??? ????? ??????? LDAP ????? ???? ???? ???? ???????? ??? Windows Server 2008? ????? ?????? ??? ????? ?????? ???????

???? ???????: 976063 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???????? ????? ????? ??????? ?????? ?????? ???????
????? ???? | ?? ????

?? ??? ??????

???????

????? ???? ?????? ??? ???????? ?????? ?????? ?????? ???? (LDAP) ??? ???? ???? ???? ???????? ??? Windows Server 2008? ????? ?????? ??? ????? ?????? ?????. ??? ???? ??? ??? ?????? ??? ??????? LDAP ????? ???? ???? ???? ???????? ??? Windows Server 2003? ????? ?????? ??? ????? ????? ??? ?? ?????????.

?????? ????? ????? ??? ????????? ?? ???? ?????? ??????? ?? ?? ???? ??????? ???? ???? ????? ??????? Windows Vista ?? Windows Server 2008.

???? ???????? ???? ??????? ?????? ??????? LDAP ????? ??? ??????? ???????:
  • ?????? ??? ?????? Administrators ???????.
  • ?????? ??? ???? ??????? ??????.
  • ?????? ??? ?????? Domain Admins.
  • ????? ????? ?????? ??????? ??????? (DACL) ????? ???????? ??? ??? ?????? ?????? ??????? ?????????.
  • ???????? ??????? ?????? ??????? ????????? ????? ???? ?? ???????? ???? ??? " ?????? ?????? ".
???? ??? ?????? | ????? ???????

?????

???? ??? ??????? ???? ????? ???? "??? ?????? ??????? (AAM)" ????? ???????? ?? ???? ??????? Windows Vista ??? Windows Server 2008. ???? ???? ???? ???? "?????? ?? ???? ????????" (UAC). ?????? ??? ???? ????? ??? ???? ?????? ??? ??????? ??? ??? ?????? ?? ????? Access Token ?? ???? ??? ????? ???? ?????? ????? ??? LDAP ?????? ?? ?????? ????? ?????? ??????? LDAP.

????? ?? ????????? ??? ???? ??? ?? ?????? ???? Microsoft TechNet ??? ??? ??????:
.aspx http://technet.microsoft.com/en-us/library/cc772207 (WS.10)
(http://technet.microsoft.com/en-us/library/cc772207(WS.10).aspx)
???? ??? ?????? | ????? ???????

???? ??????

?????? ??? ??? ???????? ?????? ???? ????? ???????.

??????? ??????

  1. ??????? ????? ?????? ?????? ???? ???? ???? ???????.
  2. ????? ??????? LDAP ?? ???? ???? ???????.

??????? ???????

????? ??? ???????? ???? ?????? ?????? ???????:
?????? ?? ???? ????????: ???? ?????? ??????? ????????? ?? "??? ?????? ???????"
????? ?? ????????? ??? ????? ????? ???? ????? ?????? ???? ?? ?????? ???? Microsoft TechNet ??? ??? ??????:
.aspx http://technet.microsoft.com/en-us/library/cc772207 (WS.10)
(http://technet.microsoft.com/en-us/library/cc772207(WS.10).aspx)

??????? ???????

  1. ????? ?????? ????? ?? ??????.
  2. ????? ?????? Domain Admins ??? ??? ???????? ???????.
  3. ??? ??? ??????? ??? ????? ?????? ??? ??? ???????? ???????. ?????? ????? ???? ??????? ???????:
    1. ???? ??? ??? ?????? ???? ??? ?????? ??? adsiedit.msc? ?? ???? ??? ?????.
    2. ?? ????? ADSI ????? ???? ????? ?????? DC =<Name></Name>? DC = com? ?? ???? ??? ?????.
    3. ?? ????? ??????? ???? ??? ???? ?? ????? ???????.
    4. ??? ???? ? ???? ??? ?????.
    5. ??? ???? ????? ???????? ?????? ???????? ???? ??? ???????? ??????? ????? ??? ?????.
    6. ???? ?? ????? ???????? ??? ????? ????????? ?? ??????????? ???? ?????? ?????? ???? "???????"? ?? ???? ??? ?????.
    7. ????? ????? ADSI ????.
  4. ????? ??????? LDAP ??? ????.
???? ??? ?????? | ????? ???????

?????

??? ?????? ??? ???????.
???? ??? ?????? | ????? ???????

??????? ????

???? ???????? ??? ????? ???? ?? ????? ??????? ?????? ?? ???? ??????? Windows Vista ??? Windows Server 2008. ???????? ??? ???? ??? ????? ???? ????? ????? ???????? ?????? ???? ????? ?? ?????? Administrators ???????.

?????? ?? ???? ?????? ????? ?????? ?? ???? ???? ???????.
whoami /all
??? ?? ????? ???? ?? ????? ????????? ??????? ???? ?? ???.
USER INFORMATION
----------------

User Name      SID                                           
============== ==============================================
MyDomain\MyUser S-1-5-21-2146773085-903363285-719344707-326360


GROUP INFORMATION
-----------------

Group Name                                    Type             SID                                               Attributes                                                     
============================================= ================ ================================================= ===============================================================
Everyone                                      Well-known group S-1-1-0                                           Mandatory group, Enabled by default, Enabled group             
BUILTIN\Administrators                        Alias            S-1-5-32-544                                      Group used for deny only
?????? Administrators ??????? ??? ????? ???????:
Group used for deny only
???? ?????? "?????? ??????" ??????? ??????? ?? "?????? ???????? ?????? ???? ???????? ?????? ????" ?? whoami/????? ???? ??? ????? ???? ? ACEs ??????. ??? ????? ?????? ?? Windows Server 2008 ? R2.

???????? ??? ??? ???????? ??? ???? ???????? ???? ???????? ?????? ??????? LDAP ????? ???? ??. ??? ????? ??????? LDAP? ????? ??????? ??? ?? ???? ???? ?? ??????? ????? ?? ??? ?? ???? ????. ??? ??? ?? ??? ??? ?????? ?????? ??????? ????????? ??? ???? ????????? ?? ???? ??? ???? ??? " ?????? ?????? ". ????? ????? ?????? ??? ????? ?????? ????? ???.
???? ??? ?????? | ????? ???????

???????

???? ???????: 976063 - ????? ??? ??????: 27/?????/1433 - ??????: 1.0
????? ???
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Standard
  • Windows Server 2008 Enterprise
  • Windows Vista Enterprise
  • Windows Vista Business
  • Windows Vista Business 64-bit edition
  • Windows Vista Ultimate
  • Windows 7 Professional
  • Windows 7 Enterprise
  • Windows 7 Ultimate
  • Windows Server 2008 R2 Standard
  • Windows Server 2008 R2 Enterprise
????? ??????: 
kbsurveynew kbprb kbexpertiseadvanced kbtshoot kbmt KB976063 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????976063
(http://support.microsoft.com/kb/976063/en-us/ )
???? ??? ?????? | ????? ???????

????? ???????

 
???? ??? ?????????? ??? ??????