Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

RE: IIS6 on W2k3 DCs

Subject: RE: IIS6 on W2k3 DCs
Date: Fri, 14 Jan 2005 21:25:59 -0500

One pro-vote for IIS6 being installed on DC is related to 
your Certificate Authority which might be installed on a DC. 
The Microsoft Certificate Engine would then by default; 1. 
try to obtain Certificate Revocation List updates from http 
location 2. offer certifcate enrollment for end-users via http
 
Actually, none of that has anything to do with the machine being a DC or
not. Enterprise CA, standalone CA, it doesn't matter- they should not be
installed on DCs. The items that you list, which are only a couple of the
methods available for CRL/AIA/CPS retrievals, do not have anything
whatsoever to do with the CA being a DC. And again, DCs should not be CAs,
both for performance and security reasons.

Laura


---------------------------------------------------------------------------
---------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>