???? ID: 232199 - ????? ???????: 02 ?????? 2010 - ??????: 2.0

????? ?? ?????? ?????????? AdminSDHolder ???????? ?? ?????? ????

???? ?????? ???????????? ?????? ???????? KB ?? ???????? ????? ?? ??? ???? ????? ????
?? ???????? ?? ?????? ??? ?? ?? ???? ???? ???? ??.
?????? ??????This article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.
??? ?? ??????? ???? | ??? ?? ??????? ????

??????

?? ???? ??? ?? ?? ??????? ???? Windows 2000 RC2 (?? ????? builds) ?? Windows 2000 ?? ???????? ??????? ??? ???????? ?? ??? ???? ???? ??? ??? ???????? ???? ?? ??? ????? ???????? ???? (ACL) AdminSDHolder ?????? ?????????? ???????? ?? Windows 2000 RC3 ??? ???? ??? ??? ?? ???????? ?????????? ?????????? ?? ????? ?????????? ???? ?? ????? ??? ?? ?????????? ???? ?? ????????? ?? ????????? ???? ?? ??? ????? ???? ???? ???

????? ???? ??, ?? ??? ??????? ???????????? (????????????, ?????? ?? ???? ????) ????? ???? ????? ?? ??? ?????? ?????????? ?? ?? ??? ACL ?? ????? ???? ?? ???????? ????? ???????? (PDC) ??????????? ????? ?????? ?????? (FSMO) ??? ???? Windows 2000 ????? ???????? ?? ????? ???????? ACL ?? ??????? ???????????? ???? ??? ???:
CN AdminSDHolder, CN = ??????, DC = =MyDomainDC =???

????? "DC =MyDomainDC =???"??? ?? ?? ?? ???? ????? ???????? ??? (DN) ?? ????
??? ACL ????? ??, ?? ?????????? ???????? ?? ACL AdminSDHolder ???????? (?????? ACL ?????????? ????? ???? ????? ??) ?? ??????? ???????? ?? ??????????? ???? ?? ??? ???????? ??? ?? ?? ???????????? ????? ??????? ???????????? ?? ?????? ??????? ???? ?? ??? ??? ???? ?? ??? ???????? ?? ??? ?? ???? ??? ???, ?? ????? ???? ??? ?? ?? ?????????? ??? ?????????? ???? ?? ?????? ???? ?? ??? ???????????? ??????????? ?? ???????????? ???? ?? ????? ???? ??? ??? ???? ?? ?? ??? ?????????? ?? ???????????? ???? ?? ????? ???? ??, ????????? ?????? ???? ?? ?? ???????? ??? ?? ????????? ???? ?????

???:: ????? ????????? ?? ????? ???? ?????? ?? ??? ?? Microsoft Windows NT 4.0 ?? Windows 2000 ?? ???????? ??????? ??? ???????? ????

???? ???????

?? ?????? ?? ??? ???? ?? ??? ????? ?? ????? ?? ????? ???????? ?? ?? ????????? ?? ????? ????:
  1. Windows 2000 Professional ?? CD-ROM ????? ?? Windows 2000 ?????? ????? ??????? ????? ?? ????? Dsacls.exe, ?????, ??????? ????, ?? ??? ?????? ?????????? ???????? ?? ????? ???????? ???????????? ??????? ?? ??? ????? ?? ???? ??? ?? ??? ?? ?? ?????? ????? ???
  2. ????? ??? ?? ??? ?? ??? ????? ????? ????? "DC =MyDomainDC =???"???? ????? ???) ?? ???????? ??? (DN) ?? ???:
    dsacls "cn adminsdholder, cn = ??????, = dc =mydomain, dc =COM"/G" \Everyone:CA;Change ???????"
    dsacls "cn adminsdholder, cn = ??????, = dc =mydomain, dc =COM"/G" \Pre-Windows 2000 ???? ?????: RP; ?????? ????? ???????"
    dsacls "cn adminsdholder, cn = ??????, = dc =mydomain, dc =COM"/G" \Pre-Windows 2000 ???? ?????: RP; ??????? ???????"
    dsacls "cn adminsdholder, cn = ??????, = dc =mydomain, dc =COM"/G" \Pre-Windows 2000 ???? ?????: RP; ???? ???????"
    dsacls "cn adminsdholder, cn = ??????, = dc =mydomain, dc =COM"/G" \Pre-Windows 2000 ???? ?????: RP; ????? ???????"
    dsacls "cn adminsdholder, cn = ??????, = dc =mydomain, dc =COM"/G" \Pre-Windows 2000 ???? ?????: RP; ???? ????????"
  3. ????? ???????? ?? ??? ????? ?? ?????? ?? ??? ?? Pre-Windows 2000 ???? ????? ?????? ?? ??? ????????? ????? ???????? ???????????? (ACEs) ?????? ???
  4. ?? ????? ????????? ?? ?????dsacls cn adminsdholder, cn = ??????, = dc =mydomain, dc =COM, ??? "DC =MyDomainDC =???"???????? ??? ?? ??? (DN) ?? ???? ????? ???)? ????? ?????? ?? ??? ?? ????? ????:
    Access list:
{This object is protected from inheriting permissions from the parent}
Effective Permissions on this object are:
Allow NT AUTHORITY\Authenticated Users            SPECIAL ACCESS
                                                  READ PERMISSONS
                                                  LIST CONTENTS
                                                  READ PROPERTY
                                                  LIST OBJECT
Allow BUILTIN\Administrators                      SPECIAL ACCESS
                                                  DELETE
                                                  READ PERMISSONS
                                                  WRITE PERMISSIONS
                                                  CHANGE OWNERSHIP
                                                  CREATE CHILD
                                                  DELETE CHILD
                                                  LIST CONTENTS
                                                  WRITE SELF
                                                  WRITE PROPERTY
                                                  READ PROPERTY
                                                  LIST OBJECT
                                                  CONTROL ACCESS
Allow IFRPILOT\Enterprise Admins                  SPECIAL ACCESS
                                                  READ PERMISSONS
                                                  WRITE PERMISSIONS
                                                  CHANGE OWNERSHIP
                                                  CREATE CHILD
                                                  DELETE CHILD
                                                  LIST CONTENTS
                                                  WRITE SELF
                                                  WRITE PROPERTY
                                                  READ PROPERTY
                                                  LIST OBJECT
                                                  CONTROL ACCESS
Allow FAA\Domain Admins                           SPECIAL ACCESS
                                                  READ PERMISSONS
                                                  WRITE PERMISSIONS
                                                  CHANGE OWNERSHIP
                                                  CREATE CHILD
                                                  DELETE CHILD
                                                  LIST CONTENTS
                                                  WRITE SELF
                                                  WRITE PROPERTY
                                                  READ PROPERTY
                                                  LIST OBJECT
                                                  CONTROL ACCESS
Allow NT AUTHORITY\SYSTEM                         FULL CONTROL
Allow BUILTIN\Pre-Windows 2000 Compatible Access  SPECIAL ACCESS
                                                  READ PERMISSONS
                                                  LIST CONTENTS
                                                  READ PROPERTY
                                                  LIST OBJECT
Allow BUILTIN\Pre-Windows 2000 Compatible Access  SPECIAL ACCESS for Remote Access Information
                                                  READ PROPERTY
Allow BUILTIN\Pre-Windows 2000 Compatible Access  SPECIAL ACCESS for General Information
                                                  READ PROPERTY
Allow BUILTIN\Pre-Windows 2000 Compatible Access  SPECIAL ACCESS for Group Membership
                                                  READ PROPERTY
Allow BUILTIN\Pre-Windows 2000 Compatible Access  SPECIAL ACCESS for Account Restrictions
                                                  READ PROPERTY
Allow BUILTIN\Pre-Windows 2000 Compatible Access  SPECIAL ACCESS for Logon Information
                                                  READ PROPERTY
Allow Everyone                                    Change Password
???? ???? ???? ??:
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
????? ?? ???? ????
??????: 
kbenv kbinfo kbmt KB232199 KbMthi
???? ?????? ???????????? ?????? ????????
??????????: ?? ???? ?? ???? ??????? ?? ????? ?? Microsoft ????-?????? ?????????? ?????? ?????? ???? ??? ??. Microsoft ???? ??? ????-???????? ?? ????-???????? ????? ?????? ?? ???? ???????? ???? ?? ???? ????? ????? ??? ?? ??? ?????? ?? ???? ???? ???? ??? ????? ??. ???????, ????-???????? ???? ????? ???? ???? ???? ???. ?????, ????????, ?????-???? ?? ??????? ?? ???????? ?? ???? ???, ???? ?? ??? ?????? ???? ???? ??? ????? ??? ?? ???? ??. Microsoft ??????? ??? ???? ?? ?????? ?? ??????????, ????????? ?? ??? ?????? ?? ???? ????? ?? ???? ???????? ?? ??? ???? ????? ?? ??? ????????? ???? ??. Microsoft ????-?????? ?????????? ?? ????? ?????? ?? ?? ??? ??.
?????????? ?? ??????? ????????? ??????? ??:232199  (http://support.microsoft.com/kb/232199/en-us/ )
????? ?? ???? ????