???? ID: 305144 - ????? ???????: 08 ??? 2011 - ??????: 3.0

?????????? ???? ??? ????? ?? ??? UserAccountControl ???? ?? ????? ???? ????

???? ?????? ???????????? ?????? ???????? KB ?? ???????? ????? ?? ??? ???? ????? ????
?? ???????? ?? ?????? ??? ?? ?? ???? ???? ???? ??.
?????? ??????This article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.

?? ????? ??

??? ?? ??????? ???? | ??? ?? ??????? ????

??????

?? ?? ???? ?????????? ???? ?? ??? ??? ?????, ????? ???? ???? ???, ?? ???? ??? ?? ??? ???? ?? ??? ????? ???? ???? ???? ?? ?????? ????? ????? ???, numerical ??? ?? ??? ?????? ?? ' UserAccountControl ???????? ????? ?? ?? ?? ??? ??????? ?? ????? ???? ??? ?? ???? Windows ?? ?????? ????? ???? ??? ???

?????????? ????? ?? ????? ?? ??? ????? ???? ??????? ????, ????? ???? ?? ??? ?????????, ????? ???? ?? ??? ???????????? ?????, ?? ??? ????? ???? ?????? ?????????? ???????????? ?? ????????.
????? ?? ???? ????

???? ???????

?? ??? ???? ??? ?? ?? ????????? ?? ????? ???? ?????? Ldp. exe ????? ?? Adsiedit.msc ?????-?? ?????

????? ?????? ??????? ???? ????? ?? ???? ??? ???? ????? ??? ?? ??? ????? ?? ?????????? ??? ???? ?? ???? ?? ???????? ??????? ?? ??? ?? ???? ??? ??? ?? ????? ?? ???? ???????? ?????????? ????? ?????? ldp. exe ????? ??? ???????????? ?? ?? ????? ???? Adsiedit.msc ??? ????? ??? ????????? ???? ??? ???? ????? ???? ???? ???? ?? ??? ??? ?????????? ???? ?????, ??? UserAccountControl 0x0202 (0x002 + 0x0200) ???????? ????? ??? ?? 514 (2 ?? + 512)?

??? ??? ?? ?????? ?????????? ????? ldp. exe ??? ???? ??????? ?? ???? ???, ?? Adsiedit.msc ???? ?????. ?????????? ?? ??????? ?? ?????? ???? ?? ??? ????? ???? ????? ?????? ??????????? ?????? ????? ??????? ???? ?? ??? ????? ????? ?????? ???? ?? ???? ??? Windows ??????? ?????? ???
?? ?????? ?? ??????? ?????? ?????? ?? ??????? ????
??? ???????? ???????????? ?????? ??? ?????
?????????0x00011
ACCOUNTDISABLE0x00022
HOMEDIR_REQUIRED0x00088
??????0x001016
PASSWD_NOTREQD0x002032
PASSWD_CANT_CHANGE
??? ??? ?? ???? ??????? ???? ?? ?????? ????? ???? ?? ???? UserAccountControl ???????? ????????? ?? ?????? ??? ???? ?? ??? ???? ???? ?? ???? ??? ??????? ?? ???, "??? ???? ?????" ??? ??????		0x004064
ENCRYPTED_TEXT_PWD_ALLOWED0x0080128
TEMP_DUPLICATE_ACCOUNT0x0100256
NORMAL_ACCOUNT0x0200512
INTERDOMAIN_TRUST_ACCOUNT0x08002048
WORKSTATION_TRUST_ACCOUNT0x10004096
SERVER_TRUST_ACCOUNT0x20008192
DONT_EXPIRE_PASSWORD0x1000065536
MNS_LOGON_ACCOUNT0x20000131072
SMARTCARD_REQUIRED0x40000262144
TRUSTED_FOR_DELEGATION0x80000524288
NOT_DELEGATED0x1000001048576
USE_DES_KEY_ONLY0x2000002097152
DONT_REQ_PREAUTH0x4000004194304
PASSWORD_EXPIRED0x8000008388608
TRUSTED_TO_AUTH_FOR_DELEGATION0x100000016777216
PARTIAL_SECRETS_ACCOUNT0x04000000 67108864

??? ???? Windows Server 2003-?????? ????? ???, LOCK_OUT ?? PASSWORD_EXPIRED ms-DS-User-Account-Control-Computed ??? ???? ?? ?? ?? ??????? ?? ??? ??? ???? ??? ??? ?? ?? ??????? ?? ???? ??? ???? ??????? ?? ???, ????? ??? ???? ?? ????:
http://msdn2.microsoft.com/en-us/library/ms677840.aspx (http://msdn2.microsoft.com/en-us/library/ms677840.aspx)
????? ?? ???? ????

???? ????? ???

  • ????????? - ????? ????????? ???? ??????
  • ACCOUNTDISABLE - ?????????? ???? ????? ???? ??? ???
  • HOMEDIR_REQUIRED - ?? ??????? ?? ???????? ???
  • PASSWD_NOTREQD - ??? ??????? ?? ???????? ???
  • PASSWD_CANT_CHANGE - ?????????? ??????? ????????? ???? ???? ?? ????? ?? ?????????? ???????? ?? ?????? ??? ?? ????????? ??? ???? ?? ???? ??? ????? ?? ??? ?? ??????, ????? ??? ???? ?? ????:
    http://msdn2.microsoft.com/en-us/library/aa746398.aspx (http://msdn2.microsoft.com/en-us/library/aa746398.aspx)
  • ENCRYPTED_TEXT_PASSWORD_ALLOWED - ?????????? ??? ???? ?? ?? ?????????? ??????? ???
  • TEMP_DUPLICATE_ACCOUNT - ?? ?? ?? ???? ?? ??? ?????????? ????? ???????? ???? ??? ???? ????? ??? ?? ???? ?? ???? ?? ??? ?????????? ????? ?????? ???? ?? ?????, ????? ?? ?? ????? trusts ???? ???? ?? ????? ???? ?? ???? ??? ??? ?? ?? ???? ?? ??? ???? ??????? ?????????? ???? ?? ??? ??? ?????????
  • NORMAL_ACCOUNT - ?? ?? ?? ???????? ???? ????? ?? ?? ??????? ?????????? ?? ???????????? ???? ???
  • INTERDOMAIN_TRUST_ACCOUNT - ?? ?? ?? ??????? ???? ?? ??? ?????? ?? ???? ????? trusts ?????? ????? ?? ??? ?????
  • WORKSTATION_TRUST_ACCOUNT - ?? ?? ???????? ???? ?? ??? ?? Microsoft Windows NT 4.0 ??????????, Microsoft ?? ??? ???????? Windows NT 4.0 ?????, Microsoft Windows 2000 Professional ?? Windows 2000 ????? ?? ?? ????? ?? ?? ????? ???
  • SERVER_TRUST_ACCOUNT - ?? ?? ?? ???????? ???? ?? ??? ?? ????? ???????? ?? ?? ????? ?? ?? ????? ???
  • DONT_EXPIRE_PASSWD - ??????? ?? ???? ?????, ?? ???????????? ???? ?? ??? ???? ?? ???? ?? ??? ???? ???????
  • MNS_LOGON_ACCOUNT - ?? ?? MNS ????? ???? ???
  • SMARTCARD_REQUIRED - ?? ????? ??? ???? ???, ?? ?? forces ???? ??????? ????? ?? ????? ?? ??? ?? ???? ?? ??? ???????????
  • TRUSTED_FOR_DELEGATION - ?? ?? ???? ??? ??, ?? ???? ????? ?? ????? ??? ?? ???? ???? (?????????? ?? ???????? ????) ????????? ?? Kerberos ???????? ?? ???? ??? ???? ?????? ??????? ?? ?????????? ?? ???? ??? ????? Kerberos ???????? ?? ??? ???? ?? ????? ???? ?? ???, ?? ??? ??? ???? ?????? ?? ?? ???? userAccountControl ???? ???? ?? ????
  • NOT_DELEGATED - ?? ?? ???? ??? ??, ?? ??????? ?????? ???????????? ???? ???? ?? ??? ??? ??? ??, ?? ?? ?????????? ?? ???? ???? ?? ??? ???? ?? ???? Kerberos ???????? ?? ??? ??????????
  • USE_DES_KEY_ONLY-(Windows 2000/Windows ????? 2003) ???? ???? ??????????? ???? (DES) ??????????? ?? ????? ???? ?? ??? ?? ????????? ?????????? ???? ???????? ?? ???????
  • DONT_REQUIRE_PREAUTH-(Windows 2000/Windows ????? 2003) ?? ???? ?? ??? ?????? ???????? pre-authentication ???? ??? ???
  • PASSWORD_EXPIRED-(Windows 2000/Windows ????? 2003) ?????????? ?? ??????? ?????? ?? ?? ???
  • TRUSTED_TO_AUTH_FOR_DELEGATION-(Windows 2000/Windows ????? 2003) ???? ???????? ?? ??? ????? ??? ?? ?? ??????? sensitive ?????? ??? ?? ?????? ????? ???? ??? ?? ???? ???? ????????? ???? ???? ?????? ?? ?????? ?? ???? ?? ??????? ?? ??? ?? ?? ?????? ?? ?????, ??? ??? ?? ?????????? ?????????? ??????? ?? ???? ?????? ????? ?? ??? ??? ???? ???? ???? ???
  • ???? ???-????? ????? ???????? (RODC) PARTIAL_SECRETS_ACCOUNT-(Windows Server 2008/Windows Server 2008 R2) ???? ??? ?? ?? ??????? sensitive ?????? ??? ?? ?????? ?? ????? ?? RODC compromises ??????? ?? ?????? ?? ??? ????
????? ?? ???? ????

UserAccountControl ???

?? ???????? ??? UserAccountControl ??? ?????????? ?? ??? ???:
??????? ??????????: 0x200 (512)
????? ????????: 0x82000 (532480)
??????????/?????: 0x1000 (4096)
????? ?? ???? ????
???? ???? ???? ??:
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows Small Business Server 2003 Premium Edition
  • Microsoft Windows Small Business Server 2003 Standard Edition
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Enterprise
  • Windows Server 2008 R2 Datacenter
  • Windows Server 2008 R2 Enterprise
  • Windows Server 2008 R2 Standard
  • Windows Server 2008 Standard
????? ?? ???? ????
??????: 
kbenv kbinfo kbmt KB305144 KbMthi
????? ?? ???? ????
???? ?????? ???????????? ?????? ????????
??????????: ?? ???? ?? ???? ??????? ?? ????? ?? Microsoft ????-?????? ?????????? ?????? ?????? ???? ??? ??. Microsoft ???? ??? ????-???????? ?? ????-???????? ????? ?????? ?? ???? ???????? ???? ?? ???? ????? ????? ??? ?? ??? ?????? ?? ???? ???? ???? ??? ????? ??. ???????, ????-???????? ???? ????? ???? ???? ???? ???. ?????, ????????, ?????-???? ?? ??????? ?? ???????? ?? ???? ???, ???? ?? ??? ?????? ???? ???? ??? ????? ??? ?? ???? ??. Microsoft ??????? ??? ???? ?? ?????? ?? ??????????, ????????? ?? ??? ?????? ?? ???? ????? ?? ???? ???????? ?? ??? ???? ????? ?? ??? ????????? ???? ??. Microsoft ????-?????? ?????????? ?? ????? ?????? ?? ?? ??? ??.
?????????? ?? ??????? ????????? ??????? ??:305144  (http://support.microsoft.com/kb/305144/en-us/ )
????? ?? ???? ????