipconfig /all from both DC/DNS servers here.
BTW: PDC/BDC concept is gone since the start from AD with Windows 2000 Server. All DCs are the same, difference are only the FSMO roles, still that can be held from any DC in the domain according to some rules.
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

10g on Windows Server 2008

Hi everyone,
I have installed Oracle 10g on a server that uses Windows Server 2008 Standard Edition, but when I use Net Configuration Assintant to connect each user to the database it says that the connection could not be establish. Is there any security issue with 2008 that I don't know to allow oracle users to connect?
Can anyone please help me?

Hi sb92075 and thanks for replying,
These are the commands that you suggested and here are the results:
lsnrctl status:
LSNRCTL for 32-bit Windows: Version 10.2.0.3.0 - Production on 04-MAY-2012 15:39
:49
Copyright (c) 1991, 2006, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1)))
STATUS of the LISTENER
Alias LISTENER
Version TNSLSNR for 32-bit Windows: Version 10.2.0.3.0 - Produ
ction
Start Date 04-MAY-2012 15:25:37
Uptime 0 days 0 hr. 14 min. 12 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File E:\oracle\product\10.2.0\db_1\network\admin\listener.o
ra
Listener Log File E:\oracle\product\10.2.0\db_1\network\log\listener.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1ipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=server.DOMAIN.local)(PORT=1521)))
Services Summary...
Service "ORCLXDB" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Service "ORCL_XPT" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "orcl" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
The command completed successfully
And the last one is lsnrctl services with the following:
LSNRCTL for 32-bit Windows: Version 10.2.0.3.0 - Production on 04-MAY-2012 15:47
:52
Copyright (c) 1991, 2006, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1)))
Services Summary...
Service "ORCLXDB" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Handler(s):
"D000" established:0 refused:0 current:0 max:1002 state:ready
DISPATCHER <machine: SERVER, pid: 3368>
(ADDRESS=(PROTOCOL=tcp)(HOST=SERVER.DOMAIN.local)(PORT=49205))
Service "ORCL_XPT" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Handler(s):
"DEDICATED" established:26 refused:0 state:ready
LOCAL SERVER
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
Handler(s):
"DEDICATED" established:0 refused:0
LOCAL SERVER
Service "orcl" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Handler(s):
"DEDICATED" established:26 refused:0 state:ready
LOCAL SERVER
The command completed successfully

Windows Server 2008 R2 Standard "Certificate Authority Service" / Exchange Server 2010 EMC not starting and no AD connectivity for authentication.

Hello,
I am a new IT Manager at this company and need assistance big time. Their environment looks as follows:
Server 1. Domain Controller Server (Windows Server 2008 R2 Standard) running active directory.
Server 2. Email Server (Windows Server 2008 R2 Standard) running Exchange Server 2010 .
* Note. No back ups to work with aside from whats mentioned below.
DC had a virus infection causing a lot of issues on the shared network drives 2 days ago locking up all the files with a crypto ransom virus. Running Avast suppressed the infection. Had to recover the file shares which luckily had a back up.
The issue is that the Exchange Server 2 post this lost connectivity with the AD Server 1. Exchange Server 2 when launching EMC could not launch the console stating the following:
"No Exchange servers are available in any Active Directory sites. You can’t connect to remote
Powershell on a computer that only has the Management Tools role installed."
Shortly after I found that it is possible the EMC launcher was corrupt and needed to be reinstalled following another blog post. I deleted the exchange management console.msc per instructions only to discover I couldnt relaunch it because there was
no way how. So I copied another msc file that happened to be on the DC Server 1 back to Exchange Server 2 and got it to launch again.
Another post said that it might be an issue with the Domain Account for the Computer, so to delete it in the AD Server 1 only to find that rejoining it from Exchange Server 2 using Computer>Properties> Chage Settings > Change is greyed out because
it is using the Certificate Authority Service.
I tried manually re-adding the computer in AD and modeling permissions after another server in group settings but no go. After this I was unable to login to the Exchange Server 2 with domain accounts but only local admin, receiving the following Alert:
"The Trust Relationship between this workstation and primary domain failed."
I tried running the Power Shell tools on Exchange Server 2 to rejoing and to reset passwords for domain accounts as noted in some other blogs but no luck as the Server 2 could not make the connection with Server1 or other errors it kept spitting out.
I also during the investigation found the DNS settings were all altered on both the Server 1 and Server 2 which I luckily was able to change back to original because of inventorying it in the beginning when I started.
I need help figuring out if I need to rejoin the Exchange Server 2 manually by disabling the Certificate Authority Service (or removing the CA as listed here:
https://social.technet.microsoft.com/Forums/exchange/en-US/fb23deab-0a12-410d-946c-517d5aea7fae/windows-server-2008-r2-with-certificate-authority-service-to-rejoin-domain?forum=winserversecurity
and getting exchange server to launch again. (Mind you I am relatively fresh to server managing) Please help E-Mail has been down for a whole day now!
Marty

I recommend that you open a ticket with Microsoft Support before you break things more.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Windows Server 2008 R2 with multiple Roles OS Rebuild, Need help with Certificates.

Hi,
I have rebuilt a Server for my client and I require help with certificates..
I am unsure exactly what to do to get this server working as it was.
Example, The Windows Server 2008 R2 has Microsoft Exchange, DNS, DHCP, ADDS, FileServices,Network Policy and access Services and Webservices roles installed on a single box.
Since the Server OS Rebuild I am getting 2 issues that pop up usually when Outlook in opened on a client Workstation,
I have not dont anything certificate wise to the server since OS Install, and the messages I get and best described here
I seen on a backdrive, a few certificate files I dont know if we can use these files for anything but we have the following files of drive E (Backup)
e:\server.xxxx.com.au\gd_iis_intermediates.p7b
e:\server.xxxx.com.au\server.xxxx.com.au.crt
e:\ssl\2013-2018.cer
1st Message is about a Proxy certificate I dont get this often but saw it today and my client clicked ok too quickly.
I have seen it and didnt see it again after trying to close outlook and reopen
I looked up google images and tried to find it...
It's like this, (There is a problem with the proxy server's security certificate.
The security certificate is not from a trusted certifying authority.)
2nd Message is about Security Alert, Autodiscover.xxxx.com.au Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the sites security certificate.
-X- The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certificating authority
-TICK- The security certificate date is valid
-X- The name on the security certificate is invalid or does not match the name of the site
Do you want to preceed
[Yes][No][View Certificate ...]
3rd Message is very Close to the 2nd Message, is about Security Alert, xxxx-server.xxxx.local, Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the sites security certificate.
-X- The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certificating authority
-TICK- The security certificate date is valid
-TICK- The name on the security certificate is invalid or does not match the name of the site
Do you want to preceded
[Yes][No][View Certificate ...]
If you can help guide me thou this as I'm very new to setting up certificates. I had a friend tell me about something in DNS.. but he has been super busy and I want to learn what to do.
Thank-You.

Hiya,
quite a lot has the same confusions as you do, so I've written a simple explanation on the subjet of certificates
http://jesperarnecke.wordpress.com/2014/03/22/certificates-simple-explanation/
Let me know if that helps you and if you need further assistance.

Robocopy on Windows Server 2008 SP2 does not copy folder permissions

When using Robocopy to copy folders and files from one local hard disk to another, using /COPYALL /E /TEE options, the target folder does not contain the source folder's ACL. I've tried other options such as: /COPY:DATSOU or /SECFIX, it made no difference.
Test scenario: Create a folder on C:, Test1. Add to Test1's permissions a local group with Read, e.g. Backup Operators. The ACL list should have permissions inherited from C:\ plus Backup Operators that's not inherited. Use Robocopy to copy Test1 to C:\Test2, check the ACL on Test2. Backup Operators is missing.
It looks like Robocopy cannot override the target folder's permissions inheritance, the folder retains the parent folder's ACL.
I've also disabled User Access Control in troubleshooting this problem.
To add to this issue, there's a workaround can be used to ensure the target folder's ACL is the same as the source folder's ACL. It's a two step process.
1) Use XCOPY source_folder target_folder /I /E /X /T - This lays down the directory structure including the ACLs
2) Use ROBOCOPY source_folder target_folder /COPYALL /SECFIX /E - This will copy over the directories and files, enforcing the files to receive the parent folder's ACL. The target_folder's ACL remain intact, unaltered from XCOPY command.
The end result: the target_folder ACL is identical to the source_folder ACL, the files copied to the target_folder will inherit ACL from their parent folder. Both source and target folders and files ACLs are identical.
ROBOCOPY should do both steps, but doesn't. I've tested this scenario on bare-bones Windows Server 2008, physical and virtual machines.
Darryl Miller

To Wendy23,
Just for clarity, the Windows Server 2008 OS that I ran ROBOCOPY and XCOPY on was the non-R2 version. Microsoft might have fixed this issue in R2.
You'll probably need to logon as local Administrator or use an account belonging to the local Administrators group.
Also, open the Command Prompt using "Run as Administrator" (right-click on Command Prompt), then run the XCOPY and ROBOCOPY commands from within this prompt.
To answer G.Write, the storage is local hard disks.
Thanks, was a long time ago, I was having a problem with robocopy not copying permissions on a SAN, and was wondering if the SAN was the problem, but your method worked fine for me, thanks.

Does anyone know How to run twin monitors on a MacBook Pro operating on a Windows Server 2008 R2 ?

Hi
Does anyone know How to run twin monitors on a MacBook Pro operating on a Windows Server 2008 R2 ?

I know this doesn't help you much, but, I think you have to see if your Mac pro does audio out via HDMI. I don't even know if mine does via DVI. I think it may have to do with the adapter. Try going into Audio MIDI and setting the digital out to multichannel
and using the toslink cable for now. Lemme see...apparently DVI does not carry audio at all. Hm. apparently monoprice could be helpful? If I understand what you're saying correctly: you want to take DVI and multichannel audio via the Toslink and have it all go out over HDMI, right? Whooo..... amazon...looks like it's about $100http://www.amazon.com/Audio-SPDIF-Toslink-Converter-Adapter/dp/B0015YYOQQ
just a shot in the dark
I'm probably wrong....or not
John B

Windows Server 2008 R2 Certificate Authority does write certificates to configured AIA locations

Similar Messages

Maybe you are looking for