Server 2012 – Certificate Services – ‘HTTP Error 403.14 – Forbidden’
KB ID 0001067 Problem I spun up a new Certificate Services server on my test network today, because I needed to issue some certificates for something I’m working on. It was a pretty vanilla build, just the Certificate Services role, and the Web Enrollment feature. Solution I spent a while searching this one down, as you can see (above) it was showing me the root cause of the problem. The page you normally see when you log into...
Microsoft Certificate Services Configuring OCSP
KB ID 0001084 Problem I seem to have done a lot of PKI the last 18 months. This week I needed an OCSP server deploying for the CA server on my test bench so I took the time to document it for future use. One of the most overlooked parts of a PKI deployment, is how to cope with ‘revoking’ certificates. Traditionally this has been done with a CRL, but there is a downside to CRL’s. Network devices tend to cache them,...
Install and Configure Remote Desktop Services (Web Access)
KB ID 0000104 Problem Originally we had TS Web in 2003, and while I had a little play with it, it basically just gave you RDP over web, which would have been good if it ran over HTTP or HTTPS, but it didn’t. Also, as anyone who has ever done a complex Google search for “/tsweb” will testify, left a nice big security hole in to your servers. With the release of Server 2008 we got TSWeb 2008, this was a whole different...
Remote Desktop Web Services – No Icons?
KB ID 0000703 Problem Seen on Windows Server 2008 R2, running Remote Desktop Services with web access. After successfully connecting to the web portal, you see no icons for your RemoteApp Programs. Solution This is a known problem. 1. Go to one of your domain controllers > Windows Key+R > dsa.msc {enter} > Active Directory Users and Computers should launch. 2. Locate the “Windows Authorization Access Group” >...
Add a URL to Clients “Trusted Sites” with Group Policy
KB ID 0000146 Problem You want to have a URL added to everyone’s “Trusted Sites” list, and to avoid visiting each machine you want to use Group Policy, Or users don’t have the rights to do this themselves and you want to add one for them, i.e. the URL of your corporate CRM System. Solution The Group Policy you need to edit is, Computer Configuration > Policies (This level is on Server 2008 only) >...