?? ????? ???????? ???????? ?????? ??????? ????????

???? ???????: 817433 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???????? ????? ????? ??????? ?????? ?????? ???????
????? ???? | ?? ????

?? ??? ??????

???????

??? ??????? ??? ???? ??????? Windows Server 2003 ?? ????? ??????? ???????:
  • ?? ????? ???????? ???????? ????? ?????????? ?? ???? ???????.
  • ??? ???????? ????? ??????? ??? ??? ?????? ?????????? ??? ????? ??????? ????
  • ???? ??? ?????????? ????? ?? ????? ?????? ?????? ?? ??? ???.
?? ???? ??? ??????? ????? ??? ????? ??????? ?????? ?????? ?? ????? "????? ??????? ?? Microsoft" 327825 ??? ???? ??????? Microsoft Windows 2000 Server ?? ??? ????? Windows 2000 Service Pack 4 ??? ???? ??????? Microsoft Windows 2000 Server.????? ?? ????????? ??? ??????? ?????? Windows 2000 327825 ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
327825
(http://support.microsoft.com/kb/327825/ )
????? ??????? ???? ????? ?? ?????? Kerberos ????? ????? ?????????? ??? ??????? ?????
???? ??? ?????? | ????? ???????

?????

????? ???? ?????? ???????? ???????? ????? "????? ??????" ????? ??? ???????? ??? ???? ???????? ???? ??? ???????? ?? ??????? ?????. ????? ?? ??????? ??????? ?? ??? ?????? ?? ??????? ?????. ????? ??? ??? ?????? ???????? ???????? ????? ????? ?????? "? ?? ??? ????? ??? ???????? ?????? ?? ??????? ?????.

?????? ??? ????? ??????? ?? ?????? ????? ????? ??????? ?? ????? ?????? ???????? ??????? ?????? ?? ??????? ?? ????. ??? ????? ??????? ??????? ???? ???? ??????? ??? ??????? ??????.

?? Windows Server 2003 ??? ????????? ??????? ??? ?? ?????? ?????? ?????? ?? "Active Directory" (???? ??? "???? ?? ?????????"). ????? ??? ????????? ??????? ????? ??? ??? ?????? ??????? ?????? 327825 ??? Windows 2000.
???? ??? ?????? | ????? ???????

????

??? ??? ???????? ???? ????? ????? ????. ??? ????? ??????? ?????? ??? ???? ?????? ??????? ???? ????? ?? ?????? ???????? (PDC) ??? ??????? ??????? ????? ?????? ???????? ???????? ?? ?? ????. ???????? ??? ???? ??? ????? ??????? ?????? ??? ???? ????? ???? ?????? ???? ?? ???????? ????????? ??? ????? ?????? PDC ????? ?????? ????? ??????? ?????? ???? ??? ?????. ??? ?? ??? ??????? ?? ???? ???? ?????? ??????? ???? ??? ????? ???? ??? ????? ??????? ?????? ??? ???? ????? ???? ??????. ??? ??? ????? ???? ???? ???? ???? ??????? ?????? ??? ?????? ??????? ????????? ????? PDC ? ???? ????? ????? ?????? ???????? ??? ????.

??????? ??????? ?????? ????? ??????? Windows 2000

????? ????? ???? ????? ?? Microsoft. ???? ????? ??? ?? ?? ??????? ??????? ?? ??? ???????. ????? ??? ??????? ?????? ??? ??? ??????? ???? ????? ??? ??????? ????????.

?? ???? ????? ??????? ?????? ???? ??? "???? ????? ??????? ????" ???? ????? ????? ??????? ??? ???. ??? ?? ???? ??? ?????? ????? ??? ??? Microsoft ???? ??????? ?????? ?????? ??? ??????? ??????.

?????? ???? ?????? ?????? ?? ?? ?? ???? ?????? ??? ??????? ??????? ???????? ?? ???? ????? ????? ??? ???? ?????. ???? ????? ?????? ????? ???????? ??? ????? ????? ???????? ????????? ???? ?? ???? ??? ???? ??? ??????? ?????? ????????. ?????? ????? ????? ?????? ????? Microsoft ???? ??????? ?????? ?????? ????? ?? ?????? ??? ???? ????? ?? ?????? ???? Microsoft ?????? ??? ?????:
http://support.microsoft.com/contactus/?ws=support
(http://support.microsoft.com/contactus/?ws=support)
?????? ???? ????? "???? ????? ??????? ??????" ?????? ???? ????? ??????? ??????. ??? ?? ????? ????? ?????? ??? ???? ??? ???? ?? ????? ????? ???? ???? ?????.

????? ????? ?????

??? ????? ????? ????????? ??? ????? ??? ??????? ??????.

??????? ??????? ??????? ??????

?? ??? ??? ??????? ?????? ??? ??? ??????? ????? ????.

??????? ?????

????? ????? ????? ?????????? ?? ??? ??????? ?????? ???? ????? (?? ???? ????) ??????? ?? ?????? ??????. ??? ??? ???????? ???????? ?????? ???? ??????? ?? "??? ??????? ???????" (UTC). ????? ???? ???? ??????? ?????? ??? ??????? ??? ??????? ??????. ?????? ????? ??? ??????? ??????? (UTC) ???????? ??????? ?????? ????? ??????? ??????? ??????? ?? ???? ??????? ?????? ?? "???? ??????".
   Date         Time   Version             Size  File name
   ----------------------------------------------------------
   24-Mar-2004  02:17  5.0.2195.6876    388,368  Advapi32.dll     
   24-Mar-2004  02:17  5.0.2195.6866     69,904  Browser.dll      
   24-Mar-2004  02:17  5.0.2195.6824    134,928  Dnsapi.dll       
   24-Mar-2004  02:17  5.0.2195.6876     92,432  Dnsrslvr.dll     
   24-Mar-2004  02:17  5.0.2195.6883     47,888  Eventlog.dll     
   24-Mar-2004  02:17  5.0.2195.6890    143,632  Kdcsvc.dll       
   11-Mar-2004  02:37  5.0.2195.6903    210,192  Kerberos.dll     
   21-Sep-2003  00:32  5.0.2195.6824     71,888  Ksecdd.sys
   11-Mar-2004  02:37  5.0.2195.6902    520,976  Lsasrv.dll       
   25-Feb-2004  23:59  5.0.2195.6902     33,552  Lsass.exe        
   19-Jun-2003  20:05  5.0.2195.6680    117,520  Msv1_0.dll       
   24-Mar-2004  02:17  5.0.2195.6897    312,592  Netapi32.dll     
   19-Jun-2003  20:05  5.0.2195.6695    371,984  Netlogon.dll     
   10-Aug-2004  00:17  5.0.2195.6966    933,648  Ntdsa.dll        
   24-Mar-2004  02:17  5.0.2195.6897    388,368  Samsrv.dll       
   24-Mar-2004  02:17  5.0.2195.6893    111,376  Scecli.dll       
   24-Mar-2004  02:17  5.0.2195.6903    253,200  Scesrv.dll       
   04-Jun-2004  23:13  5.0.2195.6935  5,887,488  Sp3res.dll       
   24-Mar-2004  02:17  5.0.2195.6824     50,960  W32time.dll      
   21-Sep-2003  00:32  5.0.2195.6824     57,104  W32tm.exe

??????? ???? ?????? Windows Server 2003

??? ??? ???????? ??? ?????? ??? ???? ???? ???? ????? ??????? Windows Server 2003. ????? ?? ?????????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
889100
(http://support.microsoft.com/kb/889100/ )
????? ?????? ??? ???? ???? ???? ????? ??????? Windows Server 2003

??????? ??????? ?????? Windows Server 2003

????? ????? ???? ????? ?? Microsoft. ???? ????? ??? ?? ?? ??????? ??????? ?? ??? ???????. ????? ??? ??????? ?????? ??? ??? ??????? ???? ????? ??? ??????? ????????. ?? ??? ????? ???????? ?????? ??? ??? ??????? ??????. ?????? ??? ?? ??? ????? ??? ??????? ??????? ???? ????????? ??? ??????? ?????? ?? ????? ???????? ???? ????? ??? ??? ??????? ??????.

?? ???? ????? ??????? ?????? ???? ??? "???? ????? ??????? ????" ???? ????? ????? ??????? ??? ???. ??? ?? ???? ??? ?????? ???? Microsoft ???? ??????? ?????? ?????? ??? ??????? ??????.

?????? ???? ?????? ?????? ?? ?? ?? ???? ?????? ??? ??????? ??????? ???????? ?? ???? ????? ????? ??? ???? ?????. ???? ????? ?????? ????? ???????? ??? ????? ????? ???????? ????????? ???? ?? ???? ??? ???? ??? ??????? ?????? ????????. ?????? ????? ????? ?????? ????? Microsoft ???? ??????? ?????? ?????? ????? ?? ?????? ??? ???? ????? ?? ?????? ???? Microsoft ?????? ??? ?????:
http://support.microsoft.com/contactus/?ws=support
(http://support.microsoft.com/contactus/?ws=support)
?????? ???? ????? "???? ????? ??????? ??????" ?????? ???? ????? ??????? ??????. ??? ?? ????? ????? ?????? ??? ???? ??? ???? ?? ????? ????? ???? ???? ?????.????? ????? ????? ?????????? ?? ??? ??????? ?????? ???? ????? (?? ???? ????) ??????? ?? ?????? ??????. ??? ??? ???????? ???????? ?????? ???? ??????? ?? "??? ??????? ???????" (UTC). ????? ???? ???? ??????? ?????? ??? ??????? ??? ??????? ??????. ?????? ????? ??? ??????? ??????? (UTC) ???????? ??????? ?????? ????? ??????? ??????? ??????? ?? ???? ??????? ?????? ?? "???? ??????".

????? ????? ?????

??? ????? ????? ????????? ??? ????? ??? ??????? ??????.

??????? ??????? ??????? ??????

?? ??? ??? ??????? ?????? ??? ??? ??????? ????? ????.

??????? ?????

Windows Server 2003? ????????? 32-bit
   Date         Time   Version            Size  File name
   --------------------------------------------------------
   02-Nov-2004  01:26  5.2.3790.229  1,532,416  Ntdsa.dll
   02-Nov-2004  01:26  5.2.3790.212     32,768  Ntdsatq.dll
   19-Sep-2004  11:41  5.2.3790.212     59,392  Ws03res.dll
Windows Server 2003, ??????? ?? ??
   Date         Time   Version            Size  File name     Platform
   -------------------------------------------------------------------
   02-Nov-2004  01:21  5.2.3790.229  4,057,088  Ntdsa.dll     IA-64
   02-Nov-2004  01:21  5.2.3790.212     82,432  Ntdsatq.dll   IA-64
   19-Sep-2004  09:43  5.2.3790.212     58,880  Ws03res.dll   IA-64
   19-Sep-2004  11:41  5.2.3790.212     59,392  Wws03res.dll    x86
??? ????? ??????? ?????? ?? ???? ??????? Windows 2000 ? Windows Server 2003 ????? ????? ?????? ?????? ???????? ??? dsHeuristic ?????? ?? ??????? ???? ??????? ???? ????? ?????? adminSDHolder. ???????? ??? ?????? ????? ???? ????? ??? ?? ???? enlisted ????? ??????? ??????? ????? ??? ???? Windows 2000 ??????. ??? ????? ???? ????? 16 ??? ???? ???? ?? ????? ??? ???? ????? ???? ?????? ?? ?????? 1. ????? ???? ????? ??????? ??? "0" ??? "f". ????? ?? ?????? ???? ??????? ?? ???? ??? ???:
  • ?? 0: ????? ????? ??????
  • ?? 1: Server Operators
  • ?? 2: ????? ????? ???????
  • ?? 3: Backup Operators
??? ???? ??????? ???? 0001 ???? ??????? "????? ????? ??????". ??????? ???? 'c' ????? Operators (0100) "?" Backup Operators (1000) ??? ????? ???????? 1100 ???? ???? ???? ????? 0xC.

?????? ??????? ??????? ??? ????? ???? ?? ????? ???????. ??? ??????? ?? ?????? ???????? ????. ?????? ?????? ???? ??????? ???????:
  1. ????? ???? ?????? ???? ???? ??????. ????? ?? ????????? ??? ????? ?????? ????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
    326690
    (http://support.microsoft.com/kb/326690/ )
    ?? ????? ?????? LDAP ????? ??? "Active Directory" ??? ????? ???? ???? Windows Server 2003
  2. ?? ???? ???????? ???? ldp.exe ?? ?? ???? ????? "???????" ?????? ?????? ???????? LDP.
  3. ???? ??? ????? ? ???? ??? ??????? ?? ???? ??? ?????.
  4. ???? ??? ????? ???? ??? ??? ???? ??? ?????? ????? ???? ??????? ??? ?????? ?? ???? ??? ?????.
  5. ???? ??? ??? ? ???? ??? ???? ?? ???? ??? ?????.
  6. ???????? View\Tree ???? CN ??????? ??????:
    CN = "???? ??????" CN = Windows NT ?? CN = ????? CN = ????? DC = Forest root domain
  7. ????? ???? ???? "???? ??????" ??? ?? ???? ????? ??????? ????.
  8. ???? ?? ??? ?????? ??? ??? ?????? ?????? ?????? ?? ??? ??? ?? ?? ????? ??? dsHeuristics ??????. ??? ?? ????? ? ??? ?????? ???????? ??? ???????.
  9. ???? ??? ?????? ?????? ??? ?????? ???? ?????? ??? ?????? ?????? ??? ?? ???? ??? ?????.
  10. ??? ????? ???? dsHeuristics.
  11. ????? ? ???? 000000000100000f. ?????? ?? ?? ???? ???? ?????? ?? dsHeuristics ??????? ?? ????? ????? ?? ??????. ???? ?? ?? ???? ?????? ??? ??????? ??? "f" ?? ?? ?? ???? ???? ???? ?????.

    ?????? ?????? ?? ?? ??? ????? ?????? ??????? ?? ??? ??????? ??? ????? ??? ????? ?? ?????? ??? ??? ?? ???? ????? 10. ??? ???? ??????? ??? ?? ???? ????? ??????? 1, ??? ?? ???? ????? ??????? 2, ??? ?? ???? ????? thirtieth 3? ?????.
  12. ??? ????? ????? ??????, ???? ??? "???????" ?? ?????? ???????. ????? ???? ??? ?????.
  13. ???? ????? "???????" ??? ?????? ??? ???????? ????? ??????? ??? ???????? LDAP.
  14. ???? ??? "?????" ?????? ??????? ??? ??????. ??? ????? ???????? ??? ??????? ??? ??????? PDC ?? ?????? ???????? ??? ?? ????? ??? ???? ???? ?????? ??? ??????? ?????? ?????????? ????? ?? ????? ?????? ????? ??????? ?????? ????? ???? ??????.
???? ??? ?????? | ????? ???????

???? ??????

??????? ?????? ??? ??? ??????? ?????? ???? ????? ???????.

??????? 1: ???? ?? ??????? ??? ????? ???????? ???????

??? ??? ?????? ?????? ????? ??? ????? ?????? ????????? ???? ?? ?? ???? ?????????? ????? ????? ???????? ???????? ????? ????? ?? ???? ??????? ?????. ??????? ?????????? ????? ?? ?????? ????? ????? ???????? ??????? ????? ????? ?? ???????? ????? ??? ????? ???????? ?? ?????? ?????. ?????? ????? ????? ??????? ???????? ????? ??????.

?????? ????? ??? ???????? ????? ????? ??????? ????? ?????????? ????? AdminCount ??? ?????? ??? 1. ??? ?? ????? ??????? (??? ????? SE_DACL_PROTECTED) ? ???? ????? ???????? ????? ???????. ??? ?? ????? ????? ????? ???????? ???????. ???????? ??? ???? ???? ????? ????? AdminCount ??? 0. ??? ????? ???? ????? adminSDHolder ??? ???? ???? ???? ????? ??????? ?????? AdminCount ??? 1 ????? ?????????? ????? ???? ?? ??????? ?????. ????? AdminCount ???????? ????? ???? ???? ???? ????? ?????????? ????? ???? ????? ???? ?? ??????? ?????.

?????? ????? ?????? ?????? ???????? ?????:
cscript /nologo resetaccountsadminsdholder.vbs
???? Microsoft ??????? ???????? ??? ??? ?? ???? ??????? ?? ?? ?????. ??? ????? ???? ?? ????? ??? ???????? ??????? ?????? ???????? ?? ???????? ???? ????. ????? ??? ??????? ???? ?????? ?? ??? ??????? ???? ??? ????? ?? ??????? ???? ??? ????????? ?????? ?????? ?????????. ???? ??????? ????? ??? Microsoft ??? ????? ????? ???? ???? ?? ?????? ?????? ??? ??????? ?????? ????? ?????? ?? ????? ??????? ?????? ??????? ?????. 
'********************************************************************
'*
'* File:           ResetAccountsadminSDHolder.vbs 
'* Created:        November 2003
'* Version:        1.0
'*
'*  Main Function:  Resets all accounts that have adminCount = 1 back
'*	to 0 and enables the inheritance flag
'*
'*  ResetAccountsadminSDHolder.vbs 
'*
'* Copyright (C) 2003 Microsoft Corporation
'*
'********************************************************************

Const SE_DACL_PROTECTED = 4096

On Error Resume Next

Dim sDomain
Dim sADsPath
Dim sPDC


Dim oCon 
Dim oCmd
Dim oRst
Set oRst = CreateObject("ADODB.Recordset")
Set oCmd = CreateObject("ADODB.Command")
Set oCon = CreateObject("ADODB.Connection")

Dim oRoot
Dim oDomain
Dim oADInfo
Dim oInfo
Set oADInfo = CreateObject("ADSystemInfo")
Set oInfo = CreateObject("WinNTSystemInfo")
sPDC = oInfo.PDC & "." & oADInfo.DomainDNSName

oCon.Provider = "ADSDSOObject"
oCon.Open "Active Directory Provider"

oCmd.ActiveConnection = oCon

Set oRoot = GetObject("LDAP://rootDSE")
sDomain = oRoot.Get("defaultNamingContext")
Set oDomain = GetObject("LDAP://" & sDomain)
sADsPath = "<" & oDomain.ADsPath & ">"

oCmd.CommandText = "SELECT ADsPath FROM 'LDAP://" & sPDC & "/" & sDomain & "' WHERE objectCategory='person' and objectClass = 'user' AND adminCount = 1"
Set oRst = oCmd.Execute

WScript.Echo "searching for objects with 'admin count = 1' in " & sDomain

If oRst.RecordCount = 0 Then
    WScript.Echo "no accounts found"
    WScript.Quit
End If

Do While Not oRst.EOF
    WScript.Echo  "found object " & oRst.Fields("ADsPath")
    If SetInheritanceFlag(oRst.Fields("ADsPath")) = 0 Then WScript.Echo "Inheritance flag set"
    If SetAdminCount(oRst.Fields("ADsPath"), 0) = 0 Then WScript.Echo "adminCount set to 0"
    WScript.Echo  "=========================================="
    oRst.MoveNext
Loop


Private Function SetInheritanceFlag(DSObjectPath)

    Dim oSD
    Dim oDACL
    Dim lFlag
    Dim oIADs

    Set oIADs = GetObject(DSObjectPath)

    Set oSD = oIADs.Get("nTSecurityDescriptor")

    If oSD.Control And SE_DACL_PROTECTED Then
        oSD.Control = oSD.Control - SE_DACL_PROTECTED
    End If

    oIADs.Put "nTSecurityDescriptor", oSD
    oIADs.SetInfo
    
    If Err.Number <> 0 Then
        SetInheritanceFlag = Err.Number
    Else
        SetInheritanceFlag = 0
    End If

End Function


Private Function SetAdminCount(DSObjectPath, AdminCount)

    Dim oIADs
    Dim iAdminCount

    Set oIADs = GetObject(DSObjectPath)

    iAdminCount = oIADs.Get("adminCount")

    If iAdminCount = 1 Then iAdminCount = 0

    oIADs.Put "adminCount", iAdminCount
    oIADs.SetInfo
    If Err.Number <> 0 Then
        SetAdminCount = Err.Number
    Else
        SetAdminCount = 0
    End If
    
End Function
?????? ?? ?? ???? ?? ???? ???? ???? ??? ?????????? ???? ????? ????? ?????????? ????? ????? AdminCount ????? ??? 1 ???????? ?????. ?????? ????? ???? ????? ?????? ?? ???? ??????? ?? ?? ???? ????? ??????? ENTER:
dc -d -f 1.txt Admincount ldifde = your domain-r "(& (objectcategory=person)(objectclass=user)(admincount=1))"
?????? ??? ??? ??????? ?????? ?? ?? ???? ?????????? ????? ????? DACL ????? ?? ??? ???????? ??????? ?? ????? ?????? ??????? ??????? (ACEs) ???. ??? ??????? ?????? ??? ?? ????? ?????? ???????.
???? ??? ?????? | ????? ???????

??????? 2: ????? ??????? ?? ????? adminSDHolder

??? ??? ?????? ??????? ?? ????? adminSDHolder ???? ??? ??? ?? ???? ????? ??????? ????? ?? ????? ???????? ?????. ?? ????? ?????? ??? ??????? ????? ???? ????? adminSDHolder ??? ????? Pack 4 pre-Service.

????? ??????? ?? ????? adminSDHolder

??? ??? ?????? ??????? ?? ????? adminSDHolder ???? ??? ????? ????? ????? (ACL) ???? ???? ?????? ???????. ??? ????? ???????? ??????????. ???? ????? ??????? ??????? ??? ???????? ?? ?????? ????????? ?? ??????? ????????? ?? ????? ??? ?? ????? ??????? ????? ?????? ?????????.

?????? ??????? ????? ?????????? ???????? ??? ???? ?????????? ?????? (??????????? ??????? ????? ??????? ??????? ?????) ??? ?????? ????????? ?????? ???. ????? ?????? ????????? ????? ????? ?? ?? ?????? ?????? ?????? ACLs ?????? ?? ????? adminSDHolder. ??? ?? ????? ???????? ??? ??????? adminSDHolder (??? ???? ??????? Microsoft Exchange Server ????? ??? ???????? ?? ???????? ?? ?? ???????) ? ?????? ????? ?? ?????? ??????? ???????? ?????? ?? ????? adminSDHolder. ??? ?? ???? ?? ????? ???????? (UI) ?? ???? ???? ???????? ??? ??????? adminSDHolder. ??????? DSacls ???? ???? ???????? ??? ??????? adminSDHolder.

????? ????? ??????? ?? ????? adminSDHolder ???????? ADSI Edit ?? Active Directory Users and Computers. ???? ??????? adminSDHolder ?? CN = adminSDHolder CN = ?????? ? DC = <mydomain>? DC = <com>

?????? ??? ??? ?????? Active Directory Users and Computers ???? ?? ????? ????? ?????? ?? ??????? ??? ???????.

?????? ??????? ?? ????? adminSDHolder:
  1. ???? ??? ?????? ?????? ??? ??????? ??? ?? ???? ??? ?????.
  2. ???? ??? ????? ??????? ????.
  3. ???? ??? ??????.
  4. ???? ?????? ???? ???????? ?????? ??????? ????? ??? ??? ?????? ????? ???????? ???????.
  5. ???? ??? ????? ?? ???? ??? ?????.
?? ????? ??????? ???? ??? ????? ???? ????? SDProp ?? ????? ????? ??????? ??? ???? ????? ??????? ?????. ?? ?????? ??? ??????? ??? 60 ?????. ???? ??? ????? ???? ??????? ????? ???????? ?? ???? ???? ?????? ???????? (PDC).

???? ??????? ???????: ????? ??? ??? ?????? ACL

??? ?? ??? ???? ?????????? ??????? ?? ??????? ?????? ?? ??? ?????? ?? ??????? ???????? ?????????? ?? ??? ???? ????? ?????? ??? ?????? ???????? ????? ????? ?????? ??? ?????? ????? adminSDHolder. ?? ??? ?????????? ?? ??? ???? ?????? ????? ?? ????? adminSDHolder. ???? ??? ?????? ??? ???????? ?? ?????? ???? ??????? ?????? ???? ?? ??????? ?????? ?? ????? adminSDHolder. ??? ???? ????? ???? ????? ???? ????? SDProp ??????? ???? ?? ??????? ??? ACLs ????? adminSDHolder ??? ???? ????? ??????? ?????. ?? ??? ??????? ?????? ????? ???? ??? ??.

??? ???? ??????? ???? ????? ???? ?? ?????? "????? ???? ???????". ????? ??????? ?????? ????? adminSDHolder ?????? ??? ???? ??? ???? ??????. ??? ???? ????? ???? ?????? ??? ???? ???? ?????? ????? ?????????? ????? ?? ????? ?? ??????? ?????. ?? ??? ????? ????? ???????.

???? ?????? ?????? ????? ????? ????????? ??? ?????? adminSDHolder ???. ??? ?????? ???? ???????? ??????? ??? ?????? adminSDHolder:
  • ??? ???????
  • ????? ???? ???????
  • ????? ???? ???????
???? ??? ???????? ??? ?????? adminSDHolder ???? ??????? ???????:
  1. ?? Active Directory Users and Computers ???? ??? ????? ?????? ?? ??????? ??? ???????.
  2. ????? ???? ???? adminSDHolder. ???? ?????? ?? ?????? ?????? ??? ???? ?? "Active Directory" ??????: CN adminSDHolder CN = = ??????? DC=domain,DC=com ??? ? DC = ?????? DC = com ?? ????? ?????? ??????.
  3. ???? ??? ?????? ?????? ??? adminSDHolder ??? ?? ???? ??? ?????.
  4. ?? ???? ?????? "?????" ? ???? ??? ????? ??????? ???? ?? ???? ??? ?????? ??????.
  5. ?? ???? ?????? ??????? ?????? ??????? ?? adminSDHolder ???? ??? "?????" ?? ????? ??????? ????????.
  6. ?? ????? ?????? ?? ??????? ?? ?????? ?? ???? ?????? ???? ??? ?????? ???? ???? ??? ?????? ??? ????? ?? ???? ??? ?????.
  7. ?? ????? ?????? ?? adminSDHolder ? ?? ???? ??? ??? ?????? ?? ?????? ????? ??? ?? ???? ??? ??? ???????????? ???? ??????? ????? ????? ???? ???????.
  8. ???? ??? ????? ?????? ???? ?????? ????? ???????? ?? adminSDHolder ???? ?????? ??????? ?????? ??????? ?? adminSDHolder ????? ?????? ????? adminSDHolder.
???? ???? ????? ???? ????? ACL ??? ?????? ???????? ???????? ??????? ??????? ???? ?????????.????? ?? ?????????? ???? ??? ????? ???????? ??????? ?????? ?? "????? ??????? ?? Microsoft:
232199
(http://support.microsoft.com/kb/232199/ )
????? ?????? adminSDHolder Active ??????
318180
(http://support.microsoft.com/kb/318180/ )
????? ???? ????? AdminSDHolder ??? ??????? ?????? ??????? ?????
???? ??? ?????? | ????? ???????

?????

???? Microsoft ?? ??? ????? ?? ?????? Microsoft ??????? ?? ??? "????? ???". ?? ????? ??? ??????? ???? ??? ?? Windows Server 2003 ?????? ????? ?????? Service Pack 1.
???? ??? ?????? | ????? ???????

??????? ????

?????? Active Directory ???? ????? ?????? ?? ????? ACLs ???? ???? ?????? ????????? ???????. ????? ?????? ??? ????? ???? PDC ???????? ????????. ????? ???????? ???????? ACL ??? ?????? ?????????? ???? ????? ?? ??????? ??????? ?? ACL ??? ?????? ??????:
CN = adminSDHolder CN = ?????? ? DC = <MyDomain>,DC=<Com>

?????? "DC = <MyDomain>,DC=<Com> "???? ????? ?????? (DN) ?????? ????? ??.

?? ???? ?????? ACL ??? ??????? ??? ACL ??? ???? ???????? ???? ??????? ???? ?????? adminSDHolder (? ????? ??????? ACL). ???? ??? ??????? ??? ???????? ?? ????? ?????? ?????????? ??? ???????? ??? ?? ??? ???????? ??? ????? ?? ?????? ????????? ??? ???? ?????? ?? ????? ?????? ?????? ?????? ????? ?????? ??????????. ??? ?? ???? ?? ??? ????? ?????? ?? ?????? ?????? ??????? ??? ??? ??? ??? ????? ??????.

?????? ?????? ?????? ???? ?????? ?????? adminSDHolder ?????? ?????? ?????? ?? ????? AdminSDProtectFrequency ?? ??????? ?? ????? ??????? ?????? ??????:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
??? ??? ???? ????? ??????? AdminSDProtectFrequency ?????? adminSDHolder ?????? ???? ?????? ?? 60 ????? (3600 ?????). ????? ??????? ????? ????? ??? ??? ????? ??? ??????? ??? ?? ???? ??? ????? ????? (60 ?????) ? ?????? (7200 ?????) ?????? ????? ?????? ????????. ??? ???? ?? ???? ????? ??? ?????? ??? ???? ?????? ????. ???? ????? ??? ?????? ??? ????? LSASS ?? ?????? ?????.

???? ??????? ??????? ??????? ??????? ?? ???? ??????? Windows 2000:
  • ????? ???????
  • ????? ??????
  • ????? ??????
  • ?????????

???? ??????? ??????? ??????? ?????? ?? Windows Server 2003 ??? Windows 2000 ??? ????? ??????? ?????? 327825 ?? ????? Windows 2000 Service Pack 4:
  • ?????????
  • ????? ????? ??????
  • ????? ????? ??????
  • ????? Operators
  • ????? ????? ????? ?????????
  • ????? ??????
  • ????? ??????
  • ????? ???????
  • ?????? ???????
???????? ??? ?????????? ???????? ????? ????? ?????:
  • ?????
  • krbtgt
??? ?? ???? ??? ??????? ?? ??????? ????? ????? ?????? ??? ??????. ????? ?? ????? ??????? ????? ??? "whoami" ?????? ????? ???????? ?????.

?????? ??? ???? ?? ????????? ??? ??????? ??????? ????? ????? ?????? ???? ??????? ????? ????? ???? Active Directory. ?????? ????? ?? ?????? ???? Microsoft ?????? ??? ?????:
http://www.microsoft.com/downloads/details.aspx?familyid=631747a3-79e1-48fa-9730-dae7c0a1d6d3&displaylang=en
(http://www.microsoft.com/downloads/details.aspx?familyid=631747a3-79e1-48fa-9730-dae7c0a1d6d3&displaylang=en)
???? ??? ?????? | ????? ???????

???????

???? ???????: 817433 - ????? ??? ??????: 24/???? ??????/1430 - ??????: 24.0
????? ???
  • Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
  • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Small Business Server 2003 Premium Edition
  • Microsoft Windows Small Business Server 2003 Standard Edition
  • Microsoft Windows 2000 Service Pack 3
  • Microsoft Windows 2000 Server SP4
????? ??????: 
kbmt kbautohotfix kbwinserv2003sp1fix atdownload kbhotfixserver kbqfe KB817433 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????817433
(http://support.microsoft.com/kb/817433/en-us/ )
???? ??? ?????? | ????? ???????

????? ???????

 
???? ??? ?????????? ??? ??????