Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
9

You can use single public certificate for both, external and internal clients. There is no need to use separate certificate for internal clients. Keep things simple.


3

You can't use different certificates for the same website (*). Use a public certificate, internal clients will trust it just fine. (*) There are workarounds, but they are quite cumberstome and you shouldn't use them unless absolutely required.


1

I would agree with the other comments that if a simpler setup works for you, go simple. But to answer your original question, you can have multiple site bindings - you would setup one with the internal IP address and internal certificate, and another with the external/DMZ IP and public certificate. I would also suggest defining a host name per binding and ...


1

Don't raise domain functional level. If you do, the Server 2012 DCs will no longer be able to service the domain. My recommendation would be to create a central store. The central store can be created on the SYSVOL partition on any domain controller (SYSVOL replicates through DFS to all domain controllers) and then go to the domain folder and find the ...


1

You will need the ADMX files for the Windows Server 2012 DC's in order to support any changes in Windows 10 Group Policy, regardless of if you were to deploy a Server 2016 DC.


1

After digging around a bit more and conferring again with the developers behind other, I think we've figured out this issue. Basically, the site hosting server.com and all the applications under it that will be participating in the rewrite (common, as well as foo and bar until we are ready to delete them) need to be running in the same IIS app pool. I've ...


1

This is because the CA that is issuing the certificate has it's signing certificate set to expire 6/29/2020. The certificate cannot be issued with an expiration date past the issuing CA's certificate.


1

Assign permissions to the computer account, or use an actual account and assign permissions to that account.


1

Use /inheritance:r to remove all the inherited ACEs and /grant to add in the permissions you want the directory to have. You can do this in a single command, like: icacls test /inheritance:r /grant me:(OI)(CI)(F) /grant Administrators:(OI)(CI)(F) Do not use the /deny option. There are rare cases where deny entries are useful, but this isn't one of them.


1

The question I have is, can I build the server and configure the service, without enabling it until we decide to make the cutover - aka leave it in an offline state and flip the switch when we're ready? Yes. Authorization need not come into play at all (and is only relevant id the DHCP server is AD domain joined). Authorize it or don't, the solution is ...


1

Good Question! How do you plan to patch the IIS Servers? What tool do you use? WSUS? SCCM? BigFix? Altiris? or any other? The WAY of SCOM - Its possible to trigger a script on a specific event ID. SCOM - Run a script in response to an event detection SCOM Script Template You would need to define a service window to get your process automated. Lets say ...


1

This may be a little late as an answer but as I found this question others might too, we had a similar problem and we found from other posts that we had to add the account to the local group 'Performance Log Users' on the server, this solved our issue. 1) Open the Computer Management tool. 2) Select Local Users and Groups -> Groups 3) Select the "...


1

Your's is the most comprehensive question so I will provide my input here. From my testing in Windows Server 2012 R2, I can restore this functionality without rebooting by doing the following: Restart w3svc Restart sstpsvc Unfortunately you have to force the restart of sstpsvc, which also requires Routing and Remote Access to restart, effectively ...


1

The option you mentioned is directly related to the windows search service. It is greyed out when it's not installed. Try using "Content:" or the corresponding word in your servers language in the search field, it will still find files with specific text content, although without indexing it might take some time. Sorry for necromancing, but unanswered ...


Only top voted, non community-wiki answers of a minimum length are eligible