Tag Archives: DXter

Using Task Sequence as display name during LTI in MDT 2010

For some time now, I have had the _SMSTSORGNAME variable in CustomSettings.ini set to “DXter’s Deployment Solution” as a display name during deployments in my home environments. However, since I do a lot of installations in my home environments, sometimes … Continue reading

Posted in Deployment | Tagged , , , | Leave a comment

My PowerShell based certificate viewer

For some time now, I have been a little bit tired of certmgr.msc, the certificate management MMC-snap in. Not only by the fact that a user needs local administrator rights to be able to open it (because MMC itself needs … Continue reading

Posted in PKI, PowerShell Blogs | Tagged , , , | Leave a comment

Automated certificate management in ADFS using PowerShell

Now don’t get me wrong, I absolutely love ADFS. I think is a great way to enable single sign on and federated login on a per application basis using existing identities in your infrastructure. However, the only thing I don’t … Continue reading

Posted in PKI | Tagged , , , , , | 6 Comments

Some fun with the Public Key Services container and the ADCS wizard

Recently, I did an experiment of how well the ADCS wizard handles an administrator who “destroys” the Public Key Services container were ADCS and ADDS stores all PKI related information. I did many different tests and one of the was … Continue reading

Posted in PKI | Tagged , , | 1 Comment

CADCT – CA Decommission Tool

Have you ever wonder how­ to remove, uninstall or delete a specific CA from Active Directory in an easy way? Well, for some time now, I have been playing with a little PowerShell script I have created for easy decommission … Continue reading

Posted in PKI, PowerShell Blogs | Tagged , , , | 8 Comments

certutil–dsdel does not clean up completely

I have noticed that some people have tried to do a CA decommission with the dsdel option in certutil. However, there is just a little, little problem with it: it does not remove everything!   Now, what is wrong with … Continue reading

Posted in PKI | Tagged , , , | Leave a comment

The BitLocker certificate EKU and Windows Server 2008 R2

Today, I discovered something that kind of bothered me.   I enrolled a number certificates in my test environment and the BitLocker Drive Encryption EKU (1.3.6.1.4.1.311.67.1.1) was one of the EKU’s present in the certificates. I looked at one of … Continue reading

Posted in PKI | Tagged , , | Leave a comment

Automated boot image management in MDT 2010 and WDS using PowerShell

One of my favorite features in MDT 2010 is that everything you do in the GUI is executing a PowerShell command that is using the cmd-let’s that comes with the MDT 2010 PowerShell snapin.   This gives excellent opportunities for … Continue reading

Posted in Deployment, PowerShell Blogs | Tagged , , , , | Leave a comment

PKI cleanup in AD with PS

Yesterday I created this little script and I wanted to share it with you guys. Now that PKI View is removed from KB889250, some people has asked me how to remove all references to old PKI structures in Active Directory … Continue reading

Posted in PKI | Tagged , , , | 5 Comments

Network Access Protection – How to do it, step by step…

One of my favorite Microsoft documents is “Demonstrate NAP 802.1X Enforcement in a Test Lab”. Many people usually ask me how NAP works and it is always nice to be able to give a document as a reference when you … Continue reading

Posted in News | Tagged , | Leave a comment