Monthly Archives: April 2011

Goodies from CAPolicy.inf–LoadDefaultTemplates

Not many people are aware of a certain available option in CAPolicy.inf that came with Windows Server 2003 SP1. The LoadDefaultTemplates is very useful since it prevents the CA to associate itself with the default list of certificate templates when … Continue reading

Posted in PKI | Tagged , | Leave a comment

How to remotely check if Base CSP is installed

At this TechDays 2011 here in Sweden, I got a question when I was standing in the Swedish Windows Security User Group booth about if there was some easy way to determine if the Microsoft Base CSP (KB909520) is installed … Continue reading

Posted in PKI | Tagged , , | Leave a comment

Don’t forget the CAPolicy.inf file!

Yesterday I saw it again – a Windows Server 2003 Root CA that was installed with NO CAPolicy.inf file!   Apparently, not everybody are aware about how Certificate Services works regarding the creation of the certificate that is being generated … Continue reading

Posted in PKI | Tagged , | 1 Comment

Function Get-UsersMailAddressesFromGroup

I did this little Function when I needed to send mails to all users in a special group. It uses the Module ActiveDirectory so you need to have it on the computer you using this function from. I use it … Continue reading

Posted in Uncategorized | Leave a comment

Windows 2008 R2 ADCS in a Windows 2000 ADDS

Last night, I did a quite fun test. I tested ADCS in 2008 R2 from a compatibility view. I installed a Windows 2000 mixed mode domain (schema version 13) and installed an Enterprise Root on a domain member running Windows … Continue reading

Posted in PKI | Tagged , | Leave a comment