You can't use different certificates for the same website (*). Use a public certificate, internal clients will trust it just fine.
(*) There are workarounds, but they are quite cumberstome and you shouldn't use them unless absolutely required.
I would agree with the other comments that if a simpler setup works for you, go simple. But to answer your original question, you can have multiple site bindings - you would setup one with the internal IP address and internal certificate, and another with the external/DMZ IP and public certificate. I would also suggest defining a host name per binding and ...
Don't raise domain functional level. If you do, the Server 2012 DCs will no longer be able to service the domain.
My recommendation would be to create a central store. The central store can be created on the SYSVOL partition on any domain controller (SYSVOL replicates through DFS to all domain controllers) and then go to the domain folder and find the ...
After digging around a bit more and conferring again with the developers behind other, I think we've figured out this issue.
Basically, the site hosting server.com and all the applications under it that will be participating in the rewrite (common, as well as foo and bar until we are ready to delete them) need to be running in the same IIS app pool.
Use /inheritance:r to remove all the inherited ACEs and /grant to add in the permissions you want the directory to have. You can do this in a single command, like:
icacls test /inheritance:r /grant me:(OI)(CI)(F) /grant Administrators:(OI)(CI)(F)
Do not use the /deny option. There are rare cases where deny entries are useful, but this isn't one of them.
The question I have is, can I build the server and configure the
service, without enabling it until we decide to make the cutover - aka
leave it in an offline state and flip the switch when we're ready?
Yes. Authorization need not come into play at all (and is only relevant id the DHCP server is AD domain joined). Authorize it or don't, the solution is ...
How do you plan to patch the IIS Servers? What tool do you use? WSUS? SCCM? BigFix? Altiris? or any other?
The WAY of SCOM - Its possible to trigger a script on a specific event ID.
SCOM - Run a script in response to an event detection
SCOM Script Template
You would need to define a service window to get your process automated.
Lets say ...
This may be a little late as an answer but as I found this question others might too, we had a similar problem and we found from other posts that we had to add the account to the local group 'Performance Log Users' on the server, this solved our issue.
1) Open the Computer Management tool.
2) Select Local Users and Groups -> Groups
3) Select the "...
Your's is the most comprehensive question so I will provide my input here.
From my testing in Windows Server 2012 R2, I can restore this functionality without rebooting by doing the following:
Unfortunately you have to force the restart of sstpsvc, which also requires Routing and Remote Access to restart, effectively ...
The option you mentioned is directly related to the windows search service.
It is greyed out when it's not installed.
Try using "Content:" or the corresponding word in your servers language in the search field, it will still find files with specific text content, although without indexing it might take some time.
Sorry for necromancing, but unanswered ...