???? ID: 283811 - ????? ???????: 02 ?????? 2010 - ??????: 2.0

??? SQL Server 2000 SQL ?????????? ??????? ?? SQL Server 2005 ??? SQL ????? ??????????? ??????? ?? ????? ??? ???? SQL ????? ?? SQL Server ????? ???? ???? ?? ????????? ???? ?? ??? ???? ????

???? ?????? ???????????? ?????? ???????? KB ?? ???????? ????? ?? ??? ???? ????? ????
?? ???????? ?? ?????? ??? ?? ?? ???? ???? ???? ??.
?????? ??????This article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.

?? ????? ??

??? ?? ??????? ???? | ??? ?? ??????? ????

??????

?? ???? ???? ?? Microsoft Windows NT ???? ?? ??????? ????? ?? ??? Microsoft SQL Server ??????? ???? ?? Windows NT ?? ??? ??? ?? SQL ????? ???? ??????? Windows ?????????? ?????? ?? ????????? ?? ??? ??????? ???????, ?????????, ?? ????????? ???????? ??? ??? ?? ??? ??? ????????? ???? ????????? SQL ????? (MSSQLServer ????) ?? SQL Server ????? ???? ?? ??? SQL Server ?????????? ??????? (SEM) ?? SQL ????? ??????????? ??????? (SSCM) ?? ????? ???? ???, SEM ???????? ??? ?? ???? ??? ?????? ????????? ?? ????????? ?? ?? ???? ?? ??? Windows ?????????? ?????? ?? ??? ?? ???? ??? ???? ?? ?? ??? ???? ??? ?? ??????? ???? ??? ?? ?? ???? ????? approach ???? ???? ????????? ???? ?? ??? ???

???:??? SQL Server ?????????? ??????? ?????? ???? ?? ??? ?? ??????????? ?? ??? ?????? ????? ?? ?????????? ?????? ???? ?????? ???

???????, ??? ?? ?? ?????????????-?? ?? ???????? ???? ??? ?? ??? ?????????????? ?????MSSQLServer ?? ??? ????????? ???? ??????? ????????? ???? ?? ??? ???? ?? SQL Server ????? ????, ??? ???????? ????????? ?? ?????????? ?????? ?? ???? ?? ??? ???? ?????? ????

?? ???? ????? ?? ????????? ???? ??????? ?? ????? ?? ????????? ???? ??? ???? ????? ?? ????? ???? ??????????-???

???? ???? ?? ?? ???? ???? ???, ?? ????? Microsoft ??? ???? ?? ???? ?? ?????? ?? Microsoft ???????? ??? ?????:Microsoft ??????? ??????? MS02-038
HTTP://www.Microsoft.com/technet/Security/bulletin/MS02-038.mspx (http://www.microsoft.com/technet/security/bulletin/MS02-038.mspx)

Microsoft ??????? ??????? MS02-034
HTTP://www.Microsoft.com/technet/Security/bulletin/MS02-034.mspx (http://www.microsoft.com/technet/security/bulletin/MS02-034.mspx)
322853  (http://support.microsoft.com/kb/322853/ ) FIX: SQL ????? ???????? ?????? ???? ?? ?? ??? ??????????? ?????? ????? ??????? ??????
???:?????? ?????????? ??????????? ?????? ???????????? ?? ???? ???? MS02 034 ?? MS02-038 ?? ??? ??????? ?? ?? ?????? ?? ??????? ?? ????? ??? ??? ???? ???
????? ?? ???? ????

SQL ?????????? ??????? ?? SQL Server Studio ??????? ?? ????? ???? ?? ???? ???? ??-?? ?? ????? ???? SQL ????? ?? SQL Server ????? ???? ???? ????????? ????

??? ?? ???????? SQL ????? ???? ???? ?? SQL Server ????? ?? ????? ?? ???? ????????????-?? ???? ???? SEM ?? SSCM, ?? ????? ???? ?? ??? ??? ????????? ?? NTFS ????? ?????? ????????? ?? Microsoft Windows ?????????? ?????? ?? ??? ???? ?????? ?? ??????? SQL Server ???????? ????? (?? ????? MSDE 2000 ?? ??? ???) ?? ??? ??? ?? ?? SQL Server 2005 ????????? ??????? ??????? ??????? ???? ??? ???? ????????? ??? ???????? ???? ?? ??? ????? ???? ?? ??? SEM ?? SSCM. ??? ??????? ????????? ?? ???? ????? ?? ???:
  • ????????? ??????
  • NTFS ????? ?????? ????????? ????? ???
  • Windows ?????????? ???????
?? ?? ?? discussed ???-??? ????? ?????????? ????
????? ?? ???? ????

Registry keys

setFull Controlfor the startup account for the MSSQLServer service and the SQLServerAgent service (either a local Microsoft Windows NT account, or a domain Windows NT account) on the registry keys that are in the following list. Under the following hives, thes keys in this list are the keys where Access Control Lists (ACLs) are set. For clusters, follow this step on every node in the cluster.

????? ???????? ?????? ????? ???????? ?? ??? ?????? ???????? ?? ??? ???? ???? ??:
  • ???????? ???????: ?? ???
    HKEY_LOCAL_MACHINE\Software\Clients\Mail

    HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\80

    HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\Instancename>
  • ??????? ???????: ?? ???
    HKEY_LOCAL_MACHINE\Software\Clients\Mail

    HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\80

    HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer\Cluster

    HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer\MSSQLServer

    HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer\Providers

    HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer\Replication

    HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer\Setup

    HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer\SQLServerAgent

    HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer\Tracking
????? ?? ???? ????

??? ?? SQL Server 2005 ?? ????? ?? ??? ???

??? ??? ??????? ?? ??? ???????? ???????, ?? ??? ????? ???????? ?? ??? ?????? ???????? ?? ??? ????? ???????? ?????? ???? ???? ??:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\90


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\<mssql.x></mssql.x>
???:?? ????????? ??????? ??? <mssql.x>?? ?????? ?? ??? ???? ??? ?? ??? ?? ??????????? ??? ?? ????? ????????? ??????? ??? ???????? ??? ?? ??? ??? ??? ?? ?? ????????? ????????? ?? ??? ?? ?????? ?? ??? ???? ??? ????????? ?? ???? ???? ??? ??????? ??????? ?? ??? ???????? ??? ?? MSSQLSERVER:</mssql.x>
SQL Server\Instance Names\SQL\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft
????? ?? ???? ????

????? ?? NTFS ????? ?????? ?????????

set???? ????????MSSQLServer ???? ?? SQLServerAgent ???? ?? ??? ????????? ???? ?? ??? (?? ?? ??? ??????? Windows NT ????, ?? Windows NT ????? ????) ?? NTFS ??????? ??? ?????????, ?? ??? ?? ???????? ???????? ??? ?? ??????? ?? ?? ??????? ???? ?????? ????

???? ?? ???????? ??????? ?? ??? ?? ?????? ??:
D:\Program Files\Microsoft SQL Server\MSSQL $ _instancename_\
???? ??? ???????? ??????? ?? ??? ?? ?????? ??:
D:\Program Files\Microsoft SQL Server\MSSQL\
????????? ?? ??????? ?? ???? ?????? ?? ?????? ???
????? ?? ???? ????

??? ?? SQL Server 2005 ?? ????? ?? ??? ???

??????? ??????? ????? ??:
??????: \Program Files\Microsoft SQL Server\ <mssql.1>\MSSQL</mssql.1>
????? ?? ???? ????

Windows ?????????? ??????

??????????, ???????? ?????? ?? ??????? ??????? ???? ????????? ?????????? ??????? ?????????? ?????? ???? SQL ????? ??? ?? ????? ???? ?? ??? ?????? ??? ?????, Windows NT ???? ?? ??????? ?? ????? ???? ?? ??? ????? ??? ????????? ?????????? ????, SQL ????? ?? ??? ????????? ???? ???? ?? ???????? ?? ????, ??? ?????????? ?????? ?? ?? ?? ?? ?? ???????? ??? ???????, ?? ??????? ???? SQL ????? ????? ?? ??? ???? ?????????? ?????? ?? ????????

SQL Server 2005, ?? ??? ??? ?? SQL ????? ?? SQL Server ????? ????????? ???? ?? ??????? ?????????? ???? ?? ????? ???? ???? ????? ???, "?? ??????? Windows NT ?????? ?? ??????????? ?? ???? ?? ?? ??? SQL ????? ???? ????" ??? ????? SQL Server 2005 ???????? ?????? ??? "?????? ??? Windows ???? ????" ???? ????

SQL Server 2000, ??? ?? ???? ????? ?? ????? ???? ?? ??? SQL ????? ?? SQL Server ????? ????????? ???? ?? ?????????? ?????????? ????, ??? ????????? ???? MSSQLServer ???? ?? SQLServerAgent ???? (?? ?? Windows NT ??? ??????? ????, ?? Windows NT ????? ????) ?? ??? ????? ?????????? ?????? ?? ??? ???? ?????:
  • ???????? ?????? ?? ??? ?? ??? ??? ????? = SeTcbPrivilege
  • Traverse ???? ?????? = SeChangeNotify
  • ????? ?? ?????? ??? ??????? = SeLockMemory
  • ?? ??? ?? ????? ?? ??? ??? ??? ?? = SeBatchLogonRight
  • ???? ???? ?? ??? ??? ??? ?? = SeServiceLogonRight
  • ????????? ???? ???? ????? = SeAssignPrimaryTokenPrivilege
???:???????????? convenience ?? ??? Microsoft Windows NT ?????????? ?????? ??? ?????????? ?????? ?? ???? ??? ?? ??? ????? ????

???:?????? ????? ??????? ???? SQL ????? (MSSQLSERVER) ???? ???? SE_MANAGE_VOLUME_NAME ???? ?? ?? ?? ?? ??? ?????? ??? Windows ??? ?????????? ???? ?? ??????? ?? ?? ?????? ??? ?? ????? ??????? ?????? ????? ??????? ??????? ???? ??? ?????????? ?????? ?? ???? ???????????? ?? ?? ?????? ???? ?? ???? ????
????? ?? ???? ????

????? ???

???:??? ???? ???????? ?? ??????? NTFS ????? ?????? ????????? ??? ???? ??? ??, ????????? ???? ?? SQL ????? ????????? ???? ??List Folder???? SQL Server ??????? ???? ?? ??? ??????? ??? ?????? ?? ????? ???? ?? ?????? ????? ????

???? ??????? ?? ???, Microsoft ?????? ??? ??? ???? ????? ?? ??? ????? ???? ?????? ????? ????::
239759  (http://support.microsoft.com/kb/239759/ ) ?????? 5177 ?? ????? ?? ??????? ????? ???

??? ???? MSSQLServer ???? ???? start with ????? ?? ????? ??? ?? ?? ??, ?? ?????? ?????? ????????? ???? MSSQLServer ?? SQLServerAgent ??????, ?? ?????, SQL ????? ?? ???sysadmin) ?????? ?? grant [Domain\NTaccount] ?????????? SQL ????? ?? ??? ?? ??????
  • ???????? ?? ???? ???????????? ?????????? ????.
  • BUILTIN\Administrators SQL Server ????? ????? ???? ??? ???
?????? ?? ???::
EXEC sp_grantlogin [Example\test]
???? ???, ?? ???? ?? ??? ??????sysadmin???:
EXEC sp_addsrvrolemember @loginame = [Example\test] 
   , @rolename =  'sysadmin'

??? ?? SQL Server ????? ?? ??? ??? ?? ?????-??? ??? ?? ??? ?? clustering ?? ???, SEM ?? ????? ??? ?? ?? ????? ???? SQL Server ????????? ???? ?? ????? ???????? ?? ???? ??? ???

??? ?? ?????-??? ??? ?? clustering ???????? ????? ???? ???, ?? ???? ??????? ?? ??? ?? ???? ?? "??????" ??? ??????

??? ?? ???? SQL Server 2000 ?? Microsoft Windows 2000 ?? ??????? ??? Kerberos ??????? ?????? ??????? ??????? (SSPI) ??????? ????? ?? ??? ???, ?? ????? ???? ?????? ???? ????????? ??? (SPN) ????, ?? ??? ??? ???? ??????? ?? ??? ?? ??? ?????? ??? ???? ?? ??? SETSPN ?? ????? ???? ???? ?? ???? ??? ???? ??????? ?? ??? SQL Server 2000 ???????? ?????? ??? "??????? ???? ????????" ???? ?? ??????
????? ?? ???? ????

??????

???? ??????? ?? ???, Microsoft ?????? ??? ??? ???? ????? ?? ??? ????? ???? ???????? ????? ????::
317746  (http://support.microsoft.com/kb/317746/ ) SQL ????? ?????-??? ??? ?????? ????????? ????
317232  (http://support.microsoft.com/kb/317232/ ) ??????? ???? ???? ??????? ?? ????? ?? ??? ????? ID 1107 ?? 1079 ????? ??
295051  (http://support.microsoft.com/kb/295051/ ) FIX: ????? SQL ????? ???? ?? ???-???????? ?????-??? ??? ?? ??? ???? ?????? ?????? ????????
254321  (http://support.microsoft.com/kb/254321/ ) ????? SQL Server do's, don'ts ?? ??? ??????????
239885  (http://support.microsoft.com/kb/239885/ ) ???? ???? ?? ???? SQL ??????? ????? ?? ????????? ???? ?? ??? ???? ????
219264  (http://support.microsoft.com/kb/219264/ ) ????? clustering SQL Server 7.0 ?? ??? ??????? ?? ????
198168  (http://support.microsoft.com/kb/198168/ ) BUG: ??????? ???????? ?? ???? ?? ?? SQL Server ??????? ?? ??? ???? ??????? ????????? ????
???? ??????? ?? ???, Microsoft ?? ????? ??? ???? ?? ????::
HTTP://TechNet.Microsoft.com/en-us/library/cc966496.aspx (http://technet.microsoft.com/en-us/library/cc966496.aspx)
????? ?? ???? ????
???? ???? ???? ??:
  • Microsoft SQL Server 2000 Standard Edition
  • Microsoft SQL Server 2000 64-bit Edition
  • Microsoft SQL Server 2005 Standard Edition
  • Microsoft SQL Server 2005 Express Edition
  • Microsoft SQL Server 2005 Developer Edition
  • Microsoft SQL Server 2005 Enterprise Edition
  • Microsoft SQL Server 2005 Workgroup Edition
????? ?? ???? ????
??????: 
kbinfo kbsql2005cluster kbhowtomaster kbmt KB283811 KbMthi
????? ?? ???? ????
???? ?????? ???????????? ?????? ????????
??????????: ?? ???? ?? ???? ??????? ?? ????? ?? Microsoft ????-?????? ?????????? ?????? ?????? ???? ??? ??. Microsoft ???? ??? ????-???????? ?? ????-???????? ????? ?????? ?? ???? ???????? ???? ?? ???? ????? ????? ??? ?? ??? ?????? ?? ???? ???? ???? ??? ????? ??. ???????, ????-???????? ???? ????? ???? ???? ???? ???. ?????, ????????, ?????-???? ?? ??????? ?? ???????? ?? ???? ???, ???? ?? ??? ?????? ???? ???? ??? ????? ??? ?? ???? ??. Microsoft ??????? ??? ???? ?? ?????? ?? ??????????, ????????? ?? ??? ?????? ?? ???? ????? ?? ???? ???????? ?? ??? ???? ????? ?? ??? ????????? ???? ??. Microsoft ????-?????? ?????????? ?? ????? ?????? ?? ?? ??? ??.
?????????? ?? ??????? ????????? ??????? ??:283811  (http://support.microsoft.com/kb/283811/en-us/ )
????? ?? ???? ????