???? LDAP ???????? ???? ?? ??? ?????? ?????????? ????? ???????? ?? Windows Server 2003 ?? ????? ???

???? ?????? ???? ??????
???? ID: 326690 - ?? ???????? ?? ?????? ??? ?? ?? ???? ???? ???? ??.
??? ?? ??????? ???? | ??? ?? ??????? ????

??????

???????? ??? ??, ???? ??????? ??????????? ?????? ????????? (LDAP) ???????? ???? ?? ??? ?????? ??????????, rootDSE ??? ?? binds, ?? ????? ???? ?????? Microsoft Windows Server 2003 ????

???? ???????

?????? ?????????? Microsoft ?? ????? ????????? ??? ???? ?????? ??????? Windows-?????? ?????? ?? ????????? ??? ?? ??? ?????? ?? ?????? ?????? ?????????? ??? ??? ?????????? ????????? ?????

Windows Server 2003 ?? ??? ???? ?????? ???????????? ?? Windows Server 2003-?????? ????? ?????????? ?? ??? ???? LDAP ?????? ??????? ?? ???? ??? You can override this new default behavior by changing the seventh character of thedsHeuristicsattribute on the DN path as follows:
CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,Root domain in forest
TheDsHeuristicssetting applies to all Windows Server 2003-based domain controllers in the same forest. The value is realized by domain controllers upon Active Directory replication without restarting Windows. Microsoft Windows 2000-based domain controllers do not support this setting and do not restrict anonymous operations if they are present in a Windows Server 2003-based forest.

Valid values for thedsHeuristic0 ?? 0000002 ??????? ??? ???????? ??? ??,DsHeuristics??????? ????? ???? ??, ????? ???? ?????? ??????? ??? ??? ?? seventh ???? 2 (0000002) ?? ??? ??? ??, ???? ??????? ????? ?? ?????? ????? ???????? ???? (ACL), ?? ?????? ?? ?? ???? ?? ???????? ?? ??? ??? Windows 2000-?????? ????? ?????????? ?? ???? ????

???:??? ???? ?? ?? ??????? ??? ??, ?? ??????? ???? ??? ??? ?? ????DsHeuristicsseventh ???? ?? ????? ???? ???? ????????? ??? ??? ??? ???? ??, ?? ????????? ???? seventh ???? ?? ?????? ????? ???? Also, you can use Adsiedit.msc to make the change to the attribute.

ThedsHeuristicsstring on a domain controller in theForest_Name.com forest appears as follows when you view it by using Ldp.exe. Only selected attributes are shown.
>> Dn: CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,DC=<forest_name>,DC=com
     2> objectClass: top; nTDSService; 
     1> cn: Directory Service; 
     1> dSHeuristics: 0000002; <-2 in the seventh character = anonymous 
        access allowed. Note the leading zeros.
     1> name: Directory Service;

???

???? ID: 326690 - ????? ???????: 04 ?????? 2010 - ??????: 2.0
???? ???? ???? ??:
  • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
  • Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Small Business Server 2003 Premium Edition
  • Microsoft Windows Small Business Server 2003 Standard Edition
  • Microsoft Windows Server 2003 Service Pack 1
??????: 
kbenv kbinfo kbmt KB326690 KbMthi
???? ?????? ????????
??????????: ?? ???? ?? ???? ??????? ?? ????? ?? Microsoft ????-?????? ?????????? ?????? ?????? ???? ??? ??. Microsoft ???? ??? ????-???????? ?? ????-???????? ????? ?????? ?? ???? ???????? ???? ?? ???? ????? ????? ??? ?? ??? ?????? ?? ???? ???? ???? ??? ????? ??. ???????, ????-???????? ???? ????? ???? ???? ???? ???. ?????, ????????, ?????-???? ?? ??????? ?? ???????? ?? ???? ???, ???? ?? ??? ?????? ???? ???? ??? ????? ??? ?? ???? ??. Microsoft ??????? ??? ???? ?? ?????? ?? ??????????, ????????? ?? ??? ?????? ?? ???? ????? ?? ???? ???????? ?? ??? ???? ????? ?? ??? ????????? ???? ??. Microsoft ????-?????? ?????????? ?? ????? ?????? ?? ?? ??? ??.
?????????? ?? ??????? ????????? ??????? ??:326690

??????????? ???

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com