HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Windows/System32/zh-TW/auditpolmsg.dll.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PEL�!�

�-@ ؝8.rdata�@@.rsrc� �@@x��
T88x��$��8.rdata8x.rdata$zzzdbg �.rsrc$01�(�.rsrc$02 ���7�N���B>K����u���n���Vtx����(�@�0�H�`�x���	��
����
��� �8�P�h��� ��&��'��(��)��*�+(�,@�-X�.p�/��0��1��2��4���(8HXhx��������(8HXhx�������&���&B��&���'��8(���(���)n��)���*��+���+l�$,n��,�� -0�P-���-d�89���=� ��^r�q~��t��|���~�����x������L��h�v��L�,���MUI������Qo���5��׾ �4g[۴�e�Ŀ��~���MUIzh-TWb�R1YWeb�R�1YWe�l	g=z8h\*g-��[PA=z8h�SGR�|q}=z8h�SGR3^6b�{t	=z8hO(u�3^6b�{t=z8h��f�3^6b�{t	=z8h�[hQ'`�D}�{t=z8h|vHO�D}�{t
=z8h�a(uz_�D}�{t
=z8hvQ�N3^6b�{t�N�N{veQ/{v�Q=z8h{veQ=z8h{v�Q=z8h3^6b���[
=z8h IPsec ;N��!j_
=z8h IPsec �_�!j_
=z8h IPsec �^8O!j_=z8hyr�k{veQ=z8hvQ�N{veQ/{v�Q�N�N	=z8h�}SGR:O
ghV
=z8hO(u�/݈n�[JT=z8h�D}b�Tnj<hAudit Access RightsPA�SGR���f
=z8h0=z8h�SGR���f
0=z8hW�I��SGR���f=z8h�c
k�SGR���f=z8h MPSSVC ��GRd\}�SGR���f
=z8h�{x�s^�S�SGR���f
=z8hvQ�N�SGR���f�N�Nyr�k
kP�O(u
=z8h_j�[yr�k
kP�O(u=z8h^�_j�[yr�k
kP�O(u=z8hvQ�Nyr�k
kP�O(u�N�NPAs�0}��d�=z8h�^�zU�tz�^=z8hB}bkU�tz�^=z8h DPAPI ;m�R	=z8h RPC �N�N	=z8h PNP ;m�R=z8h
kVg
kP���tePA�|q}	=z8h�[hQ'`�rKa���f	=z8h�[hQ'`�|q}�^8O=z8h�|q}�[te'`
=z8h IPsec E��Rz_=z8hvQ�N�|q}�N�Nir�NX[�S=z8h�jHh�|q}=z8h{v�=z8h8h�_ir�N=z8h SAM=z8h�aI�
g�R	=z8h"uu�v�a(uz_=z8h�c6R�N�x�d\O=z8h�jHhqQ(u
=z8h�{x�s^�S\SN�h=z8h�{x�s^�S#��}PA
=z8hvQ�Nir�NX[�S�N�N	=z8hs�0}�v�jHhqQ(u	=z8h�b�S_X[>e݈n
=z8hƖ-NX[�S�SGR�WL�DS X[�S=z8h�v�
g�RX[�S=z8h�v�
g�R���f=z8h�v�
g�R��[
=z8hs�0}�v�
g�R��[PA3^6b{veQ=z8h��I�W�I�=z8h Kerberos 
g�RhyI��d\O
=z8hvQ�N3^6b{veQ�N�N=z8h Kerberos W�I�
g�R2���=z8h�SGR-��[2���=z8h-��[Microsoft Corporation-��[ Windows �v0}�_=z8h�SGR01.0PA#O(u�3^6b�{t



�P�SGR-��[�S���`=z8hO(u�3^6b�v���f0S+TNR�N�N:

	�^�z0���f0*Rd�0͑�e}T
T0\P(u0_U(u0���[b�d����[O(u�3^6b0

	-��[b���fO(u�3^6b�v�[�x0

	\�[hQ'`X�%R�x (SID) �e�X0RO(u�3^6b�v SID wkz��0

	-��[�v�
g�R���S!j_�[�x0

	���f�{tO(u�3^6b�v
kP�0

	�P�Nb���S��I��{t�T��I�0



�Y�g�`-��[�P�SGR-��[�GRg(WVf����fO(u�3^6bBf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0�Y�g�`*g-��[�P�SGR-��[�GR
Ng(WO(u�3^6b���fBf"uu=z8h�N�N0



xeϑ: NO0



�-�<P: b�R0���f�3^6b�{t



�P�SGR-��[�S���`=z8h�V��f�3^6b���f (�Y�^�z0���fb*Rd���f�3^6bBf) �"uu�v�N�N0



�Y�g�`-��[�P�SGR-��[�GRg(WVf����f��f�3^6bBf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W��f�3^6b���fBf"uu=z8h�N�N0



xeϑ: NO0



(u6b�zHr,g�v�-�<P: �l	g=z8h0



:O
ghVHr,g�v�-�<P: b�R0��[hQ'`�D}�{t



�P�SGR-��[�S���`=z8h�V�[hQ'`�D}���f�"uu�v�N�N��O�Y:

	�^�z0���fb*Rd��[hQ'`�D}0

	(W�[hQ'`�D}-N�e�Xb�yd�b�T0

	���f�D}^��W0



�Y�g�`-��[�P�SGR-��[�GRg(WVf����f�[hQ'`�D}Bf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W�[hQ'`�D}���fBf"uu=z8h�N�N0



xeϑ: NO0



�-�<P: b�R0�|vHO�D}�{t



�P�SGR-��[�S���`=z8h�V|vHO�D}���f�"uu�v�N�N��O�Y:

	�^�z0���fb*Rd�|vHO�D}0

	(W|vHO�D}-N�e�Xb�yd�b�T0

	���f|vHO�D}^��W0



�Y�g�`-��[�P�SGR-��[�GRg(WVf����f|vHO�D}Bf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W|vHO�D}���fBf"uu=z8h�N�N0



�la: �PP[^�%R-N�v�N�N�Sg��(W�}�W�c6R�z
N0



xeϑ: NO0



�-�<P: �l	g=z8h0��a(uz_�D}�{t



�P�SGR-��[�S���`=z8h�V�a(uz_�D}���f�"uu�v�N�N��O�Y:

	�^�z0���fb*Rd��a(uz_�D}0

	(W�a(uz_�D}-N�e�Xb�yd�b�T0



�Y�g�`-��[�P�SGR-��[�GRg(WVf����f�a(uz_�D}Bf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W�a(uz_�D}���fBf"uu=z8h�N�N0



xeϑ: NO0



�-�<P: �l	g=z8h0BvQ�N3^6b�{t�N�N



�P�SGR-��[�S���`=z8h�V�P^�%R*g�m˄�vvQ�NO(u�3^6b���f�"uu�v�N�N��O�Y:

	�]X[�SO(u�3^6b�v�[�xܖJn0�N,�/f(W Active Directory �{t�]wQ�[�x�yI�g��|vu0

	�]|T�S�[�x�SGR�j�g API0(W�`a�a(uz_,nf��SGR�Nn\�[�xW[xQ;e�dg���vVf�!kxeBf�|T�S�P�R��g/fN.z;e�d0

	NR�D}�SGR_N�v�-��}�W�D}�SGR���f:

��f�-��[\Windows -��[\�[hQ'`-��[\3^6b�SGR\�[�x�SGR

��f�-��[\Windows -��[\�[hQ'`-��[\3^6b�SGR\3^6b���[�SGR



�la: WY(u�SGR-��[Bf�g���[hQ'`=z8h�N�N0��O9e-��[Bf�GR
Ng|vur��N�N0



xeϑ: NO0



�-�<P: �l	g=z8h0k=z8h{veQ



�P�SGR-��[�S���`=z8h�V��f�
N�vO(u�3^6b{veQVf��"uu�v�N�N0

�PP[^�%R-N�v�N�N/f��^�z{veQ�]\O���k	gܕ��N|vu(W��X[�S�v��f�
N0�Y�g/f�N�R_{veQ�GRg(WO(u�3^6b{veQ�v��f�
N"uu�[hQ'`=z8h�N�N0�Y�g/f�}�{veQ (�YX[�S�}�
N�vqQ(unj�e>Y)�GRg(W݈	�nj�n�v��f�
N"uu�[hQ'`=z8h�N�N0S+TNR�N�N:

	b�R{veQVf�0

	1YWe{veQVf�0

	O(uf�x��I��v{veQVf�0U�tz�^Vf�f�xc�[r�3^6b�v��I��O{veQ3^6bBf�g"uu�P�N�N0�g8^|vu�eyb!k{veQ-��[ (�Y�c�[�v�]\ObO(u RUNAS }T�NBf)0

	�]�{x��[hQ'`X�%R�x (SID) N
NAQ1�vQ{veQ



xeϑ: (u6b�z��f�
N/f0NO
00�}�W�c6R�zb�}�:O
ghV
N/f0-N
00



(u6b�zHr,g�v�-�<P: b�R0



:O
ghVHr,g�v�-�<P: b�R�1YWe0�{v�Q



�P�SGR-��[�S���`=z8h�Vܕ��{veQ�]\O���k�"uu�v�N�N0��N�N�N|vu�e��X[�S�v��f�
N0�Y�g/f�N�R_{v�Q�GRg(WO(u�3^6b{veQ�v��f�
N"uu�[hQ'`=z8h�N�N0



�Y�g�`-��[�P�SGR-��[�GRg(Wܕ��{veQ�]\O���kBf"uu=z8h�N�N0b�R=z8hg��b�Rܕ���]\O���kVf���1YWe=z8hGRg��1YWeܕ���]\O���kVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(Wܕ��{veQ�]\O���kBf"uu=z8h�N�N0



xeϑ: NO0



�-�<P: b�R0�3^6b���[



dk�SGR-��[�S�N���`=z8h�VVf�{veQ�v3^6b�����[�1YWe@b"uu�v�N�N0



储`-��[dk�SGR-��[�GRg(W3^6b�V���[�!q�l{veQ��f�Bf"uu=z8h�N�N0b�R=z8hg��b�R�vVf���1YWe=z8hGRg��
Nb�R�vVf�0



{veQ�N�N
\�e�N�O(u�;m�R�N�SuP,n[o(W�v;e�d/fASR͑���v0



�x�x@S: NO0



�-�<P: b�R0�IPsec ;N��!j_



�P�SGR-��[�S���`=z8h�}���}�ёp��N�c�
�TS�[ (IKE) �S�]W�I��}���}��
�TS�[ (AuthIP) (W;N��!j_�N�mg��"uu�v�N�N0



�Y�g�`-��[�P�SGR-��[�GRg(W IPsec ;N��!j_�N�mg��"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W IPsec ;N��!j_�N�mg��"uu=z8h�N�N0



xeϑ: ؚ0



�-�<P: �l	g=z8h0�IPsec �_�!j_



�P�SGR-��[�S���`=z8h�}���}�ёp��N�c�
�TS�[ (IKE) �S�]W�I��}���}��
�TS�[ (AuthIP) (W�_�!j_�N�mg��"uu�v�N�N0



�Y�g�`-��[�P�SGR-��[�GRg(W IPsec �_�!j_�N�mg��"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W IPsec �_�!j_�N�mg��"uu=z8h�N�N0



xeϑ: ؚ0



�-�<P: �l	g=z8h0�IPsec �^8O!j_



�P�SGR-��[�S���`=z8h�}���}�ёp��N�c�
�TS�[ (IKE) �S�]W�I��}���}��
�TS�[ (AuthIP) (W�^8O!j_�N�mg��"uu�v�N�N0



�Y�g�`-��[�P�SGR-��[�GRg(W IPsec �^8O!j_�N�mg��"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W IPsec �^8O!j_�N�mg��"uu=z8h�N�N0



xeϑ: ؚ0



�-�<P: �l	g=z8h0$yr�k{veQ



�P�SGR-��[�S���`=z8h�Vyr�k{veQ�"uu�v�N�N��O�Y:

	O(uyr�k{veQ��/fwQ	g�{t�TTI{
kP��N�S�N(u�O\U�tz�^�cؚ�p�ؚI{}�v{veQ0

	yr�k�D}b�T�v{veQ0yr�k�D}�S���`=z8hyr�[�D}b�T{veQ�}�Bf"uu�v�N�N0�`�S�N(W{v�-N-��[�D}�[hQ'`X�%R�x (SID) n�U0�Y�g
N�NN SID (W{veQg�����e�X�
kVg��NP[^�%R�]_U(u�GRg���N�N0�Y��P�R���vs�0}nj
��ˊ�S�� Microsoft �wX��^�e�z 947223 (https://go.microsoft.com/fwlink/?LinkId=121697)0



xeϑ: NO0



�-�<P: b�R0vQ�N{veQ/{v�Q�N�N



�P�SGR-��[�S���`=z8h0{veQ/{v�Q
0�SGR-��[*g�m˄�vvQ�N{veQ/{v�Q�vܕ�N�N��O�Y:

	B}�z_j
g�R�]\O���k-N�e#��}0

	�e�vB}�z_j
g�R�]\O���k0

	���[�S�d����[�]\O�z0

	|T�S��U^�Ow�݈n0

	�d���U^�Ow�݈n0

	uP,n Kerberos ͑�e�WL�;e�d�(W�^�;e�d-N�g�c6e0RwQ	g�vTnj
��v Kerberos ��BliQ!k0�P�r�l�S��/f�}�-��[/���� �b0

	\!q�}�}�X[�S
kP��c�O(u�b��f�3^6b0

	\	g�} 802.1x �}�X[�S
kP��c�O(u�b��f�3^6b0



xeϑ: NO0



�-�<P: �l	g=z8h0�}SGR:O
ghV



�P�SGR-��[�S���`=z8h RADIUS (IAS) �S�}�X[�S�Ow� (NAP) O(u�X[�S��Bl@b"uu�v�N�N0��N��Bl�S�N/f�c�0�bU}0hc�h0���0���[�S�d����[0

�Y�g�`-��[�P�SGR-��[�GRgݑ
\�kP IAS �S NAP O(u�X[�S��Bl"uu=z8h�N�N0b�R=z8hg��b�R�vO(u�X[�S��Bl��1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng=z8h IAS �S NAP O(u�X[�S��Bl0



xeϑ: (W NPS �S IAS :O
ghV
N/f0-N
0b0ؚ
0��vQ�N��f�
NGR�l	gxeϑ0



�-�<P: b�R�1YWe0�O(u�/݈n�[JT



dk�SGR�S���`=z8hO(u�KN{veQ
kVg-N�vO(u��݈n�[JTnj
�0dkP[^�%R-N�v�N�N/f(W�^�z{veQ�]\O���k�v��f�
N"uu0
\�e�N�R_{veQ��[hQ'`=z8h�N�N/f(WO(u�{veQ�v��f�
N"uu0
\�e�}�{veQ (�O�Y�X[�S�}�
N�vqQ(unj�e>Y)��[hQ'`=z8h�N�N/f(W݈	�nj�n�v��f�
N"uu0



vu�[JTS+T�e Active Directory -N�vO(u�3^6bl\'`-NBf�O(u��[JTg���e�X�{veQ
kVg0vu�[JTS+T�e Active Directory -N�v݈n��f�3^6bl\'`-NBf�݈n�[JTg���e�X�{veQ
kVg0dkY��_��p�}�W�O(u�{veQ�v��f�_U(u�T��RX�%R0



-��[dk-��[Bf�g�p�kPb�R�v{veQ�^�zNbYP�[hQ'`=z8h�N�N0�`_N�_�(W02���=z8h�SGR-��[\�|q}=z8h�SGR\{veQ/{v�Q
0N_U(u0=z8h{veQ
0-��[0�O(u��݈n�[JTnj
�!q�l>e(W�UN�[hQ'`=z8h�N�N-N�GRg"uuYP�N�N0



xeϑ: (u6b�z��f�
N/f0NO
00�}�W�c6R�zb�}�:O
ghV
N/f0-N
0



�-�<P: 
N=z8h0�Group Membership



This policy allows you to audit the group memberships information in the user's logon token. Events in this subcategory are generated on the computer on which a logon session is created. For an interactive logon, the security audit event is generated on the computer that the user logged on to. For a network logon, such as accessing a shared folder on the network, the security audit event is generated on the computer hosting the resource.



When this setting is configured, one or more security audit events are generated for each successful logon. You must also enable the Audit Logon setting under Advanced Audit Policy Configuration\System Audit Policies\Logon/Logoff. Multiple events are generated if the group membership information cannot fit in a single security audit event.



Volume: Low on a client computer. Medium on a domain controller or a network server



Default: No Auditing.�Access Rights



This policy allows you to audit system access right enforcement details during account logon. Events in this subcategory are generated on the computer on which account logons are performed. For an interactive logon, the security audit event is generated on the computer that the user logged on to. For a network logon, such as accessing a shared folder on the network, the security audit event is generated on the computer hosting the resource.



When this setting is configured for Success audits, one or more security audit events are generated for each successful logon. When this setting is configured for Failure audits, one or more security audit events are generated for explicitly denied logons.



When this setting is configured for Failure audits, no security audit events will be generated for implicitly denied logons.



You must also enable the Audit Logon setting under Advanced Audit Policy Configuration\System Audit Policies\Logon/Logoff. Multiple events are generated if the access right information cannot fit in a single security audit event.



Volume: Low on a client computer. Medium on a domain controller or a network server



Default: No Auditing.�Audit Policy Change



This policy setting allows you to audit changes in the security audit policy settings such as the following:

	Settings permissions and audit settings on the Audit Policy object.

	Changes to the system audit policy.

	Registration of security event sources.

	De-registration of security event sources.

	Changes to the per-user audit settings.

	Changes to the value of CrashOnAuditFail.

	Changes to the system access control list on a file system or registry object.

	Changes to the Special Groups list.



Note: System access control list (SACL) change auditing is done when a SACL for an object changes and the policy change category is enabled. Discretionary access control list (DACL) and ownership changes are audited when object access auditing is enabled and the object's SACL is configured for auditing of DACL/Owner change.



If you configure this policy setting, an audit event is generated when a remote RPC connection is attempted. Success audits record successful attempts and Failure audits record unsuccessful attempts.

If you do not configure this policy setting, no audit event is generated when a remote RPC connection is attempted.



Volume: Low.



Default: Success.�W�I��SGR���f



�P�SGR-��[�S���`=z8h�VW�I��SGR���f�"uu�v�N�N��O�Y:

	�^�z9j�|�S�}�W�O�N0

	�O9e9j�|�S�}�W�O�N0

	�yd�9j�|�S�}�W�O�N0

	���fNRMOnN�v Kerberos �SGR: ��f�-��[\Windows -��[\�[hQ'`-��[\3^6b�SGR\Kerberos �SGR

	\NR�NUOO(u�
kP��c�O(u�b�D}:

		�_�}�X[�S��S��f�0

		AQ1�,g_j{veQ0

		AQ1��N�B}�z_j
g�R{veQ0

		�Nyb!k�]\O{veQ0

		�N
g�R�e_{veQ0

	}T
Tzz��]��z0�O�Y��e�O�N�v
T1z��s	g}T
Tzz��
T1z�vTBf0



�Y�g�`-��[�P�SGR-��[�GRg(WVf����fW�I��SGRBf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W���fW�I��SGRBf"uu=z8h�N�N0



�la: WY(u�D}�SGRBf�g���[hQ'`=z8h�N�N0��O9e-��[Bf�GR
Ng|vur��N�N0



xeϑ: NO0



�-�<P: b�R0H�c
k�SGR���f



�P�SGR-��[�S���`=z8h�V�c
k�SGR���f�"uu�v�N�N��O�Y:

	c>m*g�N�0W�I��SGR���f
0P[^�%R=z8h�vO(u�
kP� (�Y SeCreateTokenPrivilege)0

	�yd�*g�N�0W�I��SGR���f
0P[^�%R=z8h�vO(u�
kP� (�Y SeCreateTokenPrivilege)0

	�R�[�jHh�|q} (EFS) �SGR�v���f0

	ir�NKNnj�nl\'`�v���f0

	WY(u�ir�NKNƖ-NX[�S�SGR (CAP) �v���f0



�Y�g�`-��[�P�SGR-��[�GRg(WVf����f�c
k�SGRBf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W���f�c
k�SGRBf"uu=z8h�N�N0



xeϑ: NO0



�-�<P: �l	g=z8h0~MPSSVC ��GRd\}�SGR���f



�P�SGR-��[�S���`=z8h�V Microsoft �Ow�
g�R (MPSSVC) O(uKN�SGR��GR���f�"uu�v�N�N0�P
g�R/f�O Windows 2�kpFrO(u0S+TNR�N�N:

	1XJT Windows 2�kpFr
g�R_U�RBf�vO(u-N�SGR0

	Windows 2�kpFr��GR�v���f0

	Windows 2�kpFr�OYn�U�v���f0

	Windows 2�kpFr-��[�v���f0

	Windows 2�kpFr
g�R�_eub*gWY(u�v��GR0

	Windows 2�kpFr�D}�SGR-��[�v���f0



�Y�g�`-��[�P�SGR-��[�GRg(WVf����f MPSSVC @bO(u�v�SGR��GRBf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�(W MPSSVC O(u�v�SGR��GR���fBfGR
Ng"uu=z8h�N�N0



xeϑ: NO0



�-�<P: �l	g=z8h0PA��{x�s^�S�SGR���f



�P�SGR-��[�S���`=z8h�V Windows �{x�s^�S (WFP) ���f�"uu�v�N�N��O�Y:

	IPsec 
g�R�rKa0

	IPsec �SGR-��[�v���f0

	Windows 2�kpFr�SGR-��[�v���f0

	WFP �c�O��S_�d�v���f0



�Y�g�`-��[�P�SGR-��[�GRg(WVf����f WFP Bf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W���f WFP Bf"uu=z8h�N�N0



xeϑ: NO0



�-�<P: �l	g=z8h0�vQ�N�SGR���f�N�N



�P�SGR-��[�S���`=z8h�SGR���f^�%R*g=z8hKNvQ�N�[hQ'`�SGR���f@b"uu�v=z8h�N�N��O�Y:

	�O�s^�S!jD} (TPM) -��[���f0

	8h�_!j_�[�x�}o��b,nf�0

	�[�x�}o��c�O��d\O0

	�[�x�}o�gQ�[�d\Ob�O9e0

	�]WY(u�vƖ-NX[�S�SGR (CAP) ���f0

	��_j-��[nj�e (BCD) �O9e0



xeϑ: NO0



�-�<P: �l	g=z8h0PAs_j�[yr�k
kP�O(u



�P�SGR-��[�S���`=z8hO(u_j�[yr�k
kP� (O(u�
kP�) Bf"uu�v�N�N��O�Y:

	|T�Syr1�
g�R0

	|T�SNRvQ-NN.z
kP�:

		vub\Omi�|q}�vN�R0

		�P�N�jHh�S�v�0

		�^�z
kVgir�N0

		uP/�z_0

		����f��SO(u�3^6b�S�O���N2�L��Y>m0

		"uu�[hQ'`=z8h0

		(WW�I��_!j�d(u6b�z0

			�eQ�S�d�	�eQ݈nE��Rz_0

		�{t=z8h�S�[hQ'`���j0

		�O9e̗Ԛ�t�X<P0

		�S�NU�tz�^I{}
kVg0

		���S�jHh�S�v�0

		�S�_�jHhbvQ�Nir�N�v�d	g
k0



�Y�g�`-��[�P�SGR-��[�GRg(W2�L�_j�[yr�k
kP���BlBf"uu=z8h�N�N0b�R=z8hg��b�R��Bl��1YWe=z8hGRg��1YWe��Bl0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W2�L�_j�[yr�k
kP���BlBf"uu=z8h�N�N0



xeϑ: ؚ0>^�_j�[yr�k
kP�O(u



�P�SGR-��[�S���`=z8h�VO(u^�_j�[yr�k
kP� (O(u�
kP�) �"uu�v�N�N0

NR/f^�_j�[�vyr�k
kP�:

		X[�S��I��{t�TZP�p�O�N�v|T�S�0

		�_�}�X[�S��S��f�0

		\�]\O�z�e�X�}�W0

		��teU�tz�^�v��aԚM�M�0

		AQ1�,g_j{veQ0

		AQ1��N�B}�z_j
g�R{veQ0

		euN�hTJ��j�g0

		���f�|q}Bf��0

		�^�zR��j0

		�^�z�(uir�N0

		

		�^�z8lENqQ(uir�N0

		�^�z&{_�#�P}0

		�bU}�_�}�X[�S��S��f�0

		�bU}�Nyb!k�]\O{veQ0

		�bU}�N
g�R�e_{veQ0

		�bU},g_j{veQ0

		�bU}�N�B}�z_j
g�R{veQ0

		7_6R�_`��z�|q}2�L�ܕ��0

		�X�RU�tz�^�]\OƖ0

		�X�R�cz*QHQ��^0

		���[��aԚ-N�vR�0

		�Nyb!k�]\O{veQ0

		�N
g�R�e_{veQ0

		�O9eir�Njd|0

		�WL��x�x@S�}w��]\O0

		�v���UNU�tz�^0

		�v���|q}He��0

		�_�dEQ�^�yd���f�0

		ܕ���|q}0

		TekU�t�v�
g�Rnj�e0



�Y�g�`-��[�P�SGR-��[�GRg(W|T�S^�_j�[yr�k
kP�Bf"uu=z8h�N�N0b�R=z8hg��b�R|T�S��1YWe=z8hGRg��1YWe|T�S0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W|T�S^�_j�[yr�k
kP�Bf"uu=z8h�N�N0



xeϑ: uiؚ0*gO(u0PA��^�zU�tz�^



�P�SGR-��[�S���`=z8h�^�zb_U�RU�tz�^Bf"uu�v�N�N�_Ng=z8h�^�zU�tz�^�v�a(uz_bO(u�
T1z0



�Y�g�`-��[�P�SGR-��[�GRg(W�^�zU�tz�^Bf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W�^�zU�tz�^Bf"uu=z8h�N�N0



xeϑ: �Szl�e��f��vO(u�e_0�B}bkU�tz�^



�P�SGR-��[�S���`=z8hU�tz�^P}_gBf"uu�v�N�N0



�Y�g�`-��[�P�SGR-��[�GRg(WU�tz�^P}_gBf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(WU�tz�^P}_gBf"uu=z8h�N�N0



xeϑ: �Szl�e��f��vO(u�e_0PADPAPI ;m�R



�P�SGR-��[�S���`=z8h
\nj�e�Ow��a(uz_�Nb� (DPAPI) 2�L��R�[b��[��BlBf"uu�v�N�N0DPAPI /f(u�O�Ow��y�[nj
� (�Y2QX[�v�[�x�Sёp�nj
�)0�Y� DPAPI �vs�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?LinkId=1217200



�Y�g�`-��[�P�SGR-��[�GRg(W
\ DPAPI 2�L��R�[b��[��BlBf"uu=z8h�N�N0b�R=z8hg��b�R��Bl��1YWe=z8hGRg��1YWe��Bl0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W
\ DPAPI 2�L��R�[b��[��BlBf"uu=z8h�N�N0



xeϑ: NO0�RPC �N�N



�P�SGR-��[�S���`=z8h�PeQ`��zz�^|T�S (RPC) #��}0



�Y�g�`-��[�P�SGR-��[�GRg(WVf�`��z RPC #��}Bf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(WVf�`��z RPC #��}Bf"uu=z8h�N�N0



xeϑ: (W RPC :O
ghV
N/f0ؚ
00�PNP ;m�R



dk�SGR-��[�S���`(W���csS(uuP,n0RY�c_݈nBf�WL�=z8h0



�-��[dk�SGR-��[��kvu���csS(uuP,n0RY�c_݈nBfg"uu=z8h�N�N0dk^�%R�Sg��b�R=z8h0

�*g-��[dk�SGR-��[�vu���csS(uuP,n0RY�c_݈nBf
Ng"uu=z8h�N�N0



xeϑ: NO=
kVg
kP���te�N�N



dk�SGR-��[�S���`=z8h�N���te
kVg
kP��"uu�v�N�N0



xeϑ: ؚ0



�-�<P: �l	g=z8h0PA��[hQ'`�rKa���f



�P�SGR-��[�S���`=z8h�V��f��[hQ'`�rKa���f�"uu�v�N�N��O�YNR�N�N:

	��f��v_U�R�Sܕ��0

	�|q}Bf���v���f0

	�_ CrashOnAuditFail �_�S�|q}��/f(W�[hQ'`�N�N���j�]�nN-��[ CrashOnAuditFail {v���vBf�e�|q}͑�e_U�RKN�_��0



xeϑ: NO0



�-�<P: b�R0l�[hQ'`�|q}�^8O



�P�SGR-��[�S���`=z8h��[hQ'`�|q}�^8Ob
g�R�vܕ�v�N�N��O�Y:

		�eQ�[hQ'`�|q}�^8O (�YW�I�0��wb�[hQ'`\݈)�&NT,g_j�[hQ'`�c
k (LSA) 2�L�;��Q0�[/f(u�OW�I�{veQVf�0�c�N{veQ��Bl��N�S�NUO3^6bb�[�x���f0Kerberos �S NTLM /f�[hQ'`�|q}�^8O�v�{�O0

	�[݈
g�R�&NT
g�R�c6R�{t�T2�L�;��Q0=z8h��S+T
g�R
T1z0�N2�MO0^��W0_U�R^��W�S
g�R3^6b�v�vܕnj
�0

�Y�g�`-��[�P�SGR-��[�GRg(WVf�	�eQ�[hQ'`�|q}�^8OBf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(WVf�	�eQ�[hQ'`�|q}�^8OBf"uu=z8h�N�N0



xeϑ: NO0(W�}�W�c6R�z
N"uu�[hQ'`�|q}�^8O�N�N�v;��sgY�e(u6b�z��f�bb�T:O
ghV0



�-�<P: �l	g=z8h0��|q}�[te'`



�P�SGR-��[�S���`=z8hg4x�X�[hQ'`P[�|q}�[te'`�v�N�N��O�Y:

	�V=z8h�|q}|vuOUL��!q�l�[eQ�N�N���j�v�N�N0

	O(u,g_jz�^|T�S (LPC) #��c�W�vU�tz�^��dk#��c�W(W�N��(u6b�zMO@Wzz��KN���v�V��0���Sb�[eQ�OVf�!j�d(u6b�z�vN�z-N!qHe0

	uP,n0RqS�[�|q}�[te'`�v`��zz�^|T�S (RPC)0

	uP,n0Rz_�x�[te'`$R�e�p!qHeKN�S�WL��j�vܖJn<P0

	qS�[�|q}�[te'`�v�[�x�}o��d\O0



xeϑ: NO0



�-�<P: b�R�1YWe0QIPSEC E��Rz_



�P�SGR-��[�S���`=z8h�V IPsec �{x�hVE��Rz_�"uu�v�N�N��O�Y:

	IPsec 
g�R�v_U�R�Sܕ��0

	�V�[te'`�j�g1YWe�N�h�v�}�\S0

	�V͑�e�WL��j�g1YWe�N�h�v�}�\S0

	�V<h_�p}�eW[�N�h�v�}�\S0

	�c6e0RwQ	g
Nck�x�[hQ'`�Sxe"}_ (SPI) �v�}�\S0��S��h�:y�}�aS*gck�xK�\O�b����f�eE��Rz_0

	!q�lU�t IPsec �{x�hV0



�Y�g�`-��[�P�SGR-��[�GRg(W IPsec �{x�hVE��Rz_�d\O
N"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W IPsec �{x�hVE��Rz_�d\O
N"uu=z8h�N�N0



xeϑ: NO0



�-�<P: �l	g=z8h0PA{vQ�N�|q}�N�N



�P�SGR-��[�S���`=z8hNR�NN�N�N:

	Windows 2�kpFr
g�R�SE��Rz_�v_U�R�Sܕ��0

	Windows 2�kpFr
g�R�v�[hQ'`�SGRU�t0

	�[�x�}o�ёp��jHh�S�yI��d\O0



xeϑ: NO0



�-�<P: b�R�1YWe0PA��jHh�|q}



�P�SGR-��[�S���`=z8hO(u�X[�S�jHh�|q}ir�N�vVf�0�S	g�]c�[�|q}X[�S�c6Rn�U (SACL) �vir�N��N�S��Bl�vX[�S^��W (�Y�[eQ0���Sb�O9e) �S�c�Q��Bl�v3^6b&{T SACL -N�v-��[Bf�Mbg"uu�[hQ'`=z8h�N�N0�Y�_U(uir�NX[�S=z8h�vs�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?LinkId=1220830



�Y�g�`-��[�P�SGR-��[�GRg(W�k!k3^6bX[�SwQ	g�v&{ SACL �v�jHh�|q}ir�NBf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W�k!k3^6bX[�SwQ	g�v&{ SACL �v�jHh�|q}ir�NBf"uu=z8h�N�N0



�la: �`�S�NO(ur�ir�NKN [gQ�[] 
\q��eJX�v [�[hQ'`] "}_jd|�-��[�jHh�|q}ir�N�v SACL0



xeϑ: �Szl�e�jHh�|q} SACL �v-��[�e_0&{v�



�P�SGR-��[�S���`=z8hX[�S{v�ir�N�vVf�0�S	g�]c�[�|q}X[�S�c6Rn�U (SACL) �vir�N��N�S��Bl�vX[�S^��W (�Y���S0�[eQb�O9e) �S�c�Q��Bl�v3^6b&{T SACL -N�v-��[Bf�Mbg"uu�[hQ'`=z8h�N�N0



�Y�g�`-��[�P�SGR-��[�GRg(W�k!k3^6bX[�SwQ	g�v&{ SACL �v{v�ir�NBf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W�k!k3^6bX[�SwQ	g�v&{ SACL �v{v�ir�NBf"uu=z8h�N�N0



�la: �`�S�NO(u [O(u
kP�] 
\q��eJX�O-��[{v�ir�N�v SACL0



xeϑ: �Szl�e{v� SACL �v-��[�e_0�8h�_ir�N



�P�SGR-��[�S���`=z8hX[�S8h�_�vVf� (S+T Mutex �S�e_�)0

�S	gwQ	g�v&{�|q}X[�S�c6Rn�U (SACL) �v8h�_ir�NMbg"uu�[hQ'`=z8h�N�N0



�la: [=z8h: =z8h�(u�|q}ir�N�vX[�S] �SGR-��[�S�c6R8h�_ir�N�v�-� SACL0



xeϑ: �Y�g_U(u�(u�|q}ir�N�v=z8hX[�S�GR�p0ؚ
00�SAM



�P�SGR-��[�S���`=z8h�VVf�X[�S�[hQ'`3^6b�{t�T (SAM) ir�N�"uu�v�N�N0

SAM ir�NS�b:

	SAM_ALIAS -- ,g_j�D}0

	SAM_GROUP -- 
N/f,g_j�D}�v�D}0

	SAM_USER - O(u�3^6b0

	SAM_DOMAIN - �}�W0

	SAM_SERVER - ��f�3^6b0

�Y�g�`-��[�P�SGR-��[�GRg(WVf�X[�S8h�_ir�NBf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(WVf�X[�S8h�_ir�NBf"uu=z8h�N�N0

�la: �S�S�N�O9e SAM_SERVER �v�|q}X[�S�c6Rn�U (SACL)0

xeϑ: (W�}�W�c6R�z
N/f0ؚ
00�Y�n\(W�PP[^�%R-N"uuKN�N�Nxeϑ�vs�0}nj
��ˊ�S�� Microsoft �wX��^�e�z 841001 (https://go.microsoft.com/fwlink/?LinkId=121698)0��aI�
g�R



�P�SGR-��[�S���`=z8h Active Directory �aI�
g�R (AD CS) �d\O0

AD CS �d\OS�b:

	AD CS _U�R/ܕ��/�P�N/���S0

	�aI��d��n�U (CRL) �v���f0

	�e�v�aI���Bl0

	�aI��v|v�Q0

	�aI��v�d��0

	AD CS �v�aI��{t�T-��[���f0

	AD CS D}Ka�v���f0

	�aI�
g�R�{,g�v���f0

	�aI��v/SeQ0

	�aI��c
k�UMO�aI��v|vHO/fݑ
\ Active Directory �}�W
g�R0

	AD CS �v�[hQ'`
kP����f0

	ёp��v\X[0

	ёp��v/SeQ0

	ёp��v�b�S0

	�}
N�aI��rKa�
�TS�[ (OCSP) �V�az_
g�R�v_U�R0

	�}
N�aI��rKa�
�TS�[ (OCSP) �V�az_
g�R�v\Pbk0



xeϑ: (W�WL� Active Directory �aI�
g�R�v��f�
N/f0-N
0b0NO
00�"uu�v�a(uz_



�P�SGR-��[�S���`=z8hO(u Windows =z8h�a(uz_��|v�Nb� (API) "uu�N�N�v�a(uz_0-��bO(u Windows =z8h API �v�a(uz_�gO(u�PP[^�%R�O���vQ�R���vܕ�v=z8h�N�N0

�PP[^�%R-N�v�N�NS+T:

	�a(uz_(u6b�zgQ�[�v�^�z0

	�a(uz_(u6b�zgQ�[�v*Rd�0

	�a(uz_(u6b�zgQ�[�vR�YS0

	vQ�NO(u Windows =z8h API �v�a(uz_�d\O0



xeϑ: �Szl�e"uu�[P�v�a(uz_0-�c6R�N�x�d\O



�P�SGR-��[�S���`=z8h��_Ubܕ��ir�N�c6R�N�xBf"uu�v�N�N0�S	gwQ	g�v&{�|q}X[�S�c6Rn�U (SACL) �vir�NMbg"uu�[hQ'`=z8h�N�N0



�Y�g�`-��[�P�SGR-��[�GRg(W�d\O�c6R�N�xBf"uu=z8h�N�N0b�R=z8hg��b�RVf���1YWe=z8hGRg��1YWeVf�0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W�d\O�c6R�N�xBf"uu=z8h�N�N0



�la: �PP[^�%R-N�v�N�N�S	gݑ
\_U(u
\�air�NX[�SP[^�%R�vir�N^��W�Mbg"uu�N�N0�O�Y��Y�g_U(u�jHh�|q}ir�NX[�S�GRg"uu�c6R�N�x�d\O�[hQ'`=z8h�N�N0�Y�g*g_U(u{v�ir�NX[�S�GR
Ng"uu�c6R�N�x�d\O�[hQ'`=z8h�N�N0



xeϑ: �Szl�e SACL �v-��[�e_0��jHhqQ(u



�P�SGR-��[�S���`=z8hX[�SqQ(unj�e>Y�vVf�0



�Y�g�`-��[�P�SGR-��[�GRg(WVf�X[�SqQ(unj�e>YBf"uu=z8h�N�N0�Y�g�[��P�SGR-��[�GR�|q}�{t�T�S�Nc�[�S=z8hb�R0�S=z8h1YWe�bTBf=z8hiQ�0



�la: qQ(unj�e>Y�l	g�|q}X[�S�c6Rn�U (SACL)0�Y�g_U(u�P�SGR-��[�GRg=z8h�|q}
N@b	gqQ(unj�e>Y�vX[�S0



xeϑ: �V�p�D}�SGR��� SYSVOL �}�X[�S�@b�N(W�jHh:O
ghVb�}�W�c6R�z
N/f0ؚ
00CWindows �{x�s^�S\SN�h



�P�SGR-��[�S���`=z8h Windows �{x�s^�S (WFP) N�h�v\S0



xeϑ: ؚ0rWindows �{x�s^�S#��}



�P�SGR-��[�S���`=z8h Windows �{x�s^�S (WFP) AQ1�b\���v#��}0S+TNR�N�N:

	Windows 2�kpFr
g�R\���a(uz_�OvQ!q�l�c�S�}v#�eQ#��}0

	WFP AQ1�#��}0

	WFP \��#��}0

	WFP AQ1�,g_j#��c�W�vk~P}0

	WFP \��,g_j#��c�W�vk~P}0

	WFP AQ1�#��}0

	WFP \��#��}0

	WFP AQ1��a(uz_b
g�R�c}�2�L�#�eQ#��}�v#��c�W0

	WFP \���a(uz_b
g�R�c}�2�L�#�eQ#��}�v#��c�W0



�Y�g�`-��[�P�SGR-��[�GRg(W WFP AQ1�b\��#��}Bf"uu=z8h�N�N0b�R=z8hg��AQ1�#��}Bf"uu�v�N�N��1YWe=z8hGRg��\��#��}Bf"uu�v�N�N0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W WFP AQ1�b\��#��}Bf"uu=z8h�N�N0



xeϑ: ؚ0�vQ�Nir�NX[�S�N�N



�P�SGR-��[�S���`=z8h�V�{t�]\O�czhVir�Nb COM+ ir�N�"uu�v�N�N0

�Y�g/f�czhV�]\O�GRg=z8hNR��v:

	�^�z�]\O0

	*Rd��]\O0

	_U(u�]\O0

	\P(u�]\O0

	�f�e�]\O0

�Y�g/f COM+ ir�N�GRg=z8hNR��v:

	�e�X^�%R�v�ir�N0

	�f�e^�%R�v�ir�N0

	*Rd�^�%R�v�ir�N0



xeϑ: NO0Ls�0}�v�jHhqQ(u



�P�SGR-��[�S���`=z8hX[�SqQ(unj�e>Y-NKN�jHh�Snj�e>Y�vVf�0[s�0}�v�jHhqQ(u] -��[���k!kX[�S�jHhbnj�e>Y�v�N�N�� [�jHhqQ(u] -��[
\�e(u6b�z�T�jHhqQ(uKN���^�z�v�NUO#��}�Sg��N!k�N�N0[s�0}�v�jHhqQ(u] =z8h�v�N�N�S�bܕ�e
kP�b(u�O�c�b�bU}X[�SKNvQ�N�h�N�vs�0}nj
�0



�Y�g�`-��[dk�SGR-��[�vuVf�X[�SqQ(u
N�v�jHhbnj�e>YBf�1\g"uu=z8h�N�N0�|q}�{t�T�S�Nc�[�S=z8hb�R0�S=z8h1YWe�bTBf=z8hiQ�0



�la: qQ(unj�e>Y�l	g�|q}X[�S�c6Rn�U (SACL)0�Y�g_U(udk�SGR-��[�GRg=z8h�|q}
N@b	gqQ(u�jHh�Tnj�e>Y�vX[�S0



xeϑ: �V�p�D}�SGR��� SYSVOL �}�X[�S�@b�N(W�jHh:O
ghVb�}�W�c6R�z
N/f0ؚ
00��b�S_X[>e݈n



dk�SGR-��[�S�N���`=z8hX[�S�b�S_X[>e݈n
NKN�jHh�|q}ir�N�vO(u�Vf�0�[hQ'`=z8h�N�N�Sgݑ
\@b	g��BlKNX[�S^��W�v@b	gir�N"uu0



�Y�g�`-��[dk�SGR-��[��kvu	g3^6bX[�S�b�S_X[>e݈n
N�v�jHh�|q}ir�NBf�1\g"uu=z8h�N�N0b�R=z8hg��b�R�vVf��1YWe=z8hg��1YWe�vVf�0

�Y�g�`*g-��[dk�SGR-��[�vu	g3^6bX[�S�b�S_X[>e݈n
N�v�jHh�|q}ir�NBf�1\
Ng"uu=z8h�N�N0�Ɩ-NX[�S�SGR�WL�



dk�SGR-��[�S�N���`=z8hNR�`�l�vX[�S��Bl: �^p�KN�SGR�c�b�bU}�v
kP���ir�N
N�vMR�vƖ-NX[�S�SGR
NT0



�Y�g�`-��[dk�SGR-��[��kvuO(u�X[�Sir�NBf��ir�N
N�vMR�vƖ-NX[�S�SGR�c��v
kP���^p�KN�SGR�c��v
kP�
NTBf�1\g"uu=z8h�N�N0"uu�v=z8h�N�N\�NNR�e_"uu:

1) b�R=z8h (-��[Bf) g��NR�`�l�vX[�SVf�: vu�vMR�vƖ-NX[�S�SGR�c�X[�S
k���^p�KN�SGR�bU}X[�S
kBf0

2) 1YWe=z8h (-��[Bf) g��NR�`�l�vX[�SVf�:

   a) �vMR�vƖ-NX[�S�SGR*g�c�X[�S
k���^p�KN�SGR�c�X[�S
kBf0

   b) �g;NԚ��BlAQ1��vg'YX[�S
kP����vMR�vƖ-NX[�S�SGR�c��vX[�S
kP���^p�KN�SGR�c��vX[�S
kP�
NTBf0



xeϑ: vu�^p�KN�SGR��vMR�vƖ-NX[�S�SGRfo�
NTBf�(W�jHh:O
ghV
N�S��/fؚ�v0



�-�<P: 
N2�L�=z8h��v�
g�RX[�S



�P�SGR-��[�S���`=z8hX[�S Active Directory �}�W
g�R (AD DS) ir�NBf"uu�v�N�N0



�Sg��wQ	g�v&{�|q}X[�S�c6Rn�U (SACL) �v AD DS ir�N0



�PP[^�%R-N�v�N�N�
�Hr Windows -N�v�v�
g�RX[�S�N�N^�<O0



xeϑ: (W�}�W�c6R�z
N/f0ؚ
0�(W(u6b�z��f�
NGR/f0!q
00



(u6b�zHr,g�v�-�<P: �l	g=z8h0



:O
ghVHr,g�v�-�<P: b�R0�Active Directory �}�W
g�Rir�N���f



dk�SGR-��[�S���`=z8h�V Active Directory �}�W
g�R (AD DS) -Nir�N���f�"uu�v�N�N0�^�z0*Rd�0�O9e0�y�Rb�S�m*Rd�ir�NBf�g���N�N0



�Y�g�S�����(W�PP[^�%R-N�v�N�Ngc�Qir�NgQ�[�v�e
�<P0



�S	g(W�}�W�c6R�z
NMbg���PP[^�%R-N�v�N�N��N�Sg�� AD DS -NwQ	g�v&{�|q}X[�S�c6Rn�U (SACL) �vir�N0



�la: �V�pP}�i�c�-N�vir�N^�%R-��[�@b�N�Rir�N�SgQ�[�v�R\O
Ng"uu=z8h�N�N0



�-��[dk�SGR-��[�GRg(WVf����f AD DS -N�vir�NBf"uu=z8h�N�N0b�R=z8hg��b�RVf��FO
Ng��
Nb�R�vVf�0

�*g-��[dk�SGR-��[�GR
Ng(WVf����f AD DS -N�vir�NBf"uu=z8h�N�N0



xeϑ: �S	g(W�}�W�c6R�z
N/f0ؚ
00



�-�<P: �l	g=z8h0��v�
g�R��[



�P�SGR-��[�S���`=z8hiQ� Active Directory �}�W
g�R (AD DS) �}�W�c6R�zKN���v��[0



�Y�g�`-��[�P�SGR-��[�GRg(W AD DS ��[g��"uu=z8h�N�N0b�R=z8hg��b�R��[��1YWe=z8hGRg��1YWe��[0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W AD DS ��[g��"uu=z8h�N�N0



�la: �PP[^�%R-N�v�N�N�Sg��(W�}�W�c6R�z
N0



xeϑ: (W�}�W�c6R�z
N/f0-N
0�(W(u6b�z��f�
NGR/f0!q
00



�-�<P: �l	g=z8h0bs�0}�v�
g�R��[



�P�SGR-��[�S���`=z8h�V�}�W�c6R�zKN���vs�0} Active Directory �}�W
g�R (AD DS) ��[�"uu�v�N�N0



xeϑ: ؚ0



�-�<P: �l	g=z8h0PA���I�W�I�



�P�SGR-��[�S���`=z8h�VO(u�3^6b{veQ��I��vW�I�,nf��"uu�v�N�N0



�S	g(W�c
k�S�NO(u���N��I��v��f�
N�Mbg|vu�PP[^�%R-N�v�N�N0�Y�g/f�}�W3^6b�GR�}�W�c6R�zwQ	g�c
k0�Y�g/f,g_j3^6b�GR,g_j��f�wQ	g�c
k0



xeϑ: (W�}�W�c6R�z
N/f0ؚ
00



(u6b�zHr,g�v�-�<P: �l	g=z8h0



:O
ghVHr,g�v�-�<P: b�R0Kerberos 
g�RhyI��d\O



�P�SGR-��[�S���`=z8h�Vݑ
\O(u�3^6b�c�N Kerberos W�I�hyI��c
khyI� (TGT) ��Bl�"uu�v�N�N0



�Y�g�`-��[�P�SGR-��[�GRg(Wݑ
\O(u�3^6b��Bl Kerberos W�I� TGT KN�_"uu=z8h�N�N0b�R=z8hg��b�R��Bl��1YWe=z8hGRg��1YWe��Bl0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(Wݑ
\O(u�3^6b��Bl Kerberos W�I� TGT KN�_"uu=z8h�N�N0



xeϑ: NO0



(u6b�zHr,g�v�-�<P: �l	g=z8h0



:O
ghVHr,g�v�-�<P: b�R0kvQ�N3^6b{veQ�N�N



�P�SGR-��[�S���`=z8h�V�V�aݑ
\O(u�3^6b{veQ�c�N�v��I���Bl�"uu�v�N�N����N��Bl
N/f��I�W�I�b Kerberos hyI�0



�vMR�dkP[^�%R-N�l	g�NUO�N�N0



�-�<P: �l	g=z8h0�Kerberos W�I�
g�R



�P�SGR-��[�S���`=z8h�V Kerberos W�I�hyI��c
khyI� (TGT) ��Bl�"uu�v�N�N0



�Y�g�`-��[�P�SGR-��[�GRg(W Kerberos W�I� TGT ��BlKN�_"uu=z8h�N�N0b�R=z8hg��b�R��Bl��1YWe=z8hGRg��1YWe��Bl0

�Y�g�`*g-��[�P�SGR-��[�GR
Ng(W Kerberos W�I� TGT ��BlKN�_"uu=z8h�N�N0



xeϑ: (W Kerberos ёp�|vHO-N�_:O
ghV
N/f0ؚ
00



(u6b�zHr,g�v�-�<P: �l	g=z8h0



:O
ghVHr,g�v�-�<P: b�R0�4VS_VERSION_INFO��
aJ
aJ?StringFileInfo�040404B0LCompanyNameMicrosoft CorporationNFileDescription=z8h�SGR MMC L]eQ_�{t�UCQ
�o`n'FileVersion10.0.19041.5915 (WinBuild.160101.0800)DInternalNameAuditPolSnapInMsg�.LegalCopyright� Microsoft Corporation. All rights reserved.POriginalFilenameAuditPolMsg.DLL.MUIj%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.19041.5915DVarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGX