Tag Archives: Active Directory Federation Services

Uninstalling AD FS in Windows Server 2012

In my post Uninstalling AD FS 2.0 (and deleting the databases) I described how to uninstall AD FS 2.0 from Windows Server 2008 or 2008 R2.  While the process is fundamentally the same there are some subtle differences in Windows … Continue reading

Posted in AD FS | Tagged , , , , , | 7 Comments

Update Rollup 3 for Active Directory Federation Services (AD FS) 2.0

Yesterday Microsoft released Update Rollup 3 for Active Directory Federation Services (AD FS) 2.0. This update includes five (5) hotfixes, summarised below.  The update is cumulative which means it contains all fixes and features in the previous two updates: update … Continue reading

Posted in AD FS, Hotfix, News | Tagged , , , , , , , , , | 3 Comments

AD FS 2.0 Issuance Authorization Rules: ensure two attributes match

I previously posted a couple of examples of AD FS 2.0 Issuance Authorization (AuthZ) Rules that I’ve used.  Troy posted a comment asking whether or not there is a way to ensure that two attributes match.  His specific example was … Continue reading

Posted in AD FS | Tagged , , , , , | 4 Comments

AD FS 329: The certificate that is identified by thumbprint ‘<thumbprint>’ could not be decrypted using the keys for X.509 certificate private key sharing

Scenario The Active Directory Federation Services (AD FS) 2.x service ADFSSRV will not start.  Event ID 329 is logged in the AD FS 2.0/Admin event log.  The pertinent text from event 329 is as follows: Description:The certificate that is identified … Continue reading

Posted in AD FS, Troubleshooting | Tagged , , , , , | 8 Comments

The service did not respond to the start or control request in a timely fashion.

When creating a new FS farm or joining a new node to an existing farm, i.e. running FSCONFIG.EXE or FSCONFIGWIZARD.EXE, or configuring an FS-P, i.e. running FSPCONFIGWIZARD.EXE, the process might fail with the resultant error being that the service did … Continue reading

Posted in AD FS | Tagged , , , , , , | 5 Comments

Uninstalling AD FS 2.0 (and deleting the databases)

**This post was written for AD FS 2.0 running on Windows Server 2008 or Windows Server 2008 R2.  For information on uninstalling and cleaning up AD FS 2.1 on Windows Server 2012 please see the post Uninstalling AD FS in … Continue reading

Posted in AD FS | Tagged , , , , , | 27 Comments

AD FS 2.0 Issuance Authorization Rules

I had to create a couple of issuance authorization rules in my last engagement and it took me a little longer than it should have to get the syntax correct so I thought I’d post a couple of examples that … Continue reading

Posted in AD FS | Tagged , , , , | 3 Comments