Windows NT-?????? ????? ?? ??? trusts ??? Windows Server 2003 ?? ??????? ???? ?? ??? ???? ????

?? ??? ?? ??? ???? ????? ???? ?? ?? Microsoft Windows NT 4.0-?????? ????? ?? Windows Server 2003-?????? ????? ?? ??? ??????? ????? ???? ?? ??????? ???? ?? ??? ???? ?????

Windows NT-?????? ????? ?? ??? ??? ??????? ?? ??????? ?? Windows Server 2003-?????? ??????? ??? Windows NT ??????? ???? ?? ????? ???? ??? Windows NT trusts, ????? "trusting" ?? "?????????" ?? ????? ?? ??? one-way trusts ???? ?????? ?? ???, ??? ?? ?? Windows Server 2003-?????? ????? ?????????? ????? Windows NT-?????? ????? ??? ???????? ???? ?? ??? ?????? ??? ????? ??????? ???? ?? ??? ????? ???, ?? ?? ????? ???? ?????? Windows NT-?????? ????? trusts ???????????? ?? Windows Server 2003-?????? ????? ?? ??????? ?????? ?? ?????? ???, Windows NT-?????? ????? trusting ????? ?? ??, ?? Windows Server 2003-?????? ????? ????????? ????? ?? ???

???:?? ?? ????? ?? ??? ??????? ?? ????? ???? ?? ??? NetBIOS ??? ?????????? ?? ????? ???? ?????? ???

??? ??????? ????? ????? ?? ??? ???? ????

??? ???? ??? ?? ????? ??? ?? ?? one-way Windows NT-?????? ????? ?? Windows Server 2003-?????? ????? ?? ??? ????? ?? ??????? ????:

• Windows NT trusts Windows Server 2003
• Windows Server 2003 trusts Windows NT

?? ?? ???? ????? ????? ??????? ????? two-way ??????? ??? ???? ????

?? ??? ???? ????? ??? ??????? ????? ?? ??? ???? ?????????? ???? ?? ??? ????? ????? ?? ????? ?????????? ?? ???? ?? ?? ???? one-way ??????? ????? ???, ???? ??? ??????? trusting ????? ?? ??, ?? ???? ??? ????????? ????? ?? ???

Windows NT trusts Windows Server 2003

To create a trust relationship in which a Windows NT-based domain trusts a Windows Server 2003-based domain:

1. On the Windows NT-based primary domain controller (PDC):
   1. ????? ????,????????? ????? ????,????????????? ????? ????,???????????? ??????? ????-????? ????, ?? ???? ???User Manager for Domains.
   2. ????? ??????????????? ??,Trust Relationships.
   3. ????? ????addbutton that corresponds to theTrusted Domains????? ???? TheAdd Trusted Domain????? ?????,.
   4. ??????????box, type the Windows Server 2003-based domain name without the .com portion of the domain name. For example, if the Windows Server 2003-based domain is Example.com, type??????:.
   5. ????????????box, type a password for the trust.
      
      ???:?? ????? ???????? ?? ????????? ????? ?? trusting ????? ?? ?? ????? ???????? ?? ?? ??????? ??????? ?? ????? ???? ??????
   6. ????? ????,OK. ????? ????? ????? ???? ??, ????Windows Server 2003-?????? ????? ???Windows Server 2003-?????? ????? ?? ??? ?? ?? ????Windows NT-?????? ????? ???Windows NT ????? ?? ??? ??:
      ?? ??? ??????? ????? ?? ???????? ???? ???? ?? ???? ??? ?? ?? ??? ?? ??????? ???? ??, ?? ?? ?????????? ?? ?????? ????Windows Server 2003-?????? ????? ???????? ?? ???????? ???? ?? ????? ????? ???Windows NT-?????? ????? ???????? trusting ?? ???? ???? ???
   7. ????? ????,OK. ????? ??? ?? Windows Server 2003-?????? ????? ??? ???????? ??????????? ????????? ????
   8. ?????????? ?? ??????? ????????? ????? ???, ????? ??????? ????.
2. ?? Windows Server 2003-?????? ????? ???????? ??:
   1. ????? ????,????????? ????? ????,???????????? ?????????? ????, ?? ???? ????????? ??????????? ????? ?? ??????.
   2. ?????? ??????????? ????? ?? ?????? ?????-??, ?? ?? ?????, ?? ???? ??? ????? ?? ????-????????.
   3. ????? ????,next, ?? ???? ??? ?????????? ?? ??????? ????????? ???, Windows NT-?????? ????? ???????? ?? ????? ???? ??? ??????? ?? ??????? ?? ??????? ???: ??? ??????? ???????????? ??????? ?? ?????? ????????? ????
   4. ????? ????Trusts??? ????? ????, ?? ???? ????? ???????.
   5. ??? ??????? ??????? ????? ???? ??? ????? ????,next???? ???? ?? ????
   6. ?? ??????? ???? ?? ??? Windows NT ????? ?? NetBIOS ??? ???? ????? ?????? ?? ???, ???? ????supplier01-int?? ????-????? ????, ?? ???? ???next.
   7. ???????????? ?? ????????? ?? ???, ????? ????One-way: ???
      ???????????? ?? ?? ????? ??? ????????? ?????, realm, ?? ???????? ??? ?????????? ???? ?? ?????
   8. ????? ????,next, ???? ???????? ?? ??????? ????, ?? ???? ??? ????? ????next.
   9. ????? ????? ?? ???? ?? ????? ????? ???? ??
      ??????????? ????? ??? ????? ?? ??????? ???? ????
      ????????? ?????:supplier01-int
      ???????????::
      ???: ??????? ????? ??? ?????????? ????????? ????? ??? ???????? ?? ???? ????
      ?????? ?? ??????? ????: ?????
      Windows ??????? ????? ??? ??? ???????? ?? ??? ????????? ????? ?? ?????????? ?? ???????? ??????
      Transitive: ????
      ??????? ?? ??????: ??????? ?? ?? ????? ?? ??? ????? ??? ???
      ????supplier01-int?? ??????? ???? ?? ??? Windows NT ????? ?? NetBIOS ??? ??? ????? ????,next?? ????-????? ????, ?? ???? ??????, ??? ???? ??????? ?? ?????? ????.
   10. ?????????? ??? ?? ????? ????????? ???? ?? ??? ???????????? ????????????? ?? ??? ???? ???? ?? ??????? ???? ????, ?? ???? ???next. ????? ????? ?? ???? ?? ????? ????? ???? ??:
       ??? ??????? ??????? ????? ?? ??? ??
       ?? ?? ??? ?? ??????? ???????? ??????????? ??????
       ???????? ?? ??????:
       ??????? ????? ?? ??????????? ????? ??? ?? ?????? ?? ???
   11. ????? ????,????????????? ?? ??? ????, ?? ???? ??? ???? ?? ???OK????? ??? ????? ????? ??? ?????
   12. Quit ?????? ??????????? ????? ?? ?????? ???

The trust is created. The Windows NT-based domain trusts accounts from the Windows Server 2003-based domain. However, this trust is a one-way trust. The Windows Server 2003-based domain does not trust the Windows NT-based domain accounts.

Windows Server 2003 trusts Windows NT

To create a trust relationship in which a Windows Server 2003-based domain trusts a Windows NT-based domain:

1. On the Windows Server 2003-based domain controller:
   1. ????? ????,????????? ????? ????,???????????? ?????????? ????, ?? ???? ???Active Directory Domains and Trusts.
   2. In the Active Directory Domains and Trusts snap-in, right-click the domain that you want, and then click???.
   3. ????? ????Trusts??? ????? ????, ?? ???? ???New Trust.
   4. The New Trust Wizard appears. ????? ????,next???? ???? ?? ????
   5. Type the NetBIOS name of the Windows NT domain for this trust. ?????? ?? ???, ???? ????supplier01-int?? ????-????? ????, ?? ???? ???next.
   6. ?????Direction of Trust????? ?? ???, ????? ????One-way: outgoing
      Users in the specified domain, realm, or forest can be authenticated in this domain.
   7. ????? ????,next, and then click one of the following to select the scope of authentication for users from the Windows NT domain:
      • Allow authentication for all resources in the local domain
        Windows authenticates users from the specified domain for all resources in the local domain. This option is preferred when both domains belong to the same organization.
      • Allow authentication only for selected resources in the local domain
        Windows does not automatically authenticate users from the specified domain for any resources in the local domain. After you finish this wizard, grant individual access to each server that you want to make available to users in the specified domain. This option is preferred if the domains belong to different organizations.
   8. ????? ????,next, and then type a password for this trust in theTrust password????? ???? You must use the same password when you create this trust relationship in the specified domain. After you create the trust, Active Directory periodically updates the trust password for security purposes. Type the password again in the??????? ??????? ?? ?????? ????box, and then clicknext.
   9. Review your settings, and then clicknext.
   10. ????? ????? ?? ???? ?? ????? ????? ???? ??
       ??????????? ????? ??? ????? ?? ??????? ???? ????
       ????????? ?????:supplier01-int
       ???????????::
       Outgoing: Users in the specified domain can authenticate in the local domain.
       ?????? ?? ??????? ????: ?????
       Windows ??????? ????? ??? ??? ???????? ?? ??? ????????? ????? ?? ?????????? ?? ???????? ??????
       Transitive: ????
       ??????? ?? ??????: ??????? ?? ?? ????? ?? ??? ????? ??? ???
       ????supplier01-int?? ??????? ???? ?? ??? Windows NT ????? ?? NetBIOS ??? ??? ????? ????,next?? ????-????? ????, ?? ???? ??????, ??? ???? ??????? ?? ?????? ????.
   11. ????? ????,????????????? ?? ??? ????, ?? ???? ??? ???? ?? ???OK????? ??? ????? ????? ??? ?????
   12. Quit ?????? ??????????? ????? ?? ?????? ???
2. On the Windows NT-based PDC:
   1. ????? ????,????????? ????? ????,????????????? ????? ????,???????????? ??????? ????-????? ????, ?? ???? ???User Manager for Domains.
   2. ????? ??????????????? ??,????? ?? ??????? ????.
   3. ????? ????addbutton that corresponds to theTrusting Domains????? ???? TheAdd Trusting Domain????? ?????,.
   4. ?????Trusting Domainsbox, type the Windows Server 2003-based domain name without the .com portion of the domain name. ?????? ?? ???, ??? Windows Server 2003-?????? ????? example.com ??, ???????????:.
   5. ?????????????? ???????????? ???, Windows Server 2003-?????? ????? ???????? ?? ??????? ???? ?? ??? ????? ???? ??? ???? ??????? ??????
      
      ???:Trusting ?? ?? ????? ???????? ?? ????????? ????? ?? ????? ???????? ?? ?? ??????? ?? ???? ??????? ?? ????? ???? ??????
   6. ???: ??? ??????? ???????????? ?? ?????? ????????? ???, ????????? ???? ?? ?? ??????? ??? ??? ?? ??? ?? Windows NT-?????? ????? ???????? ?? ???? ?????????? ?? ??? ??? Windows Server 2003-?????? ????? ???????? ?? ???, ?? ???? ??? ????? ????OK. Windows Server 2003-?????? ????? ??? ???????? ??????? trusting???? ????
   7. ?????????? ?? ??????? ????????? ????? ???, ????? ??????? ????.

??????? ?? ???? ??? Windows Server 2003-?????? ????? ???? ?? Windows NT-?????? ????? ?? trusts ???

??? two-way ??????? ????? ?????

????? ????? ????? ??-????? ?? ??????? ?? two-way ??????? ?????:

1. ?? Windows Server 2003-?????? ????? ???????? ??:
   1. ????? ????,????????? ????? ????,???????????? ?????????? ????, ?? ???? ????????? ??????????? ????? ?? ??????.
   2. ?????? ??????????? ????? ?? ?????? ?????-??, ?? ?? ?????, ?? ???? ??? ????? ?? ????-????????.
   3. ????? ????Trusts??? ????? ????, ?? ???? ????? ???????.
   4. ??? ??????? ??????? ????? ???? ??? ????? ????,next???? ???? ?? ????
   5. ?? ??????? ???? ?? ??? Windows NT ????? ?? NetBIOS ??? ???? ????? ?????? ?? ???, ???? ????supplier01-int?? ????-????? ????, ?? ???? ???next.
   6. ???????????? ?? ????????? ?? ???, ????? ????Two-way
      ???????????? ?? ?? ????? ??? ????????? ?????, realm, ?? ???????? ??? ?????????? ???? ?? ???? ??, ?? ???????????? ?? ????????? ?????, realm, ?? ???????? ??? ?? ????? ??? ?????????? ?? ???? ????
   7. ????? ????,next, ?? ???? ??? ????? Windows NT ????? ?? ?? ???????????? ?? ??? ??????? ??????? ?? ??? ???? ?? ??? ??? ?? ??? ?? ????? ????:
      • ??????? ????? ??? ??? ???????? ?? ??? ??????? ?? ?????? ???
        Windows ??????? ????? ??? ??? ???????? ?? ??? ????????? ????? ?? ?????????? authenticates ??? ?? ????? ????? ???? ???? ????? ?? ??? ?? ?????? ??????? ???
      • ???? ??????? ????? ??? ????? ???????? ?? ??? ??????? ?? ?????? ???
        Windows ??????? ????? ??? ???? ?? ?????? ?? ??? ????????? ????? ?? ?????????? ???????? ??? ?? ???????? ????? ?? ???????? ?????? ???? ?? ??? ??? ????????? ????? ?????????? ?? ??? ?????? ????? ????? ??? ?? ???????? ????? ?? ??? ???-??? ????? ????? ?? ?????? ??????? ?? ??? ????? ?? ???? ??????? ?? ??? ????
   8. ????? ????,next, ?? ???? ??? ?????????? ?? ??????? ????????? ???, ?? ??????? ???? ?? ??? ??? ??????? ???? ????? ????????? ????? ??? ?? ??????? ????? ????? ??? ?? ?? ?? ??????? ?? ????? ???? ?????? ??????? ????? ??, ?? ??? ?????? ?????????? ???-??? ?? ?????? ??????? ?????????? ?? ??? ??????? ??????? ??? ???: ??? ??????? ???????????? ??????? ?? ?????? ????????? ???, ?? ???? ???next.
   9. ???? ???????? ?? ??????? ????, ?? ???? ??? ????? ????next.
   10. ????? ????? ?? ???? ?? ????? ????? ???? ??
       ??????????? ????? ??? ????? ?? ??????? ???? ????
       ????????? ?????:supplier01-int
       ???????????::
       Two-way: ??????? ????? ??? ?????????? ???? ???????? ????????? ????? ??? ?? ?? ??????? ????? ??? ?????????? ????????? ????? ??? ???????? ?? ???? ????
       ?????? ?? ??????? ????: ?????
       Windows ??????? ????? ??? ??? ???????? ?? ??? ????????? ????? ?? ?????????? ?? ???????? ??????
       Transitive: ????
       ??????? ?? ??????: ??????? ?? ?? ????? ?? ??? ????? ??? ???
       ????supplier01-intWindows NT ?? NetBIOS ??? ?? ?? ??????? ???? ?? ??? ??????
   11. ????? ????,next?? ????-????? ????, ?? ???? ??????, ???? ??????? ?? ?????? ????.
   12. ????? ????,???, ??? ???? ??????? ?? ?????? ????, ?????????? ??? ?? ????? ????????? ???? ?? ??? ???????????? ????????????? ?? ??? ???? ???? ?? ??????? ???? ????, ?? ???? ???next. ????? ????? ?? ???? ?? ????? ????? ???? ??
       ??? ??????? ??????? ????? ?? ??? ??
       ?? ?? ??????? ???????? ??????????? ????? ??, ????? ?? ?????? ?? ???? ?? ??????? ????? ??? ???? ???? ?? ???? ?? ????? ?????? ??:
       
       ????? error(s) ?? ??? ??? ???? ??????? ?? ??????? ???? ???:
       ?????? ??????supplier01-int??????? ??????? ????????? ???????? ?? ?????? ???? ?????
       ???? ???????? ???? ????? ?? ?????? ???? ??????
       ???????? ???? ????? 1355 ?????? ?? ??? ???? ???: ????????? ????? ?? ?? ????? ???? ?? ?? ?????? ???? ?? ?? ????
       ????? error(s) ?? ??? ???? ??????? ?? ??????? ???? ???:
       1787 ?????? ?? ??? ??????? ??????? ?? ??????? ???? ???: ????? ?? ??????? ??????? ?? ??? ?? ?????????? ??????? ????? ?? ??? ??? ???????? ???? ???? ???
       ???? ???????? ???? ????? ?? ?????? ???? ??????
       ???????? ???? ????? 1787 ?????? ?? ??? ???? ???: ????? ?? ??????? ??????? ?? ??? ?? ?????????? ??????? ????? ?? ??? ??? ???????? ???? ???? ???
       
       Before this trust can function, it must also be created in the other domain. Ensure that the same password is used in both domains.
       ????supplier01-intis the NetBIOS name of the Windows NT domain for this trust.
   13. ????? ????,????????????? ?? ??? ????, ?? ???? ??? ???? ?? ???OK????? ??? ????? ????? ??? ?????
   14. Quit ?????? ??????????? ????? ?? ?????? ???
2. On the Windows NT-based PDC:
   1. ????? ????,????????? ????? ????,????????????? ????? ????,???????????? ??????? ????-????? ????, ?? ???? ???User Manager for Domains.
   2. ????? ??????????????? ??,????? ?? ??????? ????.
   3. ????? ????addbutton that corresponds to the????????? ?????????? ???? TheAdd Trusted Domain????? ?????,.
   4. ??????????box, type the Windows Server 2003-based domain name without the .com portion of the domain name. For example, if the Windows Server 2003-based domain is Example.com, type??????:.
   5. ????????????box, type a password for the trust.
      
      ???:You must use the same trust password on both the domain controller from the trusted domain and the domain controller from the trusted domain.
   6. ????? ????,OK. ????? ??? ?? Windows Server 2003-?????? ????? ??? ???????? ??????????? ????????? ????
   7. ????? ????addbutton that corresponds to the????? trusting????? ???? TheAdd Trusing Domain????? ?????,.
   8. ?????????? trustingbox, type the Windows Server 2003-based domain name without the .com portion of the domain name.
   9. ????????????????? ???, Windows Server 2003-?????? ????? ???????? ?? ??????? ???? ?? ??? ????? ???? ??? ???? ??????? ???? ????, ?? ???? ???OK. Windows Server 2003-?????? ????? ??? ???????? ??????? trusting???? ????
   10. ?????????? ?? ??????? ????????? ????? ???, ????? ??????? ????.
   Two-way ??????? ?? ???? ??? Windows NT-?????? ????? ???? ?? Windows Server 2003-?????? ?????, ?? Windows Server 2003-?????? ????? trusts Windows NT-?????? ????? ???? ?? trusts ???
   ????? ?? ???? ????

   ??? ??????? ?? ???? ????

   ???????? ???? ?? ??????? ????? ????? ?? ??? ??, ?? ??? Windows Server 2003-?????? ????? ???????? ?? ????? ????? ?? ???? ????:
   1. ????? ????,????????? ????? ????,??? ??????????? ????? ????,???????????? ??????? ????-????? ????, ?? ???? ????????? ??????????? ????? ?? ??????.
   2. ????? ???? ??? ??????? ?? ???? ????, ?? ???? ??? ???? ????? ??? ?????? ????? ?? ????-????????.
   3. ????? ????Trusts??? ??, ?? ???? ??? ?? ?? ????????? ????? (trusts ????) ?????? ????????? ???????,????? (??? trusts) ?? ????? ?? ??????? ????, ??????? ???????? ?? ?? ???? ??, ?? ???? ??? ???? ?? ??? ????? ???????.
   4. ????? ????,????? ????.

?????? ??????

?? ?? ????? ?? ??? ??? ??????? ????? ?? ?????? ????, ???? ????? ?????? ????? ??????? ?? ???? ??:?? ?????? ????? ????? ?????? ?? ?? ???? ???:

• ?????????? ??????
  
  ????????? ???? ?? ????? ???????? ????? ??? ?? ??? ?? ?? ?????? ?? ???? ???????? Ping.exe ???? ???? ??????? ?????? ?? ????? ???? ??? ?? TCP/IP ???
• ??? ?????? ????????
  
  ????????? ???? ?? Windows NT-?????? ????? ???????? Windows Server 2003-?????? ????? ???????? ?? ????? ??? ?? ?? ?? ???? ???, ?? ?? ?? Windows Server 2003-?????? ????? ???????? Windows NT-?????? ????? ???????? ?? NetBIOS ??? ?? ?? ?? ???? ???? ??? ?? NetBIOS ?? ????? ??? ?? ?? ???? ???? ?? ????, ???????? ?? ????? ????????? ???? ?? ?? ???????? ????? ???????? ?? Lmhosts ????? ??? ?? ????????? ?????????? ??????? ?? ???, Microsoft ?????? ??? ??? ???? ????? ?? ??? ????? ???? ?????? ????? ????::
  102725  (http://support.microsoft.com/kb/102725/ ) Lmhosts ??????? ?? ???? ?? ?????? ????????????? ????
• ???????? ?? ??????? ????
  
  ???? ???????? ?? ??? ?? Windows Server 2003 ?? ??? ??? ?????? ??????? ?? ??? ??, ?? ???? ?? ???? ?? ??? ?? ??? ???? ?? ???
  RestrictAnonymous
  ????????? ??????? ?? ??????? ?? ??????? ???? ?? ??? 0????? ??????? ?? ???, Microsoft ?????? ??? ??? ???? ????? ?? ??? ????? ???? ?????? ????? ????::
  246261  (http://support.microsoft.com/kb/246261/ ) Windows 2000 ??? RestrictAnonymous ????????? ??? ?? ????? ???? ????
  ???? ???????? ?? ??? ?? Windows Server 2003 ?????? ??? 1 (SP1) ?? ??? ??, ?? ???? ?? ???? ?? ??? ?? ??? ???? ?? ???
  RestrictAnonymous
  ????????? ??????? ?? 0 ?? ?? ??? ?? ??? ????
  RestrictNullSessAccess
  ????????? ??????? ?? ??????? ?? ??????? ???? ?? ??? FALSE ???
  
  ?? ??? ??? ???? ?? ???
  RestrictNullSessAccess
  ????????? ??????? FALSE ????, ????? ????? ?? ???? ????:
  1. ????? ????,???????????? ????,???????????:regedit?? ????-????? ????, ?? ???? ???OK????????? ?????? ?? ????? ???? ?? ????
  2. ????? ????????? ??????? ?? ?????? ?????:
     HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
  3. ?? ????????? ??????? ?? ????-????? ????, ?? ????? ????????? ????-????? ????, ?? ???? ???DWORD ???.
  4. ??????:RestrictNullSessAccess???? ????, ?? ???? ??? ENTER ?????..
  5. ???-????? ????
     RestrictNullSessAccess
     ??????:0???????? ????????? ???, ?? ???? ???OK.
  6. ????????? ?????? ?? ???? ????..
  7. ???????? ?? ???????? ????..

???? ??????? ?? ???, Microsoft ?????? ??? ??? ???? ????? ?? ??? ????? ???? ???????? ????? ????::