Como

i found issue in windows 2008 r2 environment. here steps: 1. have 2 users: "user1" , "user2", , add these users adminsitrators group. 2.  login with "user1", , right click cmd, select "run administrator", execute command "vssadmin list writers". , writers listed successfully. 3. if missed "run adminsitrator" step in #2, error:"error: don't have correct permissions run command.  please run utility command window has elevated administrator privileges." 4. if login "user2", , right click cmd, select "run administrator", execute command "runas /user:user1 cmd.exe", , execute command "vssadmin list writers". , same error #3.  now want use #4 same results #2, cannot find method add "run administrator" "runas" function in #3. anyone can me? look forward getting superman resolve issue. /harry   hi harry, ...

i'm posting here because issue demoted server can't find new domain controllers on network. dns issue; feel free move if doesn't belong here. thanks. update 2: the issue seems have gone away, last iss ue registered is 31/12/2012 02:40:54 p.m. falls 2 hours after last reboot due teaming removal on domain controller. so, either or server got tired of messing me. now i'll wait see if "access denied" errors gone well. we'll mark thread solved and, hope not, open new 1 errors pop-up again (or maybe re-read whole thread) many help. update: i'm sorry if i've missed anyone's post , didn't reply. forum's thread layout isn't helping me. to clarify : issues i'm having aren't being reflected in way regular users interact server. shares, thing access server for, being accessed without issue. on other hand, we, users access server on rdp ones affected. first noticed wrong once started having "access denied...

when user does: (ctrl-alt-del, change password) on xp  or windows 7 pc  in order change psw on windows server 2008 r2, get: "you not have permission change password" error. if users first maps drive on server , use same psw/id (i set share this), , try change password, can change it. 2008 r2 server member of workgroup not domain. thank you, in advance this. in workgroup, when user (ctrl-alt-del - change password) on xp  or windows 7 pc, changes password locally. don’t understand how change password on windows server 2008 r2. please elaborate?   logon xp/win7 client using admin account , check if "user cannot change password" enabled. Windows Server  >  Windows Server General Forum ...

how reserve static ip address printer in dhcp (windows server 2003 r2)   thanks, milton in dhcp, drill down scope, click on 'reservations', , right-click.  choose 'new reservation'.  type name reservation, ip address want reserve, , mac address of device.  can enter mac address in format: xx-xx-xx-xx-xx-xx.  can add description too.  show in dhcp console. in order activate reservation, need cause client seek address, i.e. disconnect, , reconnect client lease become active (and check you've got right). jm said, client must set obtain ip address automatically, not static, work. Windows Server  >  Windows Server General Forum

i have 2 microsoft server 2008 r2 servers running kms service.  both servers have thier own _vlmcs srv record in ad integrated dns.  if run command "nslookup type=all _vlmcs._tcp" on windows 7 enterprise clients, 2 servers hosting kms service.  kms service has volume_kms_r2_b channel key applied.  cant attach screenshot of result of command "slmgr /dlv" because function under maintenance microsoft, soon. i understand have have 25 or more windows 7 or server 2008 machines contacting kms server able start activating successfully, number never goes above 24.  @ 1 point went 26 , windows 7 machines activated, count dropped 18 , @ 21 (don't know why count is bouncing in manner). my windows 7 workstations falling out of activation , prompting user windows no longer activated.  in addition when helpdesk tries activate machines, fails error code 0xc004f038 (the software licensing service reported computer not activated...

i looking instructions on creating group policy push software (.msi) computers using windows server 2008 r2.  found http://support.microsoft.com/kb/816102  but when follow instructions in section titled "create group policy object," steps 1-3, says there should "group policy" tab when right-click domain and select properties. there no "group policy" tab. are there updated instructions windows server 2008 r2? thank you! in short. 1. open gpmc.msc 2. right click "group policy objects" 3. choose new , provide name 4. right click new created gpo choose edit 5. go either computer configuration | policies | software settings | software installation or user configuration | policies | software settings | software installation 6. choose new | package 7. configure according requirenments with kind regards krystian zieja http://www.projectnenvision.com follow me on twitter my blog ...

good day guys, i'm trying separate items in array comma can't work. i've been trying before array of ips, hotfix ids. please me this. in advance! $patch = get-wmiobject win32_quickfixengineering -computername "server1" | sort-object installedon -descending| select-object -first 5 $hotfixid = $null $patch.hotfixid | % { $hotfixid += $_ }  $hotfixid -join "," i keep getting  results this, same ips. kb3135445kb3134214kb3133043kb3127220kb3126593 use $hotfixid = @() instead of assigning $null, make array. richard mueller - mvp enterprise mobility (identity , access) Windows Server  >  Windows PowerShell

hi guys just came across usefull article of john http://blogs.technet.com/b/jhoward/archive/2008/06/16/how-does-basic-networking-work-in-hyper-v.aspx but these article think based on hyper v role on server 2008 r2. i have installed hyper v server on bare metal in work group environment , has 3 virtual machine sbs, tmg, win7 i using windows 7 physical machine run hyper v manager. all works fine in virtual environment i want join physical machine (windows xp) virtual sbs domain . can explain me how achieve this, better if john article explains connectivity physical machine , internet in ariticle diagrams regards ayaz       ayaz you need change internal virtual switch external virtual switch bound nic2. suspect using nic2 @ moment remote management of server. if don't have third nic, , ok having hyper-v server itself, tmg, sbs, win7 (vm , physical) on same network, that's way go (and plug xp machine physical switch in blue). however, in scenario ...

networker running on w2k8 enterprise shows following error message: save: rpc error: server can't decode arguments. when try manually backup server i'm receiving above error message. any ideas? thanks, tim hi tim emc documentation : description type of interference occurred during transfer of data between server , client. interruption has prevented remote procedure call (rpc) layer encoding argument expecting. interruption might occur when there is: ◆ lack of resources on server or client. ◆ network problem. ◆ rpc failure causes asm exit process unexpectedly. example, if nsrindexasm exited, index specified in error messages surrounding message might corrupted. resolution complete 1 or more of these tasks resolve error: ◆ verify network protocols functioning properly. test running ping. ◆ use rpcinfo verify backup , recovery sessions can established , portmapper or rpcbind service functioning properly. operating systems not include rpcinfo utility, ...

i have 2 2k3 sp2 terminal servers , both have problems roaming profiles.  1 has been in production while , other built server terminal image via pxe/ris on apps server. on production server given temporary profile of course deleted when log off.  there have been other users same problem. on the new server able server make me profile putting - full access on sharing , security tabs.  once logged out continued log me in temp profile saying couldn't find roaming or local profile.  can log on admin , confirm local profile on server.  asked person in shop log server got same "could not find roaming/local profile" message , given temp profile.  server did not make him local profile. for event ids have: err 1511 , 1526 warning 1525 (i did set no caching on folder local profile stored , not error, other user no local profile does).  server able redirect documents though. i user account local profile other user no local profile...

hi all, traditionally i've deployed printers using simple logon script, deploy printers pcs, logins, printers.  companys grown, , have build new print server(s) anyway, i'd streamline deployment little more. as best i've been able figure out, theres 3 mechanisms in win 2008/win 7 environment:  printer management (gpo), preferences (gpo) , old netlogon scripts right ?? i of targeting features preferences method, let me control deployment. but, understand it, bypasses print server right ?  still have setup print share used deploy drivers?  seems bit insane me. can't understand why, if setup print server, wouldn't want use it... printer management looks too, except have manage printers gpo/ad membership , don't have fancy targeting tools.  - jobs go via print server. netlogon - works.. isn't sophisticated.   what i'm looking ability targeting, via print server. need ability hold print jobs if i'm diagnosing printer, can't if users pr...

so have nifty little script deletes temp files on pc.   $tempfiles = @("c:\windows\temp\*", "c:\users\*\appdata\local\temp\*") remove-item $tempfiles -force -recurse -erroraction silentlycontinue -warningaction silentlycontinue | out-null it works great.  however, our security admin wants use part of incident response task.  he text file created when process starts, , if errors generated, wants errors listed in text file. when task complete, wants line saying temp files have been deleted.   i created file through script: write-verbose "creating remediation logfile" -verbose $rlogfile = "$sub2\remediationlog.txt" new-item $rlogfile -type file -force | out-null add-content $rlogfile "remediation log $env:computername started $(get-date -displayhint datetime )`r" | out-null add-content $rlogfile "***** begin remediation *****`r`r" | out-null i have played around try - catch - , $?, cannot seem ...

hi all, have windows server 2008 r2 ent sp1 , xenapp 6.5 application. there few application installed on xenapp server , users access them remotely. server getting netlogon error’s log name: system source: netlogon date: 2016/7/1 6:39:22 event id: 5719 task category: none level: error keywords: classic user: n/a computer: xxxxxxxxxxxx.domain.local description: computer not able set secure session domain controller in domain test due following: rpc server unavailable. may lead authentication problems. make sure computer connected network. if problem persists, please contact domain administrator. additional info if computer domain controller specified domain, sets secure session primary domain controller emulator in specified domain. otherwise, computer sets secure session domain controller in specified domain. error tcpip event well log name: system source: tcpip date: 2016/7/1 6:39:22 event id: 4227 task category: none level:...

hello i want install dc servers in domain 2003 security updates wsus server. i know whether there risk distribute updates dc s, , there recommended way distribute updates dc ad s, have special servers before release. are fsmo servers need install differently? thanks there risk - mitigate testing patches in test environment - , staging deployment production... as far fsmos concerned, might consider transferring fsmo roles during patching avoid potential loss... hth marcin Windows Server  >  Directory Services

we have configured remote app on windows 2008 sp2 (non-r2) thru terminal services. remote app hosts 16bit foxpro application requires printing to redirected printer. have done following steps installed drivers of printers might redirected changed gpo " computer configuration\policies\administrative templates\windows components\terminal services\terminal server\device , resource redirection" enable  redirection tried map redirected printer using net use lpt1: \\tsclient\prn1 ot 10 got following error each time system error 66 has occurred the network resource type not correct  we want enable 16bit dos printing redirected printer in remote app. somebody?? nobody has faced such problem? Windows Server  >  Remote Desktop Servic...

hello, i have an development vdi environment. i have setup 1 server connection broker, 1 web access server, 1 gateway server, 1 license server, 1 virtual host server , 1 3 virtual machine pool. i can connect pool no problem until, add remotefx adapter virtual machines. have enabled on virtual host server, , shut down virtual machines in pool , add remotefx graphics card virtual machines, reboot them, log in directly each virtual , let install new graphics drivers , reboot. after when try connect mstsc connection goes through did before except right after say" determining connection quality" disappears. see lots of event logs saying session connected, no error messages on of machines. if connect directly virtual machines connects no problem, try , connect pool through connection broker when stops. i running on 1gbps network same subnet virtaul machines , every other server these test.  please help. hi, thanks post. you can m...

i trying send output of script in body of email can't work right, please help. can emails, there nothing in body. thanks, lynn cls   function get-domaincomputeraccounts   {   # use directory services object attach domain $searcher = new-object directoryservices.directorysearcher([adsi]"") #leaving adsi statement empty = attach root domain     # filter down computer accounts $searcher.filter = "(&(objectclass=computer))"   # cache results $searcher.cacheresults = $true $searcher.searchscope = “subtree” $searcher.pagesize = 1000   # find can matches definition of being computer object $accounts = $searcher.findall()   # check make sure found accounts if($accounts.count -gt 0) { foreach($account in $accounts)     { # property contains last password change in long integer format $pwdlastset = $account.properties["pwdlastset"];   # co...

i running windows 7 , worked fine when connected projector. projector displayed same rectangular ratio laptop screen. now i've installed windows 10 (only thing changed) whenever connect same projector, laptop display forced square display lops off left , right. what's up? something here may help. http://windows.microsoft.com/en-us/windows-10/support you can check projector manufacturer windows 10 support. also try them on here. http://answers.microsoft.com/en-us/windows/forum/windows_10-hardware?       regards, dave patrick .... microsoft certified professional microsoft mvp [windows] disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server  >  Windows Server General Forum ...

hello all. have configured terminal services , can access locally using either ip address ( https://192.168.0.90/ts ) or server name (https://abcts/ts). my problem when try connect outside on internet. if use public ip ( https://60.70.80.90/ts ) can through receive dreaded error "the remote computer not found." read elsewhere needed use public fqdn went dns server , created record "ts.website.com" , pointed public ip. went remoteapp deployment settings , clicked terminal server tab , changed server name "ts.website.com". when go https://ts.website.com/ts can through error "the remote computer doe not support remoteapp." i have feeling missing jsut 1 step, what? cannot create public fqdn same internal fqdn. appreciated. abc hi, do have firewall configured forward port 3389 from external ip 2008 terminal server's internal ip address?  error receiving indication port forwarded ts server *not* support remoteapp, example server 2003.  did not m...

i have new active directory setup. 2003 server domain controller. 2008 server rdp server , member server in domain. if create user on dc , add them remote desktop user group, can't log remote desktop session on 2008 rdp server. if manually add user remote desktop user group on 2008 server can log in. what gives? hi, the user must member of local remote desktop users group on 2008 server.  sounds adding users remote desktop users group on domain, in reality local rdu group dcs. to make easier suggest greate global group on domain , make group member of local remote desktop users group on 2008 server.  way when create domain user account can grant them access remote desktop making them member of global group. -tp Windows Server  >  Remote Desktop Services (Terminal S...

hello,    have tow servers , need cut shared forlders exact permissions , security setting on dc(secondary domain controller) on our network . how ? when creating backup windows have exact forlder without permissions , security setting need gave permission again folders. i need transfer(cut) of our shared forlder exact permission , security setting. hello, as far realized windows backup keep permissions folders. anyway, can use robocopy copy complete folder structure including permissions source server destination one. depending on os version have use form respurce kit(windows server 2003) or included in windows server 2008 , higher os. http://www.microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en http://technet.microsoft.com/en-us/library/cc733145(ws.10).aspx best regards meinolf weber disclaimer: posting provided "as is" no warranties, , confers no rights. ...

i have hp laserjet5 printer attached computer using parallel port.  printer works fine locally.  when try print terminal services, printer prints fine if printing spreadsheet or word document.  when try to  print report laserjet5 program on server, printing process takes hours rather seconds.  using standard hp drivers locally on server.  ideas why having problem.   thanks   qedsys hi qedsys, format program output needs print in?  proprietary or convert common form pdf? there used lot of issues printing modern pdf files using adobe reader older printers.  remember print job 200k pdf file ballooning 600mb when printed hp laserjet 4 series. Windows Server  >  Remote Desktop Services (Terminal Services) ...

i rolling along excel, favorite format :( i have range of cells want outline boarder on perimeter. i settle being able manually putting horizontal boarder line on left of cells, tops of others, right......but can't figure out either or find on it.  pretty sure chasing tail on if great. thanks, cs two things, if excel, take at  http://theolddogscriptingblog.wordpress.com/ a nd two: http://theolddogscriptingblog.wordpress.com/2011/05/02/using-the-borderaround-method-in-excel/ Windows Server  >  Windows PowerShell

the last 2 times computer tried download updates computer shut down, without updating , not start again. ran recovery first time , computer did start -- today did again , afraid try download updates. please ?? you might try running; sfc /scannow dism /online /cleanup-image /restorehealth or worst case repair install. https://support.microsoft.com/en-us/kb/2255099  in case of bsod i'd check latest rom bios firmware update , driver support pack hardware manufacturer. the hardware vendor may best resource. https://msdn.microsoft.com/en-us/library/windows/hardware/hh994433%28v=vs.85%29.aspx?f=255&mspperror=-2147217396       regards, dave patrick .... microsoft certified professional microsoft mvp [windows] disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. Windows Server ...

in word 2010, defined new list style called “custom1′ “new docs based on template” instead of “this doc only.” heading 1, 2, 3, etc. appear linked within document. document create list style called “custom2′ , choose make available “new docs based on template” , also link them heading styles. though both list styles show available new docs, 1 of list styles (the last 1 used) linked heading styles. in word's default list library, multiple multi-level lists appear be linked heading styles. not able link heading styles multiple custom list styles? a particular list style can have 1 set of paragraph styles associated (one style each numbering level). the list formats in so-called list library behave differently, have noticed. similar predefined formats in bullets , numbering dialog box of word 97-2003. stefan blom, microsoft word mvp ...

hi if add external http url cdp location list, effect certs issued after adding new external url? mean wont effect excisting certs or functions using these excisting certs? and if want new cdp location url published cert, need revoke old cert , request new cert example our mail.domain.com used owa in our system? > if add external http url cdp location list, effect certs issued after adding new external url? mean wont effect excisting certs or functions using these excisting certs? yes. > , if want new cdp location url published cert, need revoke old cert , request new cert example our mail.domain.com used owa in our system? yes. my weblog: http://en-us.sysadmins.lv powershell pki module: http://pspki.codeplex.com windows pki reference: on technet wiki Windows Server  >  ...

i have situation have 10vms deploy , our company wants change computer names of machines. change virtual machine names. know can rename vm in hyperv manager vhd , folder path still show old computer name. have process start finish can change name completely, directories, vhd files, everything? dont have snapshots on of them shouldnt issue. im wanting name servera serverb , have name carry through of hyper-v , directories. realize netbios name in guest os changes seperately , not issue.     thanks. can deploy scvmm operation. have not dont before. not familar library function imagine clone operation give new name. ive messed export feature bit hyperv management console havent had luck. seems im stuck name on export. ive looked @ config files bit , going try changing instances of old name new name (and path) although seems lead quick disaster. Windows Server ...

have dcs 2 nics on each dc. have 2 subnets. 192.168.0.1/24 (subnet 1 ) , 192.168.0.10/24 (subnet 2) first nic on each dc looks to  subnet 1 , second nic on each dc looks subnet 2 client makes dns request dc's dns , got respond dns contains 2 ips subnet 1 , subnet 2 example client asks dns about  dc's ip , gets ips subnet 1 , subnet 2. because  routing not exist between subnet 1 , subnet 2 sometime when client tries use ip subnet connections/operations failed. question is exist way how setup dns servers return answer ip contains ip correct subnet. example if dns request subnet 2 clients should ip subnet 2 . dns ms dns server. dns configuration best practice on dc , clients/member servers: -->>multihoming domain controllers not recommended, results in multiple problems. ------------------------------------ 1. domain controllers should not multi-homed 2. being vpn server , running rras makes multi-homed. 3. dns itself, better on sin...

we have 3rd party patch management tool introduces scheduled tasks when want deployed @ particular time. recently, scheduling on 2008 server went crazy , has scheduled on 70,000 tasks.  rebooting stopped creation of tasks, windows trying read through them all.  know of programatic, command line, or otherwise fast way of removing these tasks en mass? hi mike,   if delete scheduled tasks on windows server 2008 system, can run following command:   schtasks /delete /tn * /f   hope helps.   tim quan - msft   Windows Server  >  Management

i have windows 2008 r2 server 4 nics. 2 x 1 gbe , 2 x 10 gbe. want traffic go through 10 gbe nic 1 particular application specific ip addresses. the obvious solution write static routes. however application very low latency hence expensive server , 10 gbe solarflare nic. the application .net code connects specific remote ports using sockets once in life time.. is correct assume actual 'routing' happens @ moment when local socket connects remote socket , ip taffic going later without windows software routing involved... am right assume there 0 impact on latency using windows routing? hi, according description, understand app cannot afford high latency, , solution found add static route. , know if static route cause overhead lantency, right? based on knowledge, adding static route add 1 entry route table. when traffic go through nic card, match entry in route table. if traffic mathes static route, go ahead destination records, or find other 1 go. so, won'...

i trying application known pwm work active directory domain services , lightweight directory services in order provide webpage users reset , change ad password online.  having difficulty finding out how integrate ad ds ad lds 2 services can talk each other , ad lds pull user information ad ds.  also, want use ssl secure ldap connection.  how set up? hi, hope below article helpful: http://technet.microsoft.com/en-us/library/cc794836(v=ws.10).aspx http://technet.microsoft.com/en-us/library/cc733064(v=ws.10).aspx how enable ldap on ssl third-party certification authority http://support.microsoft.com/kb/321051 regards, yan li cataleya li technet community support Windows Server  >  Directory Services ...

hi all, i  want  to check following things through windows power shell on windows 2003 server check in network connection properties, if "client microsoft networks" , "file , printer sharing microsoft network" checked.  if checked want return value true , if not false, can please 1 me doing through power shell i tried wmi classes get-wmiobject win32_networkadapterconfiguration , other none of cmd let returned property want. any on appreciated thanks , regards, anil hi, based on research, there no direct way windows 2003 powershell 2.0. use snetcfg.exe enable "file , printer sharing microsoft network": more details: http://social.technet.microsoft.com/forums/windowsserver/en-us/526dc18f-be15-46b7-98a4-7d7878068f28/how-to-enable-file-and-printer-sharing-for-microsoft-networks-checkbox-with-powershell-script in addition that, powershell v3 more information when managing network interfaces, use command: g...

hi everyone, i'm playing around 2k8r2 name protection feature of dhcp service. question: correct dhcp server not perform dns update of resource record windows client after enabling name protection? , - because of - dhcp service create dhcid entries non-windows-clients? so windows clients protect rr on dns , non-windows-client entries protected dhcid? thanks in advance! greeting, nils   hi nils, thank post. my question: correct dhcp server not perform dns update of resource record windows client after enabling name protection? , - because of - dhcp service create dhcid entries non-windows-clients? not exactly, when enable dhcp name protection: windows dhcp client, create 1 dns record (host(a) record). non-windows dhcp client, create 2 dns records (host(a) , dhcid record). duplicated non-windows dhcp client, prevent registry dns record (none record). here article dhcp step-by-step guide: demonstrate dhcp name protection in test lab mentioned this: in ...

i have 4 servers set in ipam dhcp management, etc. had certificate problem on 1 of domain controllers rather troubleshoot - easier demote , rebuild.  after rebuilding went add new server ipam.  first old server still listed in ipam removed old server. i reused same name on new dc. i have new server added ipam - dc selected , data retrieval status "not started". if edit server , select dhcp - error "failed update server in database. please see details" - detail "the transaction has aborted" my assumption old server still in database??  either way - have guidance on how resolve? thanks john ps - have removed server ipam few times , re-added.  same results.  data retrieval says not started, , cant added dhcp or dns server management. Windows Server  >  ...

hi, i set test domain 2k8 server (dc), multiple 2k8 member servers. it makes me think accessing network resources on other machines in domain (shared printers, mmc access other machines, file shares) takes about 5 times longer using ip address using hostnames. does know how resolve problem? thanks lot, arne b'coz of dns setting, make have dns server setup in network , dns server has proper entry resources trying access , clients in networks has correct dns server ipaddress. thanks -ramasubbu sk sorry! microsoft doesn't own liability & responsibility of posting. Windows Server  >  Network Infrastructure Servers

we windows shop , virtualization have been going vmware route while. hyper-v 2012 entering market, wanted better idea of fault tolerance options , pricing hyper-v. articles have read indicate significant savings on hyper-v licensing. enclose picture of vmware vsa cluster opted , information on hyper-v equivalent. apart potential licensing savings there potential hardware savings in regards how hyper-v operates vs vmware? price vmware licensing related items: vmware vsphere standard acceleration kit 6 processors + production support 1 year 24x7 $6885  vmware backup 1 $488 please feel free refer me resource or if believe can more address question. hi,              to alternative plan, need 2 windows server 2012 server hyper-v host. standard edition or datacenter edition? both standard , datacenter editions provide same set of features; thing differentiates editions number of virtual m...

hello, are there known problems hosting wsus 3.0 sp2 database in new sql 2008 r2 (standard or express)? hello, are there known problems hosting wsus 3.0 sp2 database in new sql 2008 r2 (standard or express)? none documented, sql2008r2 post-dates wsus3sp2, doubt testing has been done until point. fundamentally, though, should not use express edition, , unless have licensed enterprise database server, i'm not sure why you'd use standard edition -- doing require wsus clients have sql cals, or database server installed cpu-based licensing -- both of pretty pricey solutions wsus server. ultimately, though, @ point, with a brand new release, best "answer" load in test lab , see happens. lawrence garvin, m.s., mcitp:ea, mcdba, mcsa principal/cto, onsite technology solutions, houston, texas microsoft mvp - software distribution (2005-2010) mvp profile: http://mvp.support.microsoft.com/profile/lawrence.garvin blog: http://onsitechsolutions.spaces.li...

good evening, before embark on setting entire test environment, trying clarify if knows experience if following scenario correct: if want support aes encryption in outlook, need instantiate microsoft pki uses cng (crypto next gen) csp. specifically, issuing ca must use cng csp. if use non-cng csp @ issuing ca, cannot generate certificates outlook able use aes encryption on vista & higher clients. best can 3des. these statements believe true, , trying confirm. have test environment not use cng and, on windows 7, able send 3des encrypted emails. having researched issue why aes not available, thing seems can differently use cng csp @ ca; or, there templates can change enable aes support. thanks feedback, ed p hi ed- in 10 minutes, can install second certificate test theory.  can grab free certificate testing variety of vendors, including comodo: http://www.comodo.com/home/email-security/free-email-certificate.php the quick test may best rou...