Microsoft Metadirectory ?????? ADMA ???? ???? ?? ??? "Replicating ?????????? ????????" ?? ?????? ???? ???? ????

?? ???????? ?? ?????? ?????????? ??????? ????? (ADMA), ?? ?????? ?????????? ?? ?????? ???? ?? ??? ????????? ???? ?? ????? ?? ?????? ?????????? ??? discovering ????? ?? ?? ????? ???????????? ????????? ???, ????? ?????????? ???? ?? ??? ???, ?? ?? ?????? ??? ?? ?? ??????? ????? ?? ??????? ?? ?? ???????? ?? ???????? ????? ?? ??? ?????????? Replicating ???????? ?? ?????? ?? ??? ?? ???? ????? ???? ?? ?? ???? grant ?????? ??? ?? ???? ?? ??? ??? ?????????? ???? ????? ?? Replicating ?????????? ???????? ?? ???????

???:??? Windows Server 2003, ?? ?????? ????????? ???? ?? ??? "Replicate ?????????? ????????." ?? ???

?????????? ???????? Replicating ??????, Windows Server 2003 ??? ????? ?? ??????? ?????????? ???????? ?? ?????? ?? ??? ??? ???? ???? ?? ?? ????? ???????? ????????? (ACE) ?? ???????? ????? ?????? ?????? ??? Windows 2000 ??? ACL ?????? ?? Adsiedit ?????? ????? ?? ????? ?? ?? ?????? ????? ?? ???? ???

ACL ?????? ?? ????? ???? ????????? ??? ????

1. ?????? ??????????? ?????????? ?? ???????? ?????-?? ?????
2. ????? ????????????? ??,????? ????????.
3. ????? ????????, ???? "company.com", ?? ????-????? ????, ?? ???? ??? ????? ???????.
4. ????? ??????????????, ?????? ?????????? ???? ???????? ???? ??, ??? ????? ????add; ??? ?????? ?????????? ???? ???????? ??, ?? ??? 7 ?? ??? ??????
5. ???????????????, ??????????, ?? ???? ?? ??? ????????? ????? ???, ?????? ?????????? ???? ?? ??? ????, ?? ???? ??? ????? ????add.
6. ????? ????,OK?? ????? ?? ??????????? ????? ?? ??????? ?? ??? ?? ..
7. ?????? ?????????? ???? ????? ?????
8. ?? ??? ???? ?? ??? ????? ?????????????? ??? replicating???? ?? ????? ??? ?????
9. ????? ????,???? ?????? ????-????? ????, ?? ???? ???OK.
10. ?????-?? ?? ??? ?????

Adsiedit ?? ????? ???? ????????? ??? ????

???????:Adsiedit ?? ???? ?????? ?? ???? ???? ???????? ?????? ?? ???????????? ???? ??? ???? ?? ?? ????? ???????? ???? ?? ???? ???? Microsoft ?? ?????? ???? ?? ?? ???????? ?? Adsiedit ?? ???? ????? ?? ???????????? ?? ???? ?? ????? Adsiedit ?? ????? ???? ????? ?? ?????

1. ??? ???? ??? ???? ?? ??????? ???? ???? ??? ??, ?? Windows 2000 ?????? ????? ??????? ?????Windows 2000 ?????? ????? ??????? ???? ?? ??? ???? ???? ?? ???? ??? ???? ??????? ?? ??? Microsoft ???????? ??? ???? ????? ?? ??? ????? ???? ?????? ?? ????? ????:
   301423  (http://support.microsoft.com/kb/301423/ ) Windows 2000 ?????-?????? ???????? ?? Windows 2000 ?????? ????? ??????? ???? ?? ??? ???? ????
2. Adsiedit.msc ????? ?? ???? ?????????? ?? ??? ??? ?????? ????? ?????? ?????? (????? NC) ??? ?? ??????? ????? ?? ??? ??? ??? ???????? ?? ???? ???? ?? ?? ??? "DC =" ?? ??? ????? ??? ?? ??????????? ???? ??? ?? ???????? ?? ????-????? ????, ?? ???? ??????.
3. ????? ?????????????? ?? ????? ????..
4. ??? ?????? ?????????? ???? ???????? ???? ??, ?? ????? ????add, ?????? ???? ???? ?? ??? ??? 8?
5. ???????????????, ??????????, ?? ???? ?? ??? ????????? ????? ???, ?????? ?????????? ???? ?? ??? ????, ?? ???? ??? ????? ????add.
6. ????? ????,OK?? ????? ?? ??????????? ????? ?? ??????? ?? ??? ?? ..
7. ????? ????,???? ?????? ????-????? ????, ?? ???? ???OK.
8. ?????? ?????????? ???? ?? ??? ????
9. ?? ??? ???? ?? ??? ????? ?????????????? ??? replicating??? ?????.
10. ????? ????,???? ?????? ????-????? ????, ?? ???? ???OK.
11. ?????-?? ?? ??? ?????

???:???? ?? ???? ?? ????? ??, ?????? ??????????? ?? ???????? ??? ????? ??? ???????? ?? ??? ????? ???? ???????? ?? ???????? ????? ?? ??? ?????????? Replicating ???????? ?? ?????? ??? ?? ??? ??? However, enabling discovery of the connected directory does not imply that other operations can be performed.

To create, modify, and delete objects within Active Directory using a non-administrative account, you may need to add additional permissions as appropriate. For example, for Microsoft Metadirectory Services (MMS) to create new user objects in an Organizational Unit (OU) or container, the account that is being used must be explicitly granted the Create All Child Objects permission, as the Replicating Directory Changes permission is not sufficient to allow the creation of objects.

In a similar fashion, the deletion of objects requires the Delete All Child Objects permission.

It is possible that there are limitations on other operations, such as attribute flow, depending on the specific security settings that are assigned to the object in question, and whether or not inheritance is a factor.