Re: http://localhost/certsrv doesn't work
Brian Komar (MVP)
rather than localhost.
IS it in Trusted sites or the Local INtranet site.
Brian
"Winton" <Win...@discussions.microsoft.com> wrote in message
news:59F95F4A-AD08-4E27...@microsoft.com...
> the error message should be "Service Unavailable"
>
> "Winton" wrote:
>
>> I have installed IIS and CA on window 2003 server, it shows "Server
>> unavailable" when i access http://localhost/certsrv.
>>
>> I check that the status of IIS and CA services are started. In IIS MMC,
>> it
>> has certsrv folder under "default web site". And it has default.asp under
>> certsrv folder.
>>
>> How to fix this issue?
>>
>> How many CA standalone root server can installed in one domain? or no
>> limit
>>
>>
>>
>>
>>
>>
Brian Komar (MVP)
Can you or can you not connect to the server.
You say that you cannont connect, but then say you can connect from the
local host or other member server.
There is no limit to the number of CAs.
Brian
"Winton" <Win...@discussions.microsoft.com> wrote in message
news:820283D4-991D-4E06...@microsoft.com...
>I tried use the dns name, netbios name & FQDN of the server, all are fail.
> The CA server has joined domain. I can access the URL from local host or
> other member server.
>
> How many CA standalone root server can installed in one domain? or no
> limit?
Peter Foldes
Are you trying to set this up in a AD or a DC domain. In any case there are experts
in the public.windows.server.security newsgroup that can help you with this Windows
Server issue. Please describe your situation as to in which domain (AD\DC ) you are
trying to achieve the following setup ( IIS and CA ) on a W2K3 along with which
version (Web,Standard,Enterprise)
--
Peter
Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.
"Winton" <Win...@discussions.microsoft.com> wrote in message
news:820283D4-991D-4E06...@microsoft.com...
>I tried use the dns name, netbios name & FQDN of the server, all are fail.
> The CA server has joined domain. I can access the URL from local host or
> other member server.
>
> How many CA standalone root server can installed in one domain? or no
> limit?
>
> "Brian Komar (MVP)" wrote:
>
Brian Komar (MVP)
Several of us have been engaging Winton in *this* news group.
We are all fine with answering his question in *this* news group.
Don't you have anything better to do than to send you standard "move it to
another newsgroup"
Jeesh
Brian
"Peter Foldes" <okf...@hotmail.com> wrote in message
news:%239vmdOI...@TK2MSFTNGP04.phx.gbl...
Peter Foldes
nobody better to answer his issue then going to the right source
(server.security)where he could be helped. Would you also undertake someone posting
about an Office or SQL security issue here or have the OP helped where it is best.
(as an example )
Thanks for your concern Brian but I do feel different from you on this and your
concern is noted by me.
--
Peter
Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.
"Brian Komar (MVP)" <brian...@nospam.identit.ca> wrote in message
news:eayweWJu...@TK2MSFTNGP04.phx.gbl...
Brian Komar (MVP)
you post*anything* other than your standard "this is the wrong forum".
Next time, provide an answer or do not bother at all if the thread is
active.
Thanks,
Brian
"Peter Foldes" <okf...@hotmail.com> wrote in message
news:OksDq5Ju...@TK2MSFTNGP05.phx.gbl...
Martin Rublik
Winton wrote:
> I tried use the dns name, netbios name & FQDN of the server, all are fail.
> The CA server has joined domain. I can access the URL from local host or
> other member server.
>
Perhaps you could run certutil -vroot. This command will recreate the virtual
directories for IIS. Also check IIS logs, application and system event log if
you can find something unusual.
Regards
Martin
Peter Foldes
OK. I leave it as a difference of opinion.
--
Peter
Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.
"Brian Komar (MVP)" <brian...@nospam.identit.ca> wrote in message
news:emcBh$OuJHA...@TK2MSFTNGP05.phx.gbl...
Paul Adare
> Jeesh Brian. Winton is talking about a W2K3 Server Security issue and hence there is
> nobody better to answer his issue then going to the right source
> (server.security)where he could be helped.
You're wrong here. Brian wrote the books on Microsoft Certificate Services
(both for Server 2003 and for Server 2008) so regardless of your feelings
about where the question should or should not have been asked, there is
nobody better to answer his question than Brian.
--
Paul Adare
MVP - Identity Lifecycle Manager
http://www.identit.ca
Peter Foldes
Regardless that Brian wrote the book on Microsoft Certificate Services I was always
taught since being actively participating in these MS newsgroups since 1994 and
being one of the first MSN-MHM persons
that when an OP asks and has an issue it is best to answer it in their respective
newsgroup. Maybe the OP gains help here but it would also help other OP's with the
same or similar issue when posted to the appropriate newsgroup. This issue belongs
with the Server (03\08) newsgroup . I see to this every single day and even today as
a matter of fact where MVP's are directing posters to their respective newsgroup
when the said poster posts in the wrong one. Even though they (MVP's ) know the
answer and are capable to answer .
For me that is the reason for different newsgroups . If this is the thought of some
as per our conversation then all these different groups should not exist and this MS
sever then can get along with only a few groups vs. as many as today. The above was
once explained to me by John Eddy and then it made sense to me.
Sorry about the difference of opinion but this is my side of the above.
Thanks Paul
--
Peter
Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.
"Paul Adare" <pka...@gmail.com> wrote in message
news:1gxq0hcinhpi8$.14tz3wqtfyjl2.dlg@40tude.net...
Brian Komar (MVP)
newsgroup.
Not challenging you. Just really want to know your take on it.
Brian
"Peter Foldes" <okf...@hotmail.com> wrote in message
news:uAVu4qSu...@TK2MSFTNGP03.phx.gbl...
Peter Foldes
Not beating a dead horse at all Brian. My take on this is that for example
public.security and public.windows.server.security or public.vista.security and etc
all have their respective subjects . I believe that for example public.security is
not for server based systems but for the average computer user using ( not a server
based ) computer with security concerns or issues. The server based security
questions\issues should not be addressed here but in the windows.server.security
newsgroups as should the vista.security be addressed in the vista.security newsgroup
and on and on groups .
Maybe I am looking at this wrong but I feel that it should be like the above. I am
not a young person and the reasoning on this subject on this matter which we are now
discussing has always led me to this conclusion.
The rest of my explanation on how I feel on this subject is in the previous posts
as per above
And to answer your question directly the topics that belong in any security
newsgroup as per any OP's OS
is how they perceive security with what can be done in\with their respective system
to harden it .
--
Peter
Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.
"Brian Komar (MVP)" <brian...@nospam.identit.ca> wrote in message
news:u$c3MgIvJ...@TK2MSFTNGP05.phx.gbl...