Windows Certificate Services ‘certsrv’ Website displays 403.14
KB ID 0001342 Dtd 31/08/17 Problem I seem to get all the PKI/Certificate services problems! Yesterday I was trying to use the web enrolment portal on a certificate services server, and could not get in locally, (or remotely) via http, (or https) it simply showed me a 403.14 error. HTTP Error 403.14 Forbidden Solution This was an odd one, in IIS Manager select the ‘Certsrv’ virtual directory > Advanced Options > And...
Updating Domain Computer Objects with User and Machine Information
KB ID 0001340 Dtd 24/08/17 Problem I can’t really take the credit for this, I was at a client’s site a few weeks ago, and they were doing this. I thought ‘That’s cool, I’ll have a play with that when I get the chance”. Essentially, you update the description of the Computer object(s) in AD so that they list; The last user who logged on. What time they logged on. What AD ‘Site’ the...
Setup up a Central ‘PolicyDefinitions’ Store (for ADMX files)
KB ID 0001339 Dtd 03/08/17 Problem We have had ADMX files for group policies for ages now, they are the successor to the older ADM files. They only really trip you up if you have something unusual to do, (like roll out LAPS, or Forefront, or Customising Office Deployments.) In most cases you will want to have a central store in your Windows domain, so the clients can see the ADMX files, (and ultimately enforce the policies within...
An Invalid Directory Pathname Was Passed
KB ID 0001338 Dtd 28/07/17 Problem While attempting to delegate administration of an OU, I got this error; Delegation of Control Wizard The wizard cannot retrieve security information from the Active Directory. An invalid directory pathname was passed. Solution Took a while to figure out! The OU in question has a ‘slash’ in the name of it; Once I changed this to a hyphen, the error ceased. Related Articles, References,...
Using LDP to Find an Objects ‘Distinguished Name’ in Active Directory
KB ID 0001337Â Dtd 27/07/17 Problem There are a few occasions when you need to know an objects ‘Distinguished Name’ (DN). For me it’s usually when I’ve got a device that needs to do LDAP/LDAPS lookups, (RSA Appliance, Netscaler, Cisco FirePOWER, etc). Today someone needed to ‘bind’ a Checkpoint firewall to Active Directory, and asked me to create user, and give them the DN and password. I’ve...
Windows – Unable to Move an OU
KB ID 0001336 Dtd 26/07/17 Problem I was doing some AD redesign work for a client this week, and I needed to move an Organisational Unit (OU). However the domain had other ideas; Active Directory Domain Services Windows cannot move object {OU-Name} because: Access is denied. It wasn’t a rights issue, (I was an Enterprise Administrator).  Solution As it turns out, it was the same problem I’d had back when Server 2008...