With my limited understanding of Certificate Services (until now - hopefully
I'm learning!), I realize that sometime in the past I have created multiple
Enterprise Root CAs in the organisation.  I have now read that this is OK,
but not desirable.

I've been asked to force our users to use strong passwords with user
lockouts after a number of wrong attempts.  So I started small and setup a
new OU and created a test user in it.  I then created a goup policy,
associated it to my new OU and set the Account Lockout Threshold to ...

I am trying to install a windows service under a local account. The
service needs to be able to connect to a database on another server.
I
really don't want to change the account to be a domain account. What

We are using Sql Server 2005. Our database server is a win2k3 machine. We
have Active Directory etc
Now we want an external user to get access to one of our data systems. He
needs ddl/read/write permissions on a specific database and also read/write

I'm trying to give my managers the ability to reset user passwords and
unlock locked users.  I think I've figured out the delegation parts but now
I'm wondering how do I install the Active Directory Users and Computers MMC?
I would rather install that on their computers rather ...

We have a W2K3 Enterprise server as our DC.  In event viewer, I noticed
several similar events under security that I don't understand.
With event ID 646, a Computer Account Change is announced.  Based on the
time stamp, it indicates that the User Password was Last Set at the same

Greetings all.
I'm trying to install a Server Authentication Certificate in an ISA server
to allow RCP over HTTP. My environment has a Stand-Alone Root CA chained to a
Subordinate Enterprise CA. The Root CA is stored offline. We have an

Gents;
We have a compliance issue where our system admin is not supposed to
have access to certain shares.
Any ideas as to how we can accomplish this seemingly mutually

I would very much like to know how I can configure the firewall or network
settings of a Windows 2003 server in a way that it can only be managed and
accessed from our office. Could I use IP filtering for it and would it
suffice? Perhaps create a VPN between our office and the ...

As the subject states... if one is a newbie to Windows Svr w/AD, what
pubs are recommend to quickly get up to speed on setting proper
compliant security settings?

Is it possible to audit a user changing Organizational Units and the
deletion of Organizational Units with native auditing or does it require a
third-party software?

We are looking to deploy machine certs in our domain for 802.1x port based
authentication.  
My question is what is the difference between the computer cert template and
the workstation cert template?  Both say they can be used for

With any luck, the people who hang around in this security group will know
the significance of being able to take over an entire Server 2008 domain,
from any domain controller on the network? No need for passwords, no need
for special tools or code.

Merhabalar,
Windows server 2003 iþletim sisteminde var olan büyük dosya arþivlerinde
kullanýcý bazlý kýsýtlamalara gidilmek isteniyor.
ben Butun Klasorlere ve alt klasorlere teker teker izin deðiþtirmek yada

Can the web enrollment feature be used to enroll for only user certificates?
It looks like you can get a server certificate as the "type" drop down box
lists: Server Authentication Certificate.
Can anyone define the limitations of the Web Enrollment feature as pertains