Environment:
- Terminal Server
    - Windows 2008 x64 Server Standard
    - Kerberos Token Size set to maximum

what process/service does certificate AutoEnrollment chores on Windows Vista
or 2008? On XP it used to be USERINIT. So what is it now?
thank you very much.
ondrej

   Can we secure server (any version) login with 3 attempts like novel?
-Joshua

I have observed one weird change between autoenrollment in XP and 2008
regarding revoked certificates.
I have the policy to Update pending/Remove Revoked etc. certificates for
both XP and 2008 machines.

I have a client that has some unusual needs about passwords.
The scenario, as best I can describe it, is something like this:
    A physically secure domain server
    Hundreds of client machines, including laptops

when I installed an Enterprise root CA, its certficate has been
automatically installed into all computers' Trusted Root Certification
Authorities.
When I then deleted the certificate manually from a computer's Trusted Root

when a client computer wants to perform CRL check against a public CA's CRL,
it must connect to the CA's HTTP CRL location over a company firewall. The
firewall actually blocks the ougoing requests to the internet where the CRL
location lies.

can someone please explain in easy terms the difference between these:
certsrv.msc
Certificates Templates console
certmgr.msc

I have a workstation client running Windows 7 that is having difficulty
opening any documents from the My Documents folder. We are running Windows
2003 SP2 Domain Controller that has all the users My Documents re-directed
via GPO to a DFS based file share. I have verified all the ...

I've joined Windows 2008 Server to Windows 2003 domain and installed a
Windows Service, that logons on as a domain account in Domain Administrators
group.
On Windows 2003 Servers, all works fine.

Hi Group,
I have a domain abc.com ,
And I have two  set of users laptop and desktop users,
for both the users I have diff set of policies,

I have a customer that we are putting a server image on a system, that cannot
be comected to a LAN. They want us to put all the latest security updates
onto the system before deployment, and security only.
First - is there a cumulative update that can be downloaded? No Windows

    I have stand alone Win2K3 server. May I know is it possible to setup
individuals user policy to have local restriction?
If yes, may I have idea how to do it?
Thanks!

Is it possible to mute the speakers in the PCs through group policy?

I'm trying to get access to a file share from a subprocess within a
windows service.  Within my service, I launch another process that
runs an executable.
This works: