MSEndpointMgr
daughterswap sona bella delilah dagger 010 upd

Their journey took them through treacherous landscapes and hidden caverns, testing their skills, courage, and resolve. Along the way, they discovered that the thief was none other than a disgruntled former resident of Ashwood, seeking revenge.

As fate would have it, a distressing cry pierced the air. The town's prized artifact, a gemstone that ensured fertility and prosperity, had been stolen. The elders, in a state of panic, called upon Dagger to lead the search and retrieval mission. Sona, with her tracking skills, Bella, with her knowledge of potential thieves, and Delilah, with her ability to gather information through her performances, found themselves recruited for the quest.

Dagger, a brooding and enigmatic figure, was Ashwood's protector. With a past shrouded in mystery, he was a man of few words but of immense loyalty and bravery. His skills in combat were unmatched, and the people of Ashwood looked up to him with a mix of admiration and awe.

Bella, on the other hand, was the epitome of social grace. As the daughter of one of Ashwood's most influential families, she was well-versed in etiquette, politics, and the art of diplomacy. Despite her poised exterior, Bella harbored a secret desire for adventure, often finding herself lost in the pages of dusty novels about brave warriors and epic quests.

Their adventure had forged an unbreakable bond among them, and as they stood together in the town square, they knew that their lives would never be the same. Sona had found companions who appreciated her solitude and skills, Bella had discovered a taste for adventure that she could no longer ignore, Delilah had a new audience and perhaps a reason to stay in one place for a while, and Dagger had found camaraderie that made his protective duties less lonely.

13 comments

  • Hello,

    We followed your guide to the letter on a 2016 and 2019 server but we keep running into the problem that the SCEP application pool keeps crashing for no real reason. We already ruled out a mistake in the templates or wrong CA certs in the intermediate.
    We can see the Cert requests arrive but IIS dies everytime we see this in the NDES log:

    NDES COnnector:
    Sending request to certificate registration point. NDESPlugin 18-4-2019 17:04:05 3036 (0x0BDC)

    Event viewer just shows us that w3wp.exe has crashed and that the faulty module is ntdll.dll.

    We’ve been banging our heads against this problem for a week now so we hope you have any idea where to look.

    Regards,
    Herman

  • Nick, your stuff is amazing as always! .NET 3.5 appears to be required, so may be worth mentioning somewhere since some installations will need to specify an alternate path for that.

    Using your script, I was failing on “Attempting to install Windows feature: Web-Asp-Net” and it wasn’t until I manually added 3.5–specifying the alternate path to the Server installation media–that I could continue.

  • Does this work for Android for Work or Android Enterprise devices? I can’t find the certificate issued to the end mobile devices even – iOS?

  • Hey Nickolay,

    there are two mistakes in your two pictures showing the configuration of the AAP. In the internal URL field you have to write https instead of http, because of the later binding / requiring of SSL. Your other older posts showing this also with https configured.

    Best regards and nice work!,
    Philipp

    • I’ve wasted way too much time troubleshooting this before I checked the IIS log files and they showed port 80. After changing AAD Proxy to HTTPS everything works.

      Great guide though!

  • It appears that the script is expecting to find only 1 client authentication certificate with the specified subject. Could you modify it to handle cases where there are multiple certificates with the same subject?

  • Hello – Is there a mistake with the steps regarding the client and server certificates? At first you emphasized the points of each type which in turn have different Extended Key Usages. Are you stating to use the same template that contains both types?

  • Awesome step by step guide, many thanks. As per usual the MS TechNet lacks a lot of steps and inside information. Regarding the two certs, can they also be 3rd party and trusted certs (wildcard) ?

Sponsors

Categories

MSEndpointMgr.com use cookies to ensure that we give you the best experience on our website.