Change from Root CA to Subordinate CA

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - AD object permission list Hi all, We are trying to create a security property page exactly the same as in the Active Directory Users and Computers mmc snapin. So, we need names of permissions to be shown. Could any body help to find API to enumerate and read these strings? Thanks in Advance, Victor. Tag: Change from Root CA to Subordinate CA Tag: 81009
  - 2
    - How to check for computer abuse? I have a situation where I need to know if a user is copying information from the server or/and their local drive to some sort of removable storage device. Is there any log files or event log I can look at that would show this? Or Is there a utility of app that I can run in the back ground of this p.c. that would record such info? I also need to know if a device such as a USB flash drive is being used on this specific p.c. Any ideas? Enviroment is XP on desktop, Win2003 network Tag: Change from Root CA to Subordinate CA Tag: 80997
  - 3
    - Could not establish secure channel for SSL/TLS Hello, I am trying to connect to a SSL Secured Webservice with my ASP.NET (C#) webapplication. On my local machine everything works well, but on my server the folling error appears. --- Could not establish secure channel for SSL/TLS at System.Net.HttpWebRequest.CheckFinalStatus() at System.Net.HttpWebRequest.EndGetRequestStream(IAsyncResult asyncResult) at System.Net.HttpWebRequest.GetRequestStream() at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters) at ... System.ComponentModel.Win32Exception: The message received was unexpected or badly formatted --- I allready granted the access for ASP.NET(NETWORK_SERVICE on server) to certificates store on the local machine by using winhttpcertcfg.exe Thx in advanced Peter Tag: Change from Root CA to Subordinate CA Tag: 80995
  - 4
    - what the hell is KB7218151.LOG? Hi guys, I found that every process running in my winxp system contains a strange module with the name "KB7218151.LOG". the file is located under "c:\windows" folder, instead of being a plain text file as the name suggested, it's actually an executable module (start with the "MZ" header). after some further investigation, i found that it's is loaded by the following registry entry. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="KB7218151.LOG" that's why every process in the system is injected with this dll module. I dont think it's a patch released by MS as MS wouldnt use these kind of misleading filename to hide their actual intention. i have searched through the internet but cannot find anything about this "KB7218151.LOG". is there any guru here know what it is? i will mail the "KB7218151.LOG" file to you if you need to examine it. Tag: Change from Root CA to Subordinate CA Tag: 80993
  - 5
    - Panda Platinum 2005 Internet Security Panda_man wrote: > Boot in Safe Mode and just delete all the folder > Panda Software in > C:\Program files I booted into Safe Mode, and logged in as Owner, and I still couldn't delete these files: icl_cfg.dll"; "pavlsp.dll"; and "PavTrc.dll". Windows said that they were in use. I'm on XP Home, SP 1. Any other ideas on how to get rid of all the vestiges of this application? Tag: Change from Root CA to Subordinate CA Tag: 80992
  - 6
    - Admistrator Password Reset OK -- Maybe a simple solution (maybe not.. we'll see) ... here goes -Have a computer that some knucklehead made an administrator name and passworded it. Person is no longer around and no one seems to know the p/w. I need to know how I can reset it. The computer is in need of some work and I can't access administrator options. The people who use it (a standalone PC in an office) just have been signing on as guest. I hope someone has a useful suggestion... I am at a loss.... Thanks! Tag: Change from Root CA to Subordinate CA Tag: 80988
  - 7
    - !!Email snooping question We use a microsoft exchange server at our office, and everyone's password is a certain combination of letters from their first and last name - same for everyone, so everyone knows each others password. I have noticed that I can, if I want to, access anyone's e-mail. And of course, the situation is also reversed. My question is this - if i go into someone else's mailbox, via internet explorer and through the exchange server, am I easily detected by our IT guys? And how do i know someone is not in mine? Tag: Change from Root CA to Subordinate CA Tag: 80981
  - 8
    - Help with File Security Windows Server 2003. I have a Shared folder on my server's C: drive which contains files shared by my network users. I need to setup security (permissions) so that I can keep people from deleting files in folders other than their own, creating files in other's folder, etc. I need to be able to designate an owner for each of the folders and give that owner full rights, etc. I need some tips on where to start and how to implement this. Do I start from the bottom up (at the subfolder level) or from the top down (at the Shared folder level)? Thanks for any help you may give. God bless. -- Dr. Doug Pruiett Good News Jail & Prison Ministry www.goodnewsjail.org Tag: Change from Root CA to Subordinate CA Tag: 80978
  - 9
    - notification for adding a new win account Hi , when someones adds a new windows account, i want to receive a notification . How i can do that ? Thanks Tag: Change from Root CA to Subordinate CA Tag: 80977
  - 10
    - Cannot take ownership of a folder Hi all, I have a W2003 SBS server. I copied a folder from a backup tape of our old NT4 server to this new server. Now I can't access, take ownership or delete the folder. On the old server the folder was owned by a single user. I have tried to replicate this users details in a new a/c on the new server but this still won't allow access to the folder. 1. Is there any way for me (the administrator) to take ownership outside of the security settings in Windows Explorer. 2. If not, how do I get the old NT4 server to become a BDC of the new domain so I can log on there with the old users credentials, browse to the file an change it's ownership. I have added the old server to the DNS of the new and can browse it from the new but not the other way. I tried looking this up but can't find an answer anywhere. -- Cheers Chas *************** * Spectrum is Green * *************** Tag: Change from Root CA to Subordinate CA Tag: 80957
  - 11
    - Active Directory Authentication over Firewalls Hi All, What are the minimum ports that I need to open on my FW for AD authentication? Thanks, Nir Tag: Change from Root CA to Subordinate CA Tag: 80949
  - 12
    - Get Rich Take advantage of a great deal Tag: Change from Root CA to Subordinate CA Tag: 80948
  - 13
    - How to make a drive private I have added an other drive to my PC running Win XP Pro. My PC has two users, one is me as administrator plus another with no adninistrator rights. The privacy setting on drive C, that contains all the program files including My Documents folders, does not let the other user have access to them while the drive F that contains all my working files is wide open. I tried to make the all drive private but the sistem does not permit me to mark that option. I need to make the all the content of drive F private, can anybody suggest me how to do it? Thanks Maurizio Tag: Change from Root CA to Subordinate CA Tag: 80945
  - 14
    - Spyware/Virus Cleaning favor Hello. I am looking for a favor. I know several of you (MVPs in particular) have developed extensive "So you've been hit with spyware, now what?" instructions for non-technical users. If you have a link to your advice, could you post it (or the contents)? My non-technical cousin is asking me for advice and I'd much rather point her to your site(s) than reinvent the wheel. Thanks. Byron Hynes Windows Server Microsoft Corporation http://spaces.msn.com/members/byronphyne Tag: Change from Root CA to Subordinate CA Tag: 80936
  - 15
    - MS06-01(912919) and MS05-02(908519) Setup Error I could not apply the following security patches to a couple of Windows 2003 SP1 servers. It came back with the following message. Setup could not verify the integrity of the file update.inf. Make sure the cryptographic service is running on the server. Thanks -- dle Tag: Change from Root CA to Subordinate CA Tag: 80932
  - 16
    - MSN Space Security I don't want anyone can't any pictures from my msn space! How will I do? Tag: Change from Root CA to Subordinate CA Tag: 80930
  - 17
    - Folder Security - Finding Group or User Name in Security settings We have a customer with a 2003 server SP1, there are 100's of "securied" folders which have in many cases "everyone" as a security user (users allowed to create their own folders). I need a quick way of producing a report on the top level folders as to who has access. Is there such a tool freely available? Many thanks in advance -- Regards Dave Tag: Change from Root CA to Subordinate CA Tag: 80928
  - 18
    - windows installer (again) Hi all - still having trouble with my windows installer - the installer would appear to be totally corupted and unusable, i have tried anything and everthing i can think of and more, i have tried with windows help to fix this problem but without success - i have downloaded installer 3.1 but that does not help me, if anybody has any help with this issue i would appreciate the help. my system is windows xp sp2 i am using a presario with amd athlon 2400+ -- good xping and best regards williameric Tag: Change from Root CA to Subordinate CA Tag: 80921
  - 19
    - NTFS Permissions Hello, I am trying to prevent network users from deleting folders and files on a network drive. I have decided to apply read/write but not modify rules to network users in order to prevent them deleting important folders etc however there is a problem with MS Office. When a document is opened or edited Word will always create a temp file, this temp file is then left on the drive because it was created but could not be deleted because the user is unable to delete. This in my mind is quite a serious problem as I do not want the network drive to become full of these .tmp files which are not necessary and take up resources. Is there a way to prevent the .tmp files being created in the first place, or a way in which to allow them to be removed once the user has closed the program. -- Thanks, Cep. Tag: Change from Root CA to Subordinate CA Tag: 80920
  - 20
    - ml1.srt and ml2.srt Anyone know what these are and how to get rid of them? Tag: Change from Root CA to Subordinate CA Tag: 80911
  - 21
    - Automatic Updates greyed out My Windows XP Security Center-Automatic Updates is ON, but when I click on Manage Security Settings all the settings are greyed out, and I can't change them. Is there something I need to do to activate them? Thanks, Mark Tag: Change from Root CA to Subordinate CA Tag: 80905
  - 22
    - Public Keys, Private Keys, & Certificates This is a multi-part message in MIME format. ------=_NextPart_000_0006_01C624A3.FBC504A0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Are all Public and Private Keys stored on certificates? ------=_NextPart_000_0006_01C624A3.FBC504A0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2900.2802" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DArial size=3D2>Are all Public and Private Keys stored = on=20 certificates?</FONT></DIV></BODY></HTML> ------=_NextPart_000_0006_01C624A3.FBC504A0-- Tag: Change from Root CA to Subordinate CA Tag: 80899
  - 23
    - ewido malware software every one it seems uses adaware and spybot s/d,has anyone any plus comments to advise on ewido or minus comments come to that. Tag: Change from Root CA to Subordinate CA Tag: 80896
  - 24
    - DCOM - Allowing Remote Anonymous Access Can anyone tell me or does anyone know where I can find information regarding the risk associated with changing the following DCOM policy: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) Syntax - to allow remote anonymous access? Does this change the RPC security setting on the XP system also? Tag: Change from Root CA to Subordinate CA Tag: 80889
  - 25
    - Surfing with User privileges Apparently a person cannot use these newsgroups operating their computer without administrator privileges. Just now I tried to post a new message with only limited privileges and could not get the dialog box for writing the new post to come up. This limitation hinders good security practice. I turned on the â??allow pop-ups from this siteâ?? but that didnâ??t work, and I turned on â??temporarily allow pop-ups from this siteâ?? but that didnâ??t do it either! In our home and business we are trying to use our computers with limited privileges more and more, to protect the current Windows setup and avoid spyware and adware. If programs used daily wonâ??t operate properly with these limited rights it makes operation frustrating. Russ Tag: Change from Root CA to Subordinate CA Tag: 80873
- Next
  - 1
    - OneCare Live file sharing Windows OneCare Live has firewall settings to allow file sharing with the local subnet only- a good idea! But it doesn't seem to work. On my home network with three PCs, file sharing worked fine until installing OneCare on the new HP notebook. Now this machine won't share anything, though the settings say that the firewall is configured for file sharing. Have others had this problem? A few days later I opened the firewall settings to allow sharing with all computers (even those on the internet, (as it warns)) and it does share with the home computers all right. Does this local subnet restriction not work correctly in OneCare Live? The notebook computer has XP Home and the others have XP Professional. May this be the difference? Russ Tag: Change from Root CA to Subordinate CA Tag: 80872
  - 2
    - Windows One Care Beta I downloaded WOC Beta and about 2 weeks later uninstalled it. After uninstall, reboot, and sign on (and every sign on since) I get an error message that says: Windows cannot find 'C:\WINDOWS\Nail.exe' . Make sure you typed the name correctly, and then try again....When I did a search for the file I found it. It was a quarantineed file by WOC Beta. It let me delete the file, but I still get this warning each time I sign on. How do I get rid of this warning? Thank you. Alex. Tag: Change from Root CA to Subordinate CA Tag: 80869
  - 3
    - Kama Sutra / W32.Blackmal.E worm questions I have Norton AV and it was updated on Jan. 17 2006 with the entry: W32.Blackmal.E@mm CME-24, Win32.Blackmal.F [Computer Associates], Email-Worm.Win32.Nyxem.e [F-Secure], Email-Worm.Win32.Nyxem.e [Kaspersky], W32/MyWife.d@MM [McAfee], W32/MyWife.d@MM!M24 [McAfee], W32/Small.KI@mm [Norman], Tearec.A [Panda Software], W32/Nyxem-D [Sophos], WORM_GREW.{A, B} [Trend Micro] Will I be okay no matter what? Is there a way you can get this worm without opening email attachments? I just saw a CNN report where they did not mention that you can get it by opening attachments. But the mainstream media doesn't explain these things very well. Tag: Change from Root CA to Subordinate CA Tag: 80853
  - 4
    - Has my Hotmail account been infiltrated? Hi I have a serious problem that I believe may be some form of identity theft and breach of security. I have been informed by a few people that I know that they have received emails, allegedly from me, which usually have the following traits: 1. they are from my Hotmail account and name, although the name on these emails has only my first initial instead of my full name that all my email accounts and client are set to 2. they are usually blank, but one or two reports that they had attachments 3. the subject line includes the phrase "Not read:" and is often followed by subject line text that had been in previous emails between myself and them. I am using a Mac with Microsoft Entourage as my primary email client. I have run both Norton Antivirus and MacScan and have found NO viruses, spyware or keyloggers. I have turned on OS X's firewall and I frequently clear all my browser caches and cookies. I have changed my Hotmail/MSN password. So far, this did not solve the problem. I do not use forwards nor multiple-address emails, and my contacts have zero connection to each other except through me. They do not receive emails from each other nor have each other as contacts. The only connection is through me. Does someone have access to my address and contacts somehow? This is very worrisome, your help is greatly appreciated... I have not received any response from Microsoft Security and this is very frustrating... I am worried someone can do some real damage. Tag: Change from Root CA to Subordinate CA Tag: 80844
  - 5
    - Default GPO I changed my default group policy setting for my Windows Firewall settings to Disable and now I can no longer see the Windows Firewall settings in my Group Policy Editor. Any help is appreciated! Tag: Change from Root CA to Subordinate CA Tag: 80843
  - 6
    - Testing MS Security Patches? Does anyone know of specific tests that should be performed before implementing MS security updates on production systems. I am a member of a large organization and we are trying to enhance our testing procedures before implementing MS security patches through out our production environments. Is there a document that shows what specific things should be considered? I'm looking for a guideline that displays how to validate that a security patch released by MS will not break any applications or the Operating System. Tag: Change from Root CA to Subordinate CA Tag: 80842
  - 7
    - backworm - way to keep safe if the domain policy means that users are only allowed to run programs from a limited list of programs (set up using the gpedit.msc) does this mean that we are safe(r) from the blackworm. indeed, does this mean that most viruses would fail to run? thanks, kevin Tag: Change from Root CA to Subordinate CA Tag: 80841
  - 8
    - Stumped by Image Displayed in Preview Pane This morning I received a piece of SPAM. No big deal. I get that on occassion, but this one had somehow managed to circumvent the security feature in Outlook that prevents images from downloading and displayed Lisa and Bart (Simpson) all smiles going at it doggie style with the caption "Your Baby's on the hook now..." Not sure what they were trying to promote, but I digress... The src attribute value of the img tag was "cid:000701c622b1$dc702290$87d4fea9@VAIO". It doesn't even look like a path. How does this path circumvent the feature to not display images? How does it even work? If I copy and paste this "path" into an HTML email and send it to myself, it does not even work, but somehow it presents an image in the original email and one that does not even have to be downloaded. I forwarded it to GMail and it displayed there as well. Very odd. Does anybody have any idea how this is pulled off? -- The only thing that sucks worse than ________ is apathy about _________. Tag: Change from Root CA to Subordinate CA Tag: 80839
  - 9
    - Recommendations for 'Anonymous Surfing' Hello all, Iâ??ve searched for relevant posts on my subject, but seeing none, I then ask this question: I am thinking of installing â??anonymousâ?? Web Surfing software on my home Network. My network consists of a Linksys Wireless cable gateway, a desktop, and a laptop which are running under XP Pro. I use both IE and Firefox 1.5, and I have the McAfee Security Suite running (Personal Firewall, Privacy Service, and Virus scan). I also use your hosts file. I see products out there such as â??Annonymizerâ?? Privoxy, and â??Ghostsurfâ??. My question is this: In the opinion of the MVPâ??s are these products â??safeâ?? to use with an XP system? Are there system compromises or unacceptable side effects of using anonymous software? Is this software any good, does it do what it says it will do, which is make me invisible on the net? Is there a â??betterâ?? product out there? Is it maybe just a dumb idea to try and be invisible on the net? Please notice that I asked you guys these questions BEFORE I purchased and installed the stuff, thus preventing me from writing a â??whoa is meâ?? post. Iâ??d like you all to know that I am learning something here! Opinions, please? And thank you in advance ! Tag: Change from Root CA to Subordinate CA Tag: 80832
  - 10
    - Problem with certificate authority Hello, i installed a certificat autority on Windows 2003 std SP1, when the service start i've got the error message bellow : "A Certification Authority cannot use a certificate template" (this message appear for each template).... in the event log ... The problem does not exist on a Windows 2003 without SP1. Any idea ?? thanks Tag: Change from Root CA to Subordinate CA Tag: 80830
  - 11
    - Security Experts Warn of Kama Sutra Worm (yet another MS worm) "Security analysts are warning computer users about a new and potentially destructive Internet worm that can obliterate important documents. The worm, called Kama Sutra, is making the rounds now, but is scheduled to execute its first massive attack on February 3. Detected last week, the malicious worm targets computers running Windows and spreads primarily by copying itself to shared network locations and then sending itself to e-mail addresses found on afflicted computers. With subject lines that read "the best videoclip ever," "give me a kiss," and "school girl fantasies gone bad," the worm entices computer users to open the attached file. " http://www.cio-today.com/news/Experts-Warn-of-Kama-Sutra-Worm/story.xhtml?story_id=12100465ZLIH Imhotep Tag: Change from Root CA to Subordinate CA Tag: 80822
  - 12
    - NTLM V2 in Windows 2003 Native Forest Does anyone know how to completely disable NTLM from a Native Windows 2003 Forest, apparently MS still needs NTLM even in Windows 2003. The problem we are trying to address is the security concerns with NTLM v2 not being an exception. It is widely felt that the MD5 & MD4 algorithms that it leverages are not secure enough..... We would like to completely eliminate NTLM communication including v2, apparently when a non-trusted client with proper use creds. tries to access something in a Native Windows2003 forest it still downgrades to NTLM... Any thoughts/hacks :-) appreciated. Tag: Change from Root CA to Subordinate CA Tag: 80819
  - 13
    - Shedule Task problem Hi, I'm running a Standard Edition SP1 with Exchange 2003 Standard SP1 and I have huge problems with my schedule task. I found out that the server was using 100% of CPU usage. After some test we found it was the Schedule service the one that was affecting the CPU usage so we disable it and everything worked just fine. The problem is that I can not even open the Schedule Task folder, when I tried to do this, the explorer freezes. I need to use the schedule task so I can make my backups, anyone can help me with this? Thank you. Tag: Change from Root CA to Subordinate CA Tag: 80815
  - 14
    - paranoid computer taken over??? when i went to verify my email address the first one i ran into was from microsoft....it wanted my to click on this link (https://commcenter.bresnan.net/SRedirect/profile.microsoft.com/RegSysProfileCenter/ConfirmEmail.aspx?lcid=1033&EmailEntered=billington%40bresnan.net&eck=%252boMI94ak2EWj2c0BLSUoYw&CP=2&brand=Microsoft&Wizid=74386565-ca25-47ba-8168-c42975812e84&fu=http%3a%2f%2fwww.microsoft.com%2fwn3%2faspx%2fpptredirect.aspx&Sec=1) the second email said microsoft customer support so i trusted that one ..........mmmmmm.........ahhh help.............. billington is paranoid........ Tag: Change from Root CA to Subordinate CA Tag: 80813
  - 15
    - How to get rid of unknown items.... i think my computers been taken over.... my operating system is windows xp home. but in sys info it says windows nt.. I know nt is the core of the system... my device profile makes my desktop look like a laptop... docking state unknown???? background keeps being changed from windows xp to windows xp (modified) also have emachines but it changes to bliss.. when you reset should your screen darken as it resets...also on advanced internet options the notify me if being redirected keeps getting unchecked..... should nt authority be listed as a user.... should my printer be listening (port 85) my email address is piperoller@bresnan.net and someone else has a net passport using that, i tried forgot password but could not reset because no matter how many times i typed the 6 letters it kept telling my email wrong or letters wrong..yet signed up fine on alternative email.... help........... PLUS have modern font in red that will not be deleted..... also should internet adress contain (redir)i believe updates are being stashed and i'm being told their installed............ has anyone heard of powerdvd RemoteControl,, or changer, or nvpdaemon,,, what about nview imposter... in registery,, also should font's be read in OEM..... why cant i unhide some files.??? help,,,,,, paranoid..................... also should the xp in windows be dark red??????? Tag: Change from Root CA to Subordinate CA Tag: 80812
  - 16
    - IIS 6, DMZ and antivirus Hi all, Is it current practice to install an antivirus software on an IIS 6.0 server even though it has been hardened and placed in a DMZ? Thanks Tag: Change from Root CA to Subordinate CA Tag: 80810
  - 17
    - External LDAPS connection help We are in the process of migrating off of Novell to windows and We have a unix box that runs scripts to create users and import them into the directory. Now we need to make that same script creat accounts in AD via ldaps. The problem is Im new to the certificate authority and all i need for testing purposes is how to create a cer and give it to the unix box so it can be trusted and log in with a user id to import users into AD. Thanks Tag: Change from Root CA to Subordinate CA Tag: 80809
  - 18
    - Spyware & Adware Should I be using more than 1 Adware & Spyware program? I was told to install at least 3 as they all fix different problems. Today I was told to only have one as they could be interferring with eachother. Tag: Change from Root CA to Subordinate CA Tag: 80801
  - 19
    - Detect what software is blocking connections Hello all! If this is offtopic, please advise of a better newsgroup, I thought this may be the right one. Our customers download and install our client/server based software on their computer. Many of our customers use Norton Internet Security and other types of software that block ours from connecting to the Internet. Sometimes the users don't know to click "Allow" and they block it then call us wanting to know why it's not working. My problem is that on some computers, we can find no software that is blocking connections but it is obviously happening. My question is does anyone know of any software out there that will tell you what program in memory is blocking network connections or acting as a firewall? Thanks so much! Matthew Tag: Change from Root CA to Subordinate CA Tag: 80798
  - 20
    - EFS and impersonated user Hello, I'm using Windows XP Pro (SP2) and I'd like to encrypt a folder using the API Advapi32 / EncryptFile using the credentials of a particular user different than the user logged in. I'm trying it impersonating the user first with the API Advapi32 / LogonUser, with different values in the parameters "Logon Type" and "Logon Provider". All cases, when I exec EncryptFile I get the error 87: invalid parameter. If I exec EncryptFile without impersonating the user all work ok and the folder is encrypted successfully related to my session user. Someone tells me that i'd have to load the user profile but I don't know how to do it during or after impersonating user. is it posible?, any idea? Thanks and best regards, Raul Truco Tag: Change from Root CA to Subordinate CA Tag: 80796
  - 21
    - EFS and impersonated user Hello, I'm using Windows XP Pro (SP2) and I'd like to encrypt a folder using the API Advapi32 / EncryptFile using the credentials of a particular user different than the user logged in. I'm trying it impersonating the user first with the API Advapi32 / LogonUser, with different values in the parameters "Logon Type" and "Logon Provider". All cases, when I exec EncryptFile I reach a the error 87: invalid parameter. If I exec EncryptFile without impersonating the user all work ok and the folder is encrypted successfully related to my session user. Someone tells me that i'd have to load the user profile but I don't know how to do it before. is it posible?, any idea? Thanks and best regards, Raul Truco Tag: Change from Root CA to Subordinate CA Tag: 80795
  - 22
    - Spyware & Adware I have been told to have at least 3 different spyare and adware programs on my computer as they each clean different problems out. Today I am now told to only use one as they fight with eachother and they will bog eachother down. What is the correct solution to successfully protect against all of the spyware & adware? Tag: Change from Root CA to Subordinate CA Tag: 80790
  - 23
    - Windows 2003 SP1 Hi, Did windows 2003 server SP1 up to date with all the security patches is more secure than windows 2003 server without SP1 but up to date with all the security patches? If yes - What changes causing this? Thanks, Nir Tag: Change from Root CA to Subordinate CA Tag: 80780
  - 24
    - infected? 1) Iâ??ve recently had a significant increase in the amount of spam getting through both the ATT and the MS Outlook spam filters. It frequently carries a subject line that I have used recently myself or the â??fromâ?? name or the subject are reminiscent of a personâ??s name or a topic that I have recently discussed in an e-mail. 2) Within the past 48 hours, shortcuts to IE and OL have not responded until I try them a second time. 3) Just now, when I tried to open IE, I got a dialogue box informing me that â??the operation can not be completed because yada-yada are missing.â?? A bit later it worked fine. I have just reverified the following: MS AntiSpyware is active. Norton Autoprotect is active. My virus definitions are dated 1/25/06. I have just visited MS Security Help, but didnâ??t find anything applicable. Yes, I clear my cache regularly. Every 24 hours or so. What else should I be checking? Thanks much! Tag: Change from Root CA to Subordinate CA Tag: 80768
  - 25
    - strange encryption behavior I am getting the following strange behavior in Outlook 2003 SP1 on XP Pro. I have previously received signed emails from my friend "Joe" who is in the GAL (although his certficicate is not in the GAL) I can see his certificate in Certificate Manager, under Other People, and it is reported there as OK. I have also previously sent him signed and encrypted emails successfully. *Sometimes* when I create a new email and select Joe from the GAL in the To field, activate the Sign and Encrypt buttons, type my message, and click Send I get: Microsoft Office Outlook had problems encrypting this message because the following recipients had missing or invalid certificates, or conflicting or unsupported encryption capabilities. I then go to a signed email I have previously received from Joe and reply to it, again making sure that the Sign and Encrypt buttons are activated. That works. Now I once again send a *new* email to Joe, as above. It now works. It continues to work for a while, then suddenly goes back into its old "problems encrypting this message" mode. What is going on here? I would prefer not putting the certificates into the GAL. I already tried the registry modifications recommended in: http://support.microsoft.com/?scid=kb;en-us;870564&spid=2520&sid=216#kb5 but it did not help. Tag: Change from Root CA to Subordinate CA Tag: 80765

I currently have an Enterprise CA that issues certificates from a subdomain
in my network (usa.abc-company.com). I have several thousand certs already
issued. I now want to create an offline root CA in the forest root
(abc-company.com) and be able not to affect the certificates that I have
already issued.

1) Is is possible to change the role of a CA from enterprise ca to
subordinate?

Top

Re: Change from Root CA to Subordinate CA by S

S
Sat Feb 04 18:07:32 CST 2006

I don't believe you can change role from root CA to subordinate. Technically
that means that you need to sign the CA key with another CA and not self -
not sure if that is possible with Windows CA

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

"Steve" <Steve@discussions.microsoft.com> wrote in message
news:BC2C4611-BE25-4984-B3AD-BE2A36CC2DE0@microsoft.com...
>I currently have an Enterprise CA that issues certificates from a subdomain
> in my network (usa.abc-company.com). I have several thousand certs already
> issued. I now want to create an offline root CA in the forest root
> (abc-company.com) and be able not to affect the certificates that I have
> already issued.
>
> 1) Is is possible to change the role of a CA from enterprise ca to
> subordinate?

Top