1,774 questions with Windows Server Security tags

Sort by: Updated
Updated Created Answers
3 answers One of the answers was accepted by the question author.

cve-2020-1472 Security patch kb4571719 not installing in server 2008 r2 enterprise

I want to Install CVE-2020-1472 patch (KB4571719) on my window server 2008 r2 enterprise server. But i got error shows "The Windows Modules Installer must be updated before you can install this package". on my server Servicing stack update…

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-10-07T11:05:54.993+00:00
jay patel 61 Reputation points
commented 2020-10-07T11:19:48.117+00:00
Leon Laude 85,716 Reputation points
1 answer

Report to output the latest patch of all servers

I have used windows group policy to deploy security patches to all servers. How can I output in the form of report of the date security patches applied to the server. I have not used SCCM but have the database if that can be used as a tool to report the…

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-10-05T13:22:23.563+00:00
Avyayah 1,271 Reputation points
answered 2020-10-07T04:07:31.287+00:00
Avyayah 1,271 Reputation points
1 answer

Choose CSP when using Get-Certificate powershell

Hi, I am looking for a way to change the CSP which is being used by the Get-Certificate powershell function. To be precise, i am trying to use the CSP Type 24 Microsoft Enhanced RSA and AES Cryptographic Provider. Issuing certificates from the…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,149 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,446 questions
asked 2020-10-06T12:26:47.407+00:00
Georg2G 6 Reputation points
answered 2020-10-06T13:47:58.097+00:00
Vadims Podāns 9,116 Reputation points MVP
2 answers One of the answers was accepted by the question author.

Micosoft CA - Wildcard certificate. Multi Domain yes/no?

Hi Just a problem We have a domain CA (a root CA which is offline and a sub CA which is domain joined) based on windows server . An external customer is asking for a wildcard cert. My question is: (Please read the domain correctly, I have to…

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-10-05T07:33:11.923+00:00
Lutz Rahe 61 Reputation points
answered 2020-10-06T03:31:01.17+00:00
Lutz Rahe 61 Reputation points
1 answer

WinRM HSTS

Hi everyone, i'm doing some security scans for PCI and i keep getting flagged for HSTs on Winrm, i know how to fix it for IIS but i have no clue where to begin for winrm, didnt even know HSTS on winrm was a thing. Does anyone have any advice on this? or…

Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,425 questions
Windows Server Management
Windows Server Management
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Management: The act or process of organizing, handling, directing or controlling something.
424 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-09-28T17:23:37.507+00:00
Raymond Brooks 106 Reputation points
commented 2020-10-06T01:50:58.77+00:00
Jenny Yan-MSFT 9,326 Reputation points
3 answers

My SQL Configuration changes automatically

HiI would like to know why my SQL configuration is changing automatically. I am a worried that it can be a security issue. First my admin account, the one I use locally with Windows Authentication get disabled. Then a DB in my instance changes to…

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
13,200 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-10-03T04:21:11.137+00:00
Jorge 21 Reputation points
answered 2020-10-06T01:45:15.163+00:00
m 4,271 Reputation points
9 answers One of the answers was accepted by the question author.

ZEROLOGON - GPO - Active Directory

Hi there Microsoft! I have an AD Domain running 2 x 2016 Domain Controllers (virtual) - FFL & DFL are both 2012R2 and were uplifted recently from 2008R2. The single domain in a single forest has recently been uplifted from 2008R2, the old…

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,997 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,149 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-09-29T15:37:25.287+00:00
Mike OConnor 31 Reputation points
answered 2020-10-05T14:35:28.86+00:00
ChrisDz 26 Reputation points
1 answer

Active Directory solution use case

We have a customer with around 100-120 employees, most are field staff with laptops. They have no Active Directory on-premises, all laptops are in a workgroup with no management and control. They are facing security challenges and need to control…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,149 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,350 questions
asked 2020-09-12T12:24:19.747+00:00
Yara 1 Reputation point
commented 2020-10-02T00:04:03.707+00:00
JamesTran-MSFT 36,531 Reputation points Microsoft Employee
2 answers One of the answers was accepted by the question author.

Flooded with Event ID 4663

On a server 2016 and 2019 machine, I'm getting flooded with Event ID 4663 logs when the following group policy is enabled: Computer Config -> Windows Settings -> Security Settings -> Advanced Audit Policy Config -> Object Access -> Audit…

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-09-30T21:50:13.287+00:00
AndrewD84 41 Reputation points
accepted 2020-10-01T17:07:52.58+00:00
AndrewD84 41 Reputation points
5 answers

How to force user to open files only from one location on Office 2016

Hello, We have an Excel 2016 published on Citrix for our users. We have a requirement that user can open spreadsheets from one specific location (user homedrive mapped in his AD profile). We have blocked navigation via Windows Explorer and via address…

Office Management
Office Management
Office: A suite of Microsoft productivity software that supports common business tasks, including word processing, email, presentations, and data management and analysis.Management: The act or process of organizing, handling, directing or controlling something.
2,058 questions
Excel Management
Excel Management
Excel: A family of Microsoft spreadsheet software with tools for analyzing, charting, and communicating data.Management: The act or process of organizing, handling, directing or controlling something.
1,685 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-09-21T07:38:23.8+00:00
Michal Zyzak 31 Reputation points
commented 2020-10-01T09:05:14.83+00:00
Emily Hua-MSFT 27,581 Reputation points
2 answers One of the answers was accepted by the question author.

SMB Signing not required vulnerability

Hi All, We are seeing SMB Signing not required vulnerability in our domain joined servers, but this vulnerability is not reported in our ADDS server. could you please let me know why vulnerability is not appeared in ADDS but appearing in domain joined…

Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,425 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,516 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-09-09T11:36:44.033+00:00
Fahrid F 196 Reputation points
accepted 2020-10-01T06:05:15.863+00:00
Fahrid F 196 Reputation points
4 answers One of the answers was accepted by the question author.

Logon restriction hours

Hi Why logon restriction hours doesn’t work when the domain cannot be reached ? Eg I unplug the Ethernet and the user can log on normally. Put Ethernet back and the user cannot log in anymore. What’s the mechanism behind this ? Thank you !

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-09-27T01:42:45.397+00:00
Thiago N 21 Reputation points
answered 2020-09-30T10:39:30.737+00:00
Thiago N 21 Reputation points
7 answers One of the answers was accepted by the question author.

KB4571723 superceeded (by KB4578013) and not required -but manually installs

For patching against CVE-2020-1472 | Netlogon Elevation of Privilege Vulnerability, the relevant update for security only updates is: W2012R2 KB4571723 Security Only - However this is superceeded by KB4578013 which is an out of band update which…

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
Microsoft Configuration Manager Updates
Microsoft Configuration Manager Updates
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Updates: Broadly released fixes addressing specific issue(s) or related bug(s). Updates may also include new or modified features (i.e. changing default behavior).
1,005 questions
asked 2020-09-24T13:11:24.697+00:00
JG 396 Reputation points
commented 2020-09-30T10:22:55.763+00:00
Joy Qiao 4,886 Reputation points Microsoft Employee
1 answer

Exporting GPO setting on Member Servers using Secedit not Working

OS Windows server 2012 R2 Datacenter I want to be able to export some Software Restriction Policies from the Local Security Policy. I am trying this on member server machines. The command I am trying to run is: In powershell run as …

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,997 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,516 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-09-29T13:33:47.847+00:00
Pinkal Ganjawala 1 Reputation point
answered 2020-09-30T09:05:59.333+00:00
Vicky Wang 2,646 Reputation points
1 answer One of the answers was accepted by the question author.

Query about Local administartor password solution

Hi, One of the Windows 10 workstation last contact to domain controller was on 29-May-2020. LAPS Password expired on 14-Jun-2020. If I enter the password then the workstation does not accept the password. Is there any reason why the LAPS…

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-08-04T16:03:02.087+00:00
Boopathi Subramaniam 3,281 Reputation points
accepted 2020-09-29T10:17:27.123+00:00
Boopathi Subramaniam 3,281 Reputation points
1 answer

There is additional "(1)" in the CDP Location and delta cdp location in the sub CA . How to remove (1)

Hi team Recently I have renewed my subCA certificate . when i have checked pkiview.msc i have noticed that there is an addtional '(1)' in the ldap CDP location. i also have http location and there also this (1) is appearing. i have renamed to CA name…

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-09-28T13:29:38.587+00:00
Arun Thomas 1 Reputation point
commented 2020-09-29T01:57:47.62+00:00
Hannah Xiong 6,256 Reputation points
1 answer

Get-WmiObject Win32_ComputerSystem return 0x800706BA error

In my environment, it has a root AD domain which has two child domain child1 and child2. The server, Windows 2016, is in child1 domain. For a client computer, Windows 10, which is in child1 domain, if I run command as following Get-WmiObject…

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-09-21T14:59:33.14+00:00
J. L 1 Reputation point
commented 2020-09-28T07:32:25.303+00:00
Daisy Zhou 20,791 Reputation points Microsoft Vendor
1 answer

Struggle with Winows event log collectors

Hi Log collectors or SIEM tools are useful because the native Windows Event Viewer is slow, can search a limited number of logs only (around 4GB = 24h Security Log on DC), does not work across systems and cannot perform analysis or send alerts. …

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,516 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-09-24T16:09:15.75+00:00
Fabian 261 Reputation points
commented 2020-09-25T08:50:27.527+00:00
Fabian 261 Reputation points
3 answers One of the answers was accepted by the question author.

PKIVIEW CDP location not updating

I am having a similar problem as this: https://social.msdn.microsoft.com/Forums/en-US/bc49c902-f8cf-4c9f-b239-09c7470ceb9b/enterprise-pkiview-not-updating-http-cdp-files?forum=winserversecurity …

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-09-23T19:15:20.187+00:00
KJ 81 Reputation points
commented 2020-09-25T06:27:13.25+00:00
Fan Fan 15,321 Reputation points Microsoft Vendor
2 answers One of the answers was accepted by the question author.

Windows 2019 Certificate Authority is adding 10 minutes to my Certificate Expiration Date

Here's one for the ages. I built a new subCA from a base Server 2019 build. I have done this several times in the past. I issued it a 10year cert from the RootCA. So far everything is good. I configured certificates to be valid for two years. Now…

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2020-09-23T04:23:18.01+00:00
Chris Krikorian 21 Reputation points
accepted 2020-09-23T16:44:38.943+00:00
Chris Krikorian 21 Reputation points