??? ???? ????? ??????

?????? ????????? ?????? ?????????
???? ???????: 885409 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

?? ??? ??????

??????

Microsoft ? ??? ???? ???? ?????? (CIS) ? ????? ???? ??????? (NSA) ? ?????? ??????? ????? ????? (DISA) ? ? "???? ???????? ???????" ? ????? (NIST) "??????? ????? ??????" ?? Microsoft Windows.

?? ??????? ?????? ??????? ??????? ?? ??? ???? ??????? ??? ???? ????? ????? ????? ????. ????? ??? ????? ???????? ??? ??? ??? ??? ????????. ???? ????? ???????? ?????? ??? ?????? ??? ???:
  • ???? ????? ?????? ??????? (ACLs) ?? ??? ??????? ??????? ???????
  • ????? ???? ???? Microsoft: ????????? ?????? (??????)
  • ????? ???? ???? ???????: ??? ????? ???? ????? LAN Manager ??? ??????? ?????? ????? ??????
  • ????? ????? ??????: ??????????? ????????? ?? FIPS ??????? ???????, ????? ????????
  • ????? ???? ??????? ???????? "??" ???? ????? ????? ?? ??????? (BITS)
  • ????? ???? NetLogon
  • ????? NoNameReleaseOnDemand
???? ????? Microsoft ?????? ????? ?????? ?????? ???? ?????? ????? ?? ????? ?????? ??????. ??? ???? ??? ?????? ?????? ????????? ??????? ???? ?????? ?? ???? ?????. ??? ???? ??????? ???? ????? ??? ????????? ?????????? ???? ???? ???? ??????? ????? Microsoft. ???? ?? ???? ???? ??????? ??? ????? ??? ??????? ??????? ?????? ??. ?????? ??? ????? ?? ????? ????? ???? ????? ???? ??????? ??????? ???? ?? ??????? ???????.

????? ???

???? ??????? ??????? ??? ??? ????? ?? ???????? ??? ???? Microsoft ?? ???? ???? ?????? (CIS) ? ????? ???? ??????? (NSA) ? ?? ?????? ??????? ????? ????? (DISA) ? "???? ???????? ???????" ?????? ????? (NIST) ? "??????? ????? ??????" ?? Windows. ??? ?? ????? ?? ?? ??????? ?????? ???? ????? ????? ???? ????? ?? ????? ????? ??? ?????? ?????????.

????? ?????? ?? ??? ??????? ??? ?? ??? ??? ?? Microsoft ???????? NIST ? ??? ??????? ?????? ?? ??????? ??????. ?? ????? ???? ??????? ??? ??????? ???? ?? ??? ?? ???:
  • ??????? ??????? ???????? ?? ????? ????? ????
  • ????? ???????
  • ?????? ?????? ???? ????? ??????

    ?????? ??? ??????? ?? ???? ????? ????? ??? ????? ???? ???? "??" ????? "?????? ???????? ????" ??????.
?? ????? ????? ???? ???? ?? ?????? ???????? ???? ?????? ?????? ??????? ?????? ?????? ??? ?????? ?? ??? ??????. ???? ??? ??????? ????????? ???? ???????? ????, ??? ????????? ???????? ?? ??? ??? ??????? ????????. ????? "???? ????" ???? ??? ?????? ??????? ????? ???????? ?????? ?? ??????? ???? ???? ?????? Windows. ?? ???????? ??? ??????? ????? "?????? ??????" ??? ????? ????? general-purpose. ?? ???????? ??????? ????? "?????? ??????" ??? ??? ????? ??? ???? ????? ????? ?????? ?? ????? ??????? ???? ?????? ?? ????? ?????? ?? ?????.

??? ??????? ????? ?? Microsoft ?????? ???? ??????? ?????? ???. ?? ???? ?? ???????? ??? ???? ????? ????? ???? ????????? ??????. ??? ???? ?? ???? ????? ???? ???? ???? ?? ????????? ????????? ????? ?????? ???????? ????????. ????? ???? ?? ????? ????????? ?? ?????? ????? ?? ?????? ??? ????. "?????? ???? ????? ??????? ?????? ???????? ???? ???" ????? ?????? ???? ?? ???? ??????.

??????? ????

???????? ???? ????? ??????? ?????? ???????? ???? ???

???? Microsoft

???? Microsoft ??????? ??? ????? ???????? ?? ????? ????? ??????? ?????? ???. ?? ???? ????? ??????? ????? ??????? ??????? ??????:
  • ???? ??????? (EC)
  • stand-Alone (SA)
  • ???? ???? ? ?????? ??????? (SSLF)
??? ?????? ?????? ??? ?????? ????????? ?? ?????? ?? ????? ????????? ??????? ??????. ????????? ??????? ???? ?????? ?????? ?? ????? ???? ?????? ???????? ?? ????? ????? ??????? Windows ????? ??.

??? ????? ???? ????? ????? ??? ????? ?????? ????? ???? ???? ????? ?? ????????? ????? ??????? ????? ??? ??? ???? ??????? ??? ???? ????. ?? ?????? ????? Microsoft ??????? ??? ????? ?????? ???? ????? ????? ???:??? ????? ?????? ?? ???? ???? ????????? ??? ????? ??????? ???? Microsoft ????? ????? ??????? ?? ???? ????? ????? ???? ???????? ??? secwish@microsoft.com.

???? ???? ??????

?? ????? CIS ????????? ???? ?? ??????? ?????? ??????? ????? ???????? ??? ????? ?????? ?????? ??? ??? ?????? ?????? ????????. ??????? CIS ????? ??????? ?? ?????? ?????????:
  • ?????
  • ???????
  • ???? ????
??? ????? ?????? ?? ???? ???? ????????? ??? ????? ??????? ???? ?????? CIS ???? CIS ?? ???? ????? ????? ???? ???????? ??? win2k-feedback@cisecurity.org.

?????? ?? ????? ?????? ????? CIS ??? ?? ???? ???? ??? ??????? (3 ?????? 2004). ?????? ?????? ????? CIS ??? ??????? ???? Microsoft. ????? ?? ????????? ??? ??????? ???? Microsoft ????? ??? "Microsoft Corporation" ?? ??? ???????.

"???? ???????? ???????" ? "?????

NIST ??????? ?? ????? ??????? ?????? ?????? "????? ???????? ??????? ?????????". ???? NIST ????? ??????? ??????? ?????? ???? ??? ????????? ?? ??? "???????? ??????? ???????? ?????????" ???????? ?????? ????????? ??????:
  • SoHo
  • ?????
  • ???????
  • ?????? Security?Limited ????
??? ????? ?????? ?? ???? ???? ????????? ??? ????? ????? ?????? NIST ???? NIST ?????? ????? ????? ???? ???????? ??? itsec@nist.gov.

?????? ?? ????? ?????? ????? NIST ??? ?? ???? ???? ??? ??????? (3 ?????? 2004). ?????? ?????? ????? NIST ??? ??????? ???? Microsoft. ????? ?? ????????? ??? ??????? ???? Microsoft ????? ??? "Microsoft Corporation" ?? ??? ???????.

????? ??????? ??????? ??????

???? DISA ??????? ????????? ???? ??? ?? DOD. ???? ?????????? DOD ???????? ????? ?????? ?? ???? ???? ????????? ??? ?????? ?????? ???? ??????? DISA ????? ??????? ?? ???? ????? ????? ???? ???????? ??? fso_spt@ritchie.disa.mil.

?????? ?? ????? ?????? ????? DISA ??? ?? ???? ???? ??? ??????? (3 ?????? 2004). ?????? ?????? ????? DISA ??????? ?? ??????? ??? ???? ???? Microsoft. ?????? ??? ???? ?? ????????? ??? ??????? ???? Microsoft ????? ??? "Microsoft Corporation" ?? ??? article.ration"???? ?? ??? ???????.

????? ???? ???? (NSA)

?? ????? NSA ???? ???????? ??? ????? ????????? ?????? high-risk ?? "????? ?????? ???????? ???????". ?? ????? NSA ????? ???? ?? ?????? ???? ?????? ?? ??????? ?? ????? "?????? ??????" ???? ????? ???????? ??????.

??? ????? ?????? ?? ???? ???? ????????? ??? ????? ??????? ?????? NSA ????? ??????? Windows XP ????? ????? ??????? ?? ???? ????? ????? ???? ???????? ??? XPGuides@nsa.gov. ?????? ??????? ??? ???? ??????? Windows 2000 ????? ????? ???? ???????? ??? w2kguides@nsa.gov.

?????? ?? ????? ?????? ????? NSA ??? ?? ???? ???? ??? ??????? (3 ?????? 2004). ?????? ?????? ????? NSA ??????? ?? ??????? ??? ???? ???? Microsoft. ?????? ??? ???? ?? ????????? ??? ??????? ???? Microsoft ????? ??? "Microsoft Corporation" ?? ??? article.ration"???? ?? ??? ???????.

????? ??????? ??????

??? ??? ?? ??? ???????, ?? ??????? ??????? ?????? ??????? ???? ?? ????? ?? ??? ???? ??????? ??? ?????? ????? ???? ???? ?????. ????? ??? ??????? ???? ??? ?? ??????? ???? ??? ??? ??? ????????.

?????? ?? ??? ????? ????? ??????? ?????? ???? ??? ?????? ??????? ??????? ?? SoHo ?? ??????? ??? ???? ???? ??? ????? ????. ???? ??? ????? ??????? ???? ????? ??? ?????? ??????? ?? ????? ???? ????.

??? ???? ????? ?????? ????? ?????? ?????? ???? ?????? ????? ?? ????? ?????? ??????. ???? ?????? ??????? ?? ??????? ?????? ?????? ?????? ??????? ????? ????? ?? ?????? ???? ????. ??? ????? ????? ??????? ?????? ?? ???? ?????? ?? ???? ??????? ???? ??????? ????????? ???? ???? ?? ??????? ?????? ?????? ?????. ??? ???? ??? ????????? ??? ?? ????? heeded. ???? ?? ?????? ???? ??????? ?????? ?????? ?? ???? ?????. ?? ???? ??? ??????? ?????? ???? ????? ?? ??? ???? ???? ????? ????? ?????? ????? ??????? ???? ??? ?????? ???? ?? ???? ??????? ?????? ???????. ???????? ??? ???? ???? ? ?????? ???????? ???? ??? ???? ????? ??????? ????? ?? ???? ???????? ?????? ????? ?? ???? ??????.

??????? ????? ?? ???? ??????? ??? ?????? ????? ?????? ?? ????????? ???? ??? ?????? ????? ??? ????? ?????. ??? ????? ?? ??? ?? ???? ??? ????????? ????? ?????? ???????? ? ?? ????????? ????? ????? ??? ??????? ??????.

??? ??????? ??????? ?????? ??? ???? ???? ????? ?????????

???? ??????? Windows Server 2003 ? Windows XP ?? Windows Vista ?? ???? ???? ???? ????? tightened ?????? ???? ??????. ?????? ??? ?? ?? ???? ????????? ??????? ??????? ??? ???????? ?????????? ????????.

?? ???? ??? ????? ??????? ACL ?????? ?? ??? ???? ?????? ??????? ??????? ???? ??? ??????? ?????? Microsoft. ????? ?????? ????? ????? ???? ????? ????????? ??? ??? ?? ?? ??????? ????? ?????? ?????? ????? Microsoft ??? ??????? ????. ????? ????? ?? ??????? ????? ????? ?? ?????? ??????? ACL ????? ???? ???? ??????? ???????? ???? ????? ???? ??? ??????. ??? ????????? ???? ??? ????? ????????? ?????????? ?????? ????? ?? ?? ????? ??? ?????? ???????.

????? ??? ????????? ?? ???? ????? ???? ??? ACLs ??? ??????? ??????? ?? ???? ??????? ??? ????? ???????. ?? ???????? ????? ??? ??????? ACL ?????? ?? ????? ?????? ???? ??? ????? ???????? ???? ?? ???? ??????????? ????????? ??? ????? ????. ???? ???????? ???? ????? ????? ??? ????????? ??? ????? ???? ACL ??? ??? Windows 2000. ????? ??????? Windows 2000 ?????? ?? ????????? ???????? ??????. ??? ??? ??? ????????? ?? ???? ????? Windows 2000 ??????.

?? ???? ??????? ?? ??????? ??? ??? ????? ???? ?? ????? ?? ???? ??????? ????? ???????. ?? ????? ?????? ????? ??? ?????? ??? ????? ???????? ???? ???? ?????? ?? ??????? ?????? ?? ???? ???????. ????? ??? ??? ?????? ????? "??? ????????" ???? ???? ?????? ??????? ACL ?? ????? ????????? ?????? ???? ?? ???? ??????? ACLs ??????.

?? ????? ????????? ??? ACL ?? ?????? % SystemDrive % ???????????? ???????:
  • ??? ?? ??? ????? ??? ????? ? ?? ???? ??????? ???????.
  • ????? ?????? ???? ????? ??? ??? ????? ??????? "??? ????????? ?? ???" ???????.
  • ??? ????????? ???????? ???????? ???? ??? ?? ?????.
  • ????? ?????? ???? ???? ???????? ??????? ?? ?????? ??????? ??? ??? ?? ???? ????? ????? ???????? ??? ??????.
  • ????? ?????? ????? ??? ????? ?????? ?? ?????? ??????? ACL ?? ???? "??? ????????" ???? ????? ????? ????? ?????? ????? ?? ????? ????? ???????? ???? ?????.
  • ????? ?????? ??? ?? ??? ??? ?????? ?? 16 ???? ?? ??? ??? ????? ????? ????????? ??? ?? "??? ????????".
  • ???? ????? ??????? ????? ?? ?????.
???????? ?? ????? ????? ???? ??? ??????? ??????? ??????? ???? ?? Microsoft ?????? ????????? ?? ??? ?? ????? ?????. ??? ???? ?????? ???? ?? ???? ??????? ??? ?????????. ??? ???? ???? ??? ????? ?????? ??? ????????? ????????? - ?? - - ??????? ??? ????? ????? ????? ?????? ??? ??? ????? ????? ???? ???????.

??? ???? ??????? ????????? ??? ACLs ??????? ???? ??? ????? ????? ?? ????? ??????? ??? ?? ???? ????? ?? ??? ?????? ??? ?? ?????. ????? ACLs ??? poses ?????? ??????? ???? ??? ?? ????? ??? ?????? ?? ?????. ??? ????? ?? ???? ???? ?? ???? ?????? ?? ???? ???????? ??????? ??? ????????? ??? ????? ???. ??? ????? ???? ???? ??? ???? ????? ?????? ??? ????????? ????????? - ?? - - ??????? ??? ??? ?????? ????? ????? ????? ???? ???????.

???? ????? ????? Microsoft: ????????? ?????? (??????)

??? ????? ??? ???????? ??? ?? ??????? ??????? ????? ??? ?????? Server Message Block (SMB) ??? ?????? ???? ???????? ???? ?? ????? ????? SMB. ??? ???? ??????? ??????? ??? ?????? ??????? ?????? ?? ??? ?????? ?? ????? ?????. ????? ?????? ?????? ???? ???? ????? ?????? ????? ??? ?????? ?????? ???? ???? Microsoft: ????????? ?????? (??????) ?? ???? ???? Microsoft: ????????? ?????? (??? ?????? ??????) ? ?????? ?? ???? ?????? ??? ??????? ?? ?????? ?????.

???? ???? ???????: ??? ????? ???? ????? LAN Manager ??? ??????? ?????? ????? ??????

??? ????? ??? ???????? ?? ??? ????? ???? ????? ????? LAN (LM) ????? ???? ????? ??? ????? ???? ??????. ?????? ???? ?????? ????? ??????? ???? ?? Microsoft Windows NT ? ??? ????? LM ????? ??????. ????? ???? ??? ??????? ????? ???? ????? ??? ???? ?????? ??? ??? ??????? ???? ?????? ????? ?????? ??????, ???? ??????? ??? ??? ????????? ?? ??? ????? ?? ????? ???? ????.

????? ??????: ??????? FIPS ??????????? ????????? ?? ???????, ????? ????????

??? ????? ??? ???????? ?????? ????? ??????? ?????? (IIS) ? Microsoft Internet Explorer ???????? ??? ???? ????? (TLS) 1.0 ???. ??? ?? ????? ??? ??????? ??? ???? ???? ?????? IIS ? ???? ??????? ???????? ??? ???? ????? TLS 1.0. ??? ?? ????? ??? ??????? ??? ???? ??? ???? ??????? ?????? ??? ??? ???????? ???? ????? ???????? TLS 1.0. ?? ???? ??? ??????? ?????? ??? ?????? ?? ?????? ????? ????? ??????? ???? ??????? ?????? (SSL).????? ?? ?????????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
811834????? ????? ????? SSL ??? ????? ????? ????????? ?? FIPS

???????? ??? ???? ??? ????? ??? ??????? ??? ???? ?????? ??????? ??????? "? ??? ??? ??????? ??????? ???? RDP 5.2 ?? ????????? ?????? ???????.

????? ?? ?????????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
811833????? ????????? "????? ??????: ??????? FIPS ??????????? ????????? ?? ???????, ????? ????????" ????? ?????? ?? Windows XP ??? ????? ???? ?? Windows

?? ????? ???? ??????? ???????? "??" ???? ????? ????? ?? ??????? (BITS)

??? ????? ???????? ?? ?????????? ???? Microsoft ?? ?????? ?? ?? ????? ??? ???????? ?????? ??? ?????????. ?? ???? ????? ?? ??? ???????????? ???? "????????? ?????????". ??????? ????? Windows Update ?????? ????? ???? "????????? ?????????". ????? ???? "????????? ?????????" ??? ????? ????? ?? ??????? ???? (BITS). ??? ?? ????? ??? ??????? ????? ????????? ?? ????? ?? ???? ????????? ?? Windows Update ???? "????????? ?????????" ?? ????? "????? ???????" (SUS) ?? ?? ??? ?????? ??????? Microsoft Systems Management Server (SMS). ??? ????? ??? ??????? ??? ??? ??????? ???? ????? ??? ???? ????? ????? ????? ?? ???????? ??? BITS.

?? ????? ???? NetLogon

??? ?? ????? ???? Net Logon ???? ??? ?? ??? ???? ?????? ???? ????. ?? ???? ??? ??????? ??????? ??? ????? ????????? ???? ?? ???????? ?? ???????? ???? ??? ?? ??? ????? ?????? ??? ?????.

NoNameReleaseOnDemand

???? ??? ??????? ???? ?? relinquishing ??? NetBIOS ????? ?? ??? ????? ?? ??????? ??? ??? ???? ???????. ??? ??????? ?? ????? ???????? ???? ????? ??? ?????? ????? ?????? ??????? ???????? ?????? ?????? ??????.

??? ????? ??? ??????? ??? ???? ??? ???? ????? ???? relinquish ??? NetBIOS ????? ?? ??? ??? ????? ????? ?? ??? ???? ???? ?????, ??? ???? ???? ????. ???? ????? ??? ????????? ????? ?????? ??????. ????? Microsoft ???? ?????? ????? ?????? ???? ???? ????????? ?????? ????? ?? ????? ?????? ??????. ??? ????? ?? ???? ??? ?????? ??? ?? ???? ?????? ?????? ?? ???? ?????. ???? ???? ?? ?????? ?????? ????? ????? ??????? ???? ????? ??? ????????? ?????????? ??????? ???? ????? ????? Microsoft ????? ??? ??????? ?????? ?????? ???. ?????? ??? ????? ?? ??????? ??? ??????? ???? ??????? ??????? ???? ?? ??????? ?? ??????.

?????

????? ?? ????????? ??? ??????? ???? ???? ????????? ? ???????: "??????? ??????" ?? Windows Server 2003 ?Windows XP. ?????? ??? ?????? ?? ?????? ???? Microsoft ?????? ??? ?????:
http://go.microsoft.com/fwlink/?LinkId=15159
????? ?? ????????? ??? ??????? ??? ??????? ???? ??????? ?????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
823659?????? ??????? ??? ??????? ???????? ???? ?? ???? ??? ????? ??????? ?????? "?" ??????? ???? ????????
????? ?? ????????? ??? ????????? ?? ??? ??????????? ????????? ?? FIPS ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
811833????? ????????? "????? ??????: ??????? FIPS ??????????? ????????? ?? ???????, ????? ????????" ????? ?????? ?? Windows XP ?????????? ??????
???? Microsoft ??????? ??? ??????? ?????? ????? ???? ???????? ?? ?????? ??? ????? ??????. ?? ??? ????? ??????? ??? ??????? ??? ???? ?????. ??? ???? Microsoft ??? ??? ????????? ???? ???????.
?????? ??? ??????? ??? ?????? ??????? ?????? ?????? ???? ????? ??????:
http://support.microsoft.com/gp/vendors/en-us

???????

???? ???????: 885409 - ????? ??? ??????: 29/?????/1428 - ??????: 7.5
????? ???
  • Windows Vista Ultimate
  • Windows Vista Business
  • Windows Vista Enterprise
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Web Edition
  • Microsoft Windows Server 2003, Standard x64 Edition
  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Server 2003, Datacenter x64 Edition
  • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
  • Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
  • Microsoft Windows XP Professional
  • Microsoft Windows XP Tablet PC Edition 2005
  • Microsoft Windows XP Tablet PC Edition
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 MultiLanguage Edition
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows 2000 MultiLanguage Edition
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Advanced Server MultiLanguage Version
  • Microsoft Windows 2000 Datacenter Server
  • Microsoft Windows 2000 Datacenter Server
????? ??????: 
kbmt kbsectools kbhowto kbsecurity KB885409 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????885409

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com