Windows Certificate Services – Setup a CRL
Setup a CRL KB ID 0000957 Problem One of the often-overlooked tasks in a Public Key Infrastructure (PKI) deployment is configuring your Certificate Services Certificate Revocation List (CRL). For smaller deployments with only one server, you don’t need to worry about complex design considerations (though a CRL doesn’t have to be hosted on a Certificate Services server). In my test environment, I have only one PKI server,...
VMware – Replace the ESX Certificate
ESX Certificate KB ID 0000974 Problem ESXi comes with a self-signed certificate, and for most people that’s fine, but some clients want to have a ‘Trusted’ certificate on theirs, and have their own PKI infrastructure for issuing them. Below I will generate a new certificate for my ESXi server using the Active Directory Certificate Services role on Windows Server 2012. Then replace the self-signed certificate with my new...
Windows: ‘Trust Relationship Failed’
Trust Relationship KB ID 0000504 Problem Seen on Windows clients in a domain environment. The trust relationship between this workstation and the primary domain failed What’s Happened? Put simply, just like you have a password for your user account, the computer you log onto also has a password (you just never see it), it gets reset (by default) every thirty days, and all this runs in the background. For a lot of different...
You were not connected because a duplicate name exists on the network
Duplicate name exists KB ID 0000991 Problem I hadn’t seen this myself but it was asked in a forum the other day so I replicated it on the test bench. You were not connected because a duplicate name exists on the network. Go to System in Control Panel to change the computer name and try again. or You were not connected because a duplicate name exists on the network. If joining a domain, go to System in Control Panel to change...
Find Domain Schema Version
Find Domain Schema Version KB ID 0000025 Problem You want to upgrade or find out your current Schema version, or check that an” adprep / forestprep” command has worked correctly. Solution Find Domain Schema Version: PowerShell Use the following sytax Get-ADObject (Get-ADRootDSE).schemaNamingContext -Property objectversion Post Server 2016 Find Domain Schema Version The value is populated with Server 2016 again. If you...