Відео

Great video sir, thank you

I have a question regarding Windows PKI infrastructure design. Woudl it make sense to add a 3rd server for CRL and for new CSR coming from non-Windows AD integrated machines that coming from a not fully trusted network? I imagine having the offline RootCA in our management network, the Enterprice (Issuing) CA in our normal VM network which is going to be contacted from our Windows machines to request and get new certificates (as of my understanding, correct me if I'm wrong here). However, we might install some certificates in not fully trusted networks that are connected via Site-to-Site VPN. The clients at these VPN networks would need our root certificate, and access to CRL. We would then create this CRL and CSR server in our DMZ so we don't expose our Enterprise CA directly. Would this make sense? BTW, thanks a lot for this video, this was a really good starting point here.

That was Gold , thank you Sir

great learning material 👍

Thank you for the in depth explanations. Will it work if I set my external switch to connect to my Wi-Fi network with the "allow management operating system to share this network adapter" check box checked? It is not working for me whereby my host internet connection still works but my VM keeps on showing no internet connection despite recreating the external switch and routing it to a dedicated IP address. Internal, default and private switches did not work either.

Just started my journey into home labbing, and your channel has helped me a lot the past couple days. Thank you for the content

Really good video easy to understand active directory certificate services, but can you tell me that, why you not explain CA policy. inf file which we want to keep under root of cwindows. Do we must require this CA policy. inf file to install and configure standalone root CA or Enterprise CA

Thanks Troy...Superb teaching skill...Appreciated it

Excellent Videos , Thank you

Not sure if anyone will reply to this comment. But I got stuck at the pinging the switch part from PC01. I tried and it kept saying Request timed out. I followed closely along with Troy, but my result is different. What am I doing wrong?

This video has helped me so much, thank you for this straight-forward video with all the explenations i needed

Thanks a TON Troy !!! what a video!

Great intro to ADCS . Thank you very much Troy !

Super information regarding all my query thanks

One of the best explanation for virtualization thanks alot sir

Can this be a job of its own?

Very nice

When I went to Microsoft to Download the Evaluation Software I saw the option to download the ISO or a VHD, why do you recommend to download the ISO instead of the VHD, if the VHD is already a Virtual Machine ready to deploy ? (great work with the video tutorials...)

Hi Troy, it was an exciting videos! Thank you Anyway, could you please give an advice about the configuration firewall in front of router? So, the firewall will be connected directly to the ISP Hope you can see the comment :) Thank you, again!

Thank you so much Sir, Much appreciated really

perperfect

negative. you suck! don't pretend like people who are watching your 1 video are experts already.

How to configure that if one of the DC is off or down? How to make the other one works?

this it seems to work also on windows server 2019, am i right?

Thank you for sparing my limited attention span. Raw information demonstrated by clear examples. Saved me from hours of experimenting! For anyone attempting to replicate these examples, be sure to check target VM's Firewall if ping requests initially fail. In 2024 ... a newly created Win10(22H2) VM may have its Inbound ICMPv4 Firewall Rule disabled which will inhibit its response to any external ping request (ie. the request will be blocked by the Firewall). Windows Defender Firewall -> Advanced Settings -> Inbound Rules -> File and Printer Sharing (Echo Request - ICMPv4-In) -> Enable

Is there a possibility to move users to another subnet?

thank you. your videos is the best 😁

I thank you for your great Service, i life in Austria, I have an Examination in Network Management and your Vid helped me tf out, Thanks

Hello, Just looking at you video, but one big question. Why you let the Root CA as a workgroup computer ?

Hello, I want to set up a local network with Internet connection, a modem, a server that I installed using the dhcp method, and a modem that has dhcp enabled. I want the clients to get the IP from the server and from the internet modem, can I do this with the firewall settings?

Following these instructions literally as-is destroyed one of my machines (at least I unfortunately thought so and ended up deleting and starting completely over). There can NOT be any missed steps or "magic" steps. When you say "Use the administrator password created during the process", that is a magic step, because we did no such thing. Ultimately, after a lot of research and going through super vague instructions, the LOCAL administrator account because your first domain account. When you first login, you login as "<computer_name>\administrator". The computer_name is usually hidden. After reboot, login as <domain_name>\administrator, with the SAME password as the previous local administrator account. Note that if you're RDPing into a machine, you MUST type the domain_name\administrator, and the domain_name part will disapear, but its still secretly there. I do appreciate this video, but please update or add a note. Hopefully this helps someone.

The way you explain is easy to understand. Thak you

Troy thank you for the detailed explanation it was most helpful! Is there any notes/highlights that might be different on setting up a second sub ca?

Forgive me. Somewhere around spot 14:25 - 14:30 you start jumping all over the screen, making following you a very difficult. Perhaps you might to say where you are going so we can all follow.

Pure gold men! congrats!

your presentation skills are excellent

Hey Troy Its Awesome-Fabulous work you have done Thanksssssssssssssssssssssss a lot man. It's very -very useful for me. Great work keep it up bro.

Top class information!!!

So much effort to set a basic parameter through the command-line, and you need a second computer to refer to a GUI. The server still has a GUI: you can see windows popping up. Microsoft ripped out a true full screen textmode some time ago. A basic Windows2000-like GUI wouldn't have any footprint.

Thats a terrific job!

thank you very much for your thorough explanations, top notch work.

This is the greatest video, thank you so much.

is it possibile to change the subnet of the DEFAULT SWITCH ?

Extremely well done. Very clear and concise despite the apparent length. Saved me many hours of beating my head on the access problem.

Spent two hours trying to make a DNS server before coming across this. By far the best explanation so far

Question- How do I issue internal website certs using my issuing cert authority server?

Excellent Excellent! Thank you so much

Such an amazing video!! It was challenging to find out a right one, but was this! easy to understand and follow. Learned a lot! Thanks very much!

I followed your instructions and the private network will not communicate with VMs

Thank you for this valuable tips , as a learner it really helps.