Does someone know a solution to monitor user certificates (windows ca) ?
The system should send a notification to a user (e.g. via mail) that his/her
certificate will expire in x days.
any other idea how to handle expiring smart card logon certificates when

I followed the guide at
<http://www.microsoft.com/downloads/details.aspx%3FFamilyID%3D0f7fa9a2-e113-415b-
b2a9-b6a3d64c48f5%26DisplayLang%3Den>
for Setting Up Secure Wireless Access via Radius 802.1x in a Test Lab,
but I deviated

I understand the concept of AGDLP for domain permissions but is there any
benefit or issue with using the same DL groups when apply local permissions?
For example I have a Group called G-HR which is a member of DL-HR and I need
to make  G-HR group local administrator permissions ...

We had a recent entry in our Security Log, showing someone had tried to log on remotely with a user name not in our system. The log said they tried repeated passwords. The user name they attempted was "webmaster". It looks as if they tried entry about 15 times in a 3 minute span, ...

I'm working on my cert server and I've created a duplicate of the
WebServer template and modified a few settings on it but I've hit a
roadblock with it. When I goto the CA MMC and go "New - Certificate
Tempalte to Issue" it is not listed. I can't for the life of me figure

Is anti spyware software needed on my servers?  Most spyware is installed
along with the so called free software or from browsing the internet...  Is
it not best practice to avoid browsing the internet from your servers?  Also
shouldn't you be testing software in a test ...

I want to make a Global / Local groep like WINS Users (when WINS is instaled
on a DC W2K3), but then that they have Full Permissins on WINS.
On the moment I need to give Administators permissions, and we don't want
that.

Can I add user to local administrators group via group policy?
Many thanks for your reply!

I've just received a document regarding end dates of security updates for 2
products.  This really concerns me and I'd have to ask why you are
discontinuing security updates so early on these 2 particular products while
extending support through 2010 and up for products like ...

I would like to get notified, or at least have a reasonable logfile of
changes in the access rights on a Win2003 file share.
As far as I see it, the Event Log does not do what I like. If I set the
server to monitor the access right, I can see that something happened,

Greetings all,
Thanks for a great forum with alot of knowledge. Hope I one day have the
time to search it through and read all the interesting articles  
But back to the topic. I've recently got the task to figure out a way to

I just installed a new domain controller in a test domain and implemeted
certificate services.  I have two computers on this domain and a few user
accounts.  On one system I logged in with UserA and requested an EFS
certificate.  I was able to get one.  I did the same with UserA ...

We're having a problem with permissions being messed up when we deploy
a new version of our web application.  We'd like to reset permissions
with a script--batch file or vbs.
How can we set the special permissions in a script?  neither cacls.exe

I have a Share with the Domain Users group assigned Read access. In the
subfolders I have individual user accounts assigned with Various NTFS File
Permissions= Change, Write, even Full Control. None of these users can do
anything in the subfolders unless I go back to the Share ...

We have a customer that is running Exchange 2003 (std) on a Windows Server
2003 (std) SP1 and they mistakenly ran the server configuration wizard this
morning to turn on VPN when all they needed was Terminal Services. After
they removed the VPN they could no longer connect to the ...