RE: Client Certification when using Remote Web

Tech-Archive recommends: Fix windows errors by optimizing your registry

Dear Customer,

Thank you for posting back!

I am glad to hear that the information helps and thing is working correctly
on your side now!

Actually, it depends on your needs. If you worry your domain clients'
accounts being hacked, then you can authenticate users who log on with a
client certificate by mapping the certificates to Windows user accounts.
The mapped certificates are used to either deny access to Web resources, or
grant rights and permissions for the mapped user account.

However, normally, we also suggest that customers implement Strong password
policies. Open ''Server Management console'', navigate to Users snap-in. In
the right panel, click ''Configure Password Policies''. Enable the password
policies. You'd better also ask your users to change their passwords to
avoid successfully attack against weak password.

For more information:

Account Passwords and Policies
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/
security/bpactlck.mspx

I also suggest that you read the following White Paper to secure your SBS
Network.

Securing Your Windows Small Business Server 2003 Network
http://www.microsoft.com/technet/security/secnews/articles/sec_sbs2003_netwo
rk.mspx

Hope it helps! If you have any questions or concern, please feel free to
let me know. I am looking forward to hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
Thread-Topic: Client Certification when using Remote Web
thread-index: AcY9PLAbpWsBFQfLRJePszIrItKwEQ==
X-WBNR-Posting-Host: 212.88.88.67
From: "=?Utf-8?B?Q29yZQ==?=" <Core@xxxxxxxxxxxxxxxxxxxxxxxxx>
References: <E1A21549-9A51-459F-8104-CBA95B3FDE8D@xxxxxxxxxxxxx>
<QIIwpFsNGHA.608@xxxxxxxxxxxxxxxxxxxxx>
<C84CEA8F-6D8E-4A77-9C9B-C55E4A239990@xxxxxxxxxxxxx>
<Ynub7x5NGHA.3052@xxxxxxxxxxxxxxxxxxxxx>
<B118E715-4622-4CA0-BC12-FD1FFE74AD1F@xxxxxxxxxxxxx>
<8bX8eiOOGHA.2336@xxxxxxxxxxxxxxxxxxxxx>
<14336C9A-7DFF-4096-9D7E-36130E2F071F@xxxxxxxxxxxxx>
<sG3GLvFPGHA.2688@xxxxxxxxxxxxxxxxxxxxx>
<B4C38673-31BD-40FE-9784-9E348CDA0CD5@xxxxxxxxxxxxx>
<nMDXThTPGHA.4416@xxxxxxxxxxxxxxxxxxxxx>
Subject: RE: Client Certification when using Remote Web
Date: Wed, 1 Mar 2006 06:30:28 -0800
Lines: 117
Message-ID: <B38B9415-C1B7-432A-8E28-F0376D1A013C@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
Newsgroups: microsoft.public.windows.server.sbs
Path: TK2MSFTNGXA03.phx.gbl
Xref: TK2MSFTNGXA03.phx.gbl microsoft.public.windows.server.sbs:248431
NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
X-Tomcat-NG: microsoft.public.windows.server.sbs

Hi Brandy,

Thanks a million, that seems to solve my "problem" when moving the Client
Certificate to another computer.

Is this solution a good way to secure /remote web even more? - or is it
waste of work?



.

Relevant Pages

  • RE: Certificate Services on SBS 2003
    ... > This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ... you have installed the Certificate Services ... >>> server name for the SBS server. ...
    (microsoft.public.windows.server.sbs)
  • RE: Multiple Public Domains on 1 SBS Certificate
    ... Hi Jenny, ... See Certificate for SBS2003 for Multiple Public Domains REPOST in this Forum ... > This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ...
    (microsoft.public.windows.server.sbs)
  • Re: Group Policy Not Being Picked Up by Client
    ... Setup the client computer by running "Setup Client Computer" wizard to ... And assign the appropriate user accounts ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ...
    (microsoft.public.windows.server.sbs)
  • RE: Client Certification when using Remote Web
    ... Is this solution a good way to secure /remote web even more? ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ... When I look at the certificate a client had requested, ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot install certificate on Vista
    ... Windows Vista Help: About certificate errors ... How to use Certificate Services Web enrollment pages together with Windows ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ...
    (microsoft.public.windows.server.sbs)