????? ????? ?????? LM ??? Windows NT

?????? ????????? ?????? ?????????
???? ???????: 147706 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

?? ??? ??????

??????

??? ??? Windows NT 4.0 Service Pack 4 (SP4) ? ?????? Windows NT ????? ?? ?????? ?????????/????????:
  • ?????????/???????? LanManager (LM)
  • Windows NT ????????/????????? (???? ????? ????????/????????? ?? NTLM)
?????? Windows NT ????? ????? ?????? ???? ????? ???? ??? ??????? ???? ??????? ????????.

?????? ??????? ??? ?????? ???? ??? ?????? LM ????? Windows NT ??? ??? SP4 ????? ??????? ?????? ??? ?????? Windows NT ?????? ?????? NTLM.

?????? LM ??? ????? ??? ???? ?????? Windows NT ???? ?? ????? ??? ????? ??????? ?? ??? ??????? ???? ????? ????? ?????? ??? ???? ???? ???? ??????? ??????? ???????? ??????. ???? ????? ????? ????? ???? ???? ????????.

???? Microsoft ?????? ????? ?? NTLM ???? NTLMv2 ???? ???? ???? ????? ?????? ???? ?????????.

???????? ??? ???? ?? ????? ??????? ?? ???? ???? NTLM ???? (SSP) ?????? ??? ??????? ??????? ?????? ?? NTLM ???? ??????? ???? ?????? ???????? ?????? ????????? ???? ?????? ????? ? ?? ???? ????? ????? ????? ???? ???? ?????. ??? ???? ??????? ????????? ????? ????? ??????? ?????? (?????) ???????? ????? ????? 128-?? ???? ???? ?????.

???? ??? ????????? ??? ???????? ??????? ?? Windows NT: ?? ????? ?????? ??????? ??????? ?????? (RPC) ?? Microsoft ?? ?????? NTLM SSP ??????? ???? ???? ????? ????????? ??????? ???. ??????? ?????? ????? ???? ????? ??????? ???? ????? ???? ???? ????? ?????? ???.

?????

?????? LM ??? ????? ??? NTLM ?? NTLMv2 ???? ???? ?????????? ????? ???? ???? ?? 7 ???? ?????? ?? ??? ??? 7. ???? ???? ??? ???? ?????? ??????? 7 ???? ??? ?? ???????? ?? ?????? ??????? ??????, ????? ? ? ???????? ???? ?????? ??????? ??? 32 ????? ALT ????. ?????????? ?????? ?? ??? avail ?????? ?? ?? ??? ???? ?? ?????? ????????.

??? ???????? ?????? NTLM ?????? ?? ???? 14 ????? ?? ???? ?????? ????? ???? ?????. ?????? ??? ????? ?? ?? ???? ????????? ?????? ??? ???????? ?????? Windows NT ??????? ???? ???? ??????? ??? ???????? ?????? LM ? ??? ?????? ???? ???? ?????? ????. ?? ???? ???? ????? ???? ?????? ??? ?????? ??????? ???????? Pentium Pro 200 ???? ????? ????? 2,200 ?????? ??? ?????? ????? ?? ? ????? 5,500 ????? ?? ???? ?????? ????? (?? ??????? 2.2 ???????? 5.5 ?????? 1,000 ??? ? ?????).

??????: ??? ??????? ???????? ??? ?????? ???? ????????? ???????? Labs RSA ??????? "DES ????????" ?????????? ?????? DES ??? 200 ???? ???? Pentium Pro: 1,000,000/???????; ??? ?????? DES: 2 ** 56 ?? 7.2 * 10 ** 16. ????? ?? ????????? ??? "DES ????????" ?????? ?????? ???? ?????? ??? ?????:
http://www.rsa.com
??? ????? ????? ??? ?? ??? ???? ???? ???? ????? ??? ????? ????? ?? ?????? ???? ?? ?????.

????? ????? ????? ?? ?????? ??? "?????" ???? ????? ??? ???? ???? ????? 11 ????? ?? ????? ?? 4 ????? ?? ??? ?????? ????? ?? ????? ?? ?????? ???????. ??? ??? ???? ?????? 7 ???????? ???? ??????? randomness ?????? ?? randomness ??? ??? (??) 3 ?? ? ??? ????? ???? ?? ????? ??????? ????? DES 7.2 * ?? ???? ?????? ????? 10 ** 16 ????? ?????? ?? ????????.

??? ???? ??????? ???? ?? ??????? ?????? costing $ 250.000 ???? ???? ?????? ??? LM ?? NTLM ????? ????? ?? ???? ?????? ?? ??? 3-6 ??? ????? ?? ??? ???? ??????. ????? ??? ??????? ??? ???? ????? ????. ?????? ??? ?????????? ??????? ??????? ?????? ?????? ???? ?????? ??? ?????:
http://www.eff.org
?????? ????? ????? ?? ???? ???? ???????? ?? ???? ????? ????? ?????? ???? ?????? ???? ?? ????? ???? ??? ????? ?????? ??? ????? ???? ??????? ??? ??? ????????.

??????? NTLMv2 ? ????? ????? ?????? ????? ?? ???? ?????? 128 ??. ???? ??? ??? brute ??????? ? ??? ?? ????? ????? ??????? ???? ??? ???? ???? ?????? ?????? ?????.

?? ???? ??????? ?? ?? ?????? ??????? SP4, ??? ??????? ??? ???? ???? ??? NTLMv2 ???????. ????? ?????? ?????? ????? ????? ???? ?? ????? ?????? ??? ???????? ???? ????? ???? ?????? ???? ?? ??????? ???????? ???? ???????? MD5 HMAC (???? RFC 2104) ?????? ?????? ?? ????? ?????.

???? ??? ??? ????? ???? ???????? NTLM ???? ????? ??????? ??????? ???? ????????? ??? ???? ???? ????? "?" ????? 128-?? ?????? ??????? ????? ???? ??????.

??????? ????

??? ??? ?????? ?? ????? ?? ?????? ??? ????? ?????? ?? ????? ????? ???????. ??? ???? ?? ???? ?????? ????? ?? ???? ????? ????? ?????? ??? ?????. ????? ???? ?? ???? ??????? ??????? ??????. ?????? ??? ??????? ??????? ??? ???? ???????? ?? ????? ??? ??????. ?? ????? ??????? ????? ?? ???? ???? ?????. ?????? ??? ???? ?? ????????? ??? ????? ??? ???? ???????? ?? ????? ????????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
322756????? ??? ???? ???????? ? ??????? ??????? ?? Windows


??? ?????? ?? ?????? NTLM ???? ????? ??????? ??????:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\control\LSA
??????: ??? Win9x ?? ????? ??????? ???? LMCompatibility ????? ????? LMCompatibilityLevel ??? Windows NT.

?? ?????? ????? ???????? ???????? ????????? ?? ???? ???? ???? ??? ??????? ??????:
   Value: LMCompatibilityLevel
   Value Type: REG_DWORD - Number
   Valid Range: 0-5
   Default: 0
   Description: This parameter specifies the type of authentication to be
   used.

   Level 0 - Send LM response and NTLM response; never use NTLMv2 session
             security
   Level 1 - Use NTLMv2 session security if negotiated
   Level 2 - Send NTLM authentication only
   Level 3 - Send NTLMv2 authentication  only
   Level 4 - DC refuses LM authentication
   Level 5 - DC refuses LM and NTLM authentication (accepts only NTLMv2)
				
??????: ??? ??????? ?????? ?????? ???? ??? (??? ????????/???? ??????). ??? ??????? ???? ???? ????? ????? ??? ????? ???? ??? ???????? ??? apropriate ????????. ??? ??? ???? ?????? ???? 30 ????? ?? ?????. ?? ???? ???????? ???? ???? ?????? ?????? ????? ??? ?????? ???????? ?? ??????.

??? ?????? ?? ?????? ?????? ??????? ????????? ???? ?????? NTLMSSP ???? ??????? ??????:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\control\LSA\MSV1_0
????? ??????? ?? ??? ??? ???????:
   Value: NtlmMinClientSec
   Value Type: REG_DWORD - Number
   Valid Range: the logical 'or' of any of the following values:
      0x00000010
      0x00000020
      0x00080000
      0x20000000
   Default: 0

   Value: NtlmMinServerSec
   Value Type: REG_DWORD - Number
   Valid Range: same as NtlmMinClientSec
   Default: 0
   Description: This parameter specifies the minimum security to be used.
      0x00000010  Message integrity
      0x00000020  Message confidentiality
      0x00080000  NTLMv2 session security
      0x20000000  128 bit encryption
				

LMCompatibilityLevel - ???????

???: ??????? ???? ???? SP4 "?????? ????? 3 ?? ???? ????? ?????? ??????? ???????? ???? ???????? ????? ?????????? ????? ????????? ?????? (hereafter ?" ????? ?????????? ???? ??????") ??? ?? ??? ????? ??? SP4.

?? ???? ?????? ??? ????? SP4 ??????? 0, ???? ??? ??????? ?????????, ???? ??????? ?? ???????? ??????? ?????? ??? ??? ?? Service Pack 3 (SP3).

?? ???? ?????? ??? ????? SP4 ??????? 1 ? ???? ??????? ?? ???????? ??????? ?????? ??? ??? ?? ???? ?????? Service Pack 3 (SP3). ???????? ??? ???? ???? ???? ????? ???? ???? ????? ?? ?????? SP4.

???: ??? ??????? ????? 1 ?? ????, ??? ??? ??? ????? ???? ?????? ?? Windows ?????? 2.x Workgroups ?? LanManager MS-DOS ?? ????????? ??????? ??? ???????? ???????? ?? NTLM ?? ????? ??? ???? ???? ?????? ?????? NTLMv2 ?? ?? ????? ?? ??????? ??????? SP4 ??????? SP4. ???? ?? ??????? ????? 0 ?? ????? ????? ?????? ?????? ?? ???? Windows NT ?? Windows 95 ?? Windows 98.

?? ???? ?????? ??? ????? SP4 ??????? 2 ? ???? ?? ????? ?? ??????? ??????? ??? ??? LM ????????, ??? Windows 95 ?Windows 98 Windows for Workgroups ?????????? ??????? (hereafter ???? "????? ??????? ?????? LM/??????") ? ??? ??? ?? ????? ????? ?????? ??????? ??????????.

?? ???? ?????? ??? ????? SP4 ??????? 3 ?? ????, ???? ????? ????? ??????? NTLMv2 ????. ???? ????? ??? ????????? ???? ??????? ?????? LM ? SP3 ?? ?????? Windows NT ??????? ????????? ????? ?????? ??????? ?????? ??? ????? ????? ????? ?????? ??????? ?????????? ??? SP4. ??? ???? ??????? ?? ???? ?????? ??? ????? SP4 ??????? 3 ?? ????, ????? ?????? ??????? ?????????? ??? ?? ??? ????? ??? SP4 ?????. ??? ???? ?? ???? ??? ????????? ?? ?????? LM ??? ??????? ?????? ?? ??? ???? "????? ????????" ?? ????? ?????? ??? ?????. ???? ???????? ??????? ???? "????? ????????".

LMCompatibilityLevel - ??????/DC

?? ???? ?????? ???? SP4 ????? 4 ?? ????, ?? ?????? ??? ??????? ?? ???? LM ??? ??????? ???? ???????? ??? ?????? ?????? ?????? ?? ???? ???? ??? ??? ??????.

?? ???? ?????? ???? ???? ???? SP4 ????? 4 ?? ????, ?? ?????? ??? ??????? ??? ???? ??? ?? ???? LM ??? ??????? ???? ???????? ???? ???? ?? ??????? ???? ???? ?? ??? ??????. ????????? ???? ????? 4 ??? ???? ?????????? ????? ??? ?????? ??? ?????? ?? ?????? ?? ?????? Windows NT ???????.

?? ???? ?????? ???? SP4 ??????? 5 ?? ????, ?? ?????? ??? ??????? ?? SP3 ?? ???? Windows NT ??????? ???????? ??? ?????? ?????? ?????? ?? ???? ???? ??? ??? ??????.

????? ????? SP4 ???? ?????? ????? 0 ?? 1 ?? ??????? ??????? SP4 ??? ?? ??????? 1 ?? 3 ???? ????? ???????? ?? ???????? Windows NT ? ???????? LM ??????. ??? ????? ?????? ??? ??????? ??? ?????? ??? ??????? ?????? LM ??? ??? ?? ??? ????? ????? ???? ???? ??????????.

?????

????? ???????? ????? ??? ??? ??????? ???? NTLMv2 ? ??????? ??????? ??? ????:
  1. ????? ????? ???? ?????? ??? ??? ????? ?????? ???? ?????????? ????? ??? ??????? NTLMv2.
  2. ??? ??? ????? ????? ????? ?????? ??????? ??????? ????????? ????? ??? SP4 ?? ????? ??? ?????? ?????? ??? ??????? SP4 SP4 ?????? ????? ??????? 1.
  3. ??? ????? ?????? ?????? ???? ?? ???? ????? ??????? ?????? ?? ????? ??? SP4 ????? ????? 3 ?? ????.
  4. ??? ?????????? ?? ???? ???? ??? ????? ????? ??? ?????? ??? ??????? ?? ????? ??????? ?????? LM, ???? ?? ???? ???? ????? ???? ?????? ?? ?????? ????? ??? ????? ????? ??? 4 ? ??? ?? ??? ????? ???? ????? ????? ?????????? ??? SP4 ? ???? ?? ???? ???? ????? ???? ?????? ?? ?????? ????? ??? ????? ????? ??? 5.

NtlmMinClientSec ? NtlmMinServerSec

??? ?? ????? ???? ?? ???? 0x00000010 ?? ???? NtlmMinClientSec ?? NtlmMinServerSec ? ????? ??????? ??? ?? ??? ??????? ??? ????? ?????.

??? ?? ????? ???? ?? ???? 0x00000020 ?? ???? NtlmMinClientSec ?? NtlmMinServerSec ? ????? ??????? ??? ?? ??? ??????? ??? ?????? ???????.

??? ?? ????? ???? ?? ???? 0x00080000 ?? ???? NtlmMinClientSec ?? NtlmMinServerSec ? ????? ??????? ??? ?? ??? ??????? ??? ???? ???? ?????.

??? ?? ????? ???? ?? ???? 0x20000000 ?? ???? NtlmMinClientSec ?? NtlmMinServerSec ? ????? ??????? ??? ?? ??? ??????? ??? ????? 128-??.

??????: ??? ?? ???? ??? ????????? ??? ?????? ??????? NTLM SSP ??? ?? ????? ?? ??? ????? ????? ?? ???? ?????? ??????? ?????? ????? ??? ????? ??? ???????.

????

??? ??? ???????? ??? ?????? ??? ???? ???? ???? ?? Windows NT 4.0 ?? Windows NT Server 4.0 ????? ?????? ??????. ????? ?? ?????????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
152734????? ?????? ??? ???? ???? ???? ?? Windows NT 4.0


??? ????? SP4 ?? ?????? ??????? ??????? ?????? ????? ????? LM ??? Windows NT ????? ????? ?????????:
  1. ????? ???? ??????? "(Regedt32.exe).
  2. ?? ?????? ??????? HKEY_LOCAL_MACHINE ????? ??? ??????? ??????:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\
  3. ???? ??? "????? ????" ?? ????? "?????".
  4. ??? ????? ???????:
          Value Name: LMCompatibilityLevel
          Data Type: REG_DWORD
          Data:  0 (default) to 5 as defined above
    					
  5. ?? ?????? ??????? HKEY_LOCAL_MACHINE ????? ??? ??????? ??????:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
  6. ???? ??? "????? ????" ?? ????? "?????".
  7. ??? ????? ???????:
          Value Name: NtlmMinClientSec
          Data Type: REG_DWORD
          Data:  0 (default) or as defined above
    
          Value Name: NtlmMinServerSec
          Data Type: REG_DWORD
          Data:  0 (default) or as defined above
    					
  8. ???? ??? ????? ?? ?? ?????? "???? ???????".
  9. ????? ????? Windows NT ?????? ??????.

???????

???? ???????: 147706 - ????? ??? ??????: 23/?????/1427 - ??????: 3.4
????? ???
  • Microsoft Windows NT Server 4.0, Terminal Server Edition
  • Microsoft Windows NT Workstation 3.51
  • Microsoft Windows NT Workstation 4.0 Developer Edition
  • Microsoft Windows NT Server 3.51
  • Microsoft Windows NT Server 4.0 Standard Edition
  • Microsoft LAN Manager 4.2 Standard Edition
  • Microsoft Windows for Workgroups 3.2
  • Microsoft Windows 95
????? ??????: 
kbmt kbhotfixserver kbqfe kbbug kberrmsg kbfea kbfile kbfix KB147706 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????147706

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com