HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Windows/System32/zh-TW/lsasrv.dll.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PEL�!�

�y.@ ��8.rdata�@@.rsrc� �@@���
T88���$��8.rdata8x.rdata$zzzdbg  .rsrc$01 $x�.rsrc$02 n4T��z�o�梀�4��rHmb#vg��Ϭ�����8��P�h�������0�pH��
`��
x��
���
���
���
���
���
��
 ��
8��
P��
h��
����������(8HXhx������ $��;���;��H<T��=���@j��B
�E���G��J���M��hP��,R.�\T�|W��pZf��[<I����MOFDATALSAMOFRESOURCEMUIFOMB�� DS}�T(_�	B�����@1!�B� 䂉	!���-���Lp���!��H*BXǓd �S�	�&��e�,���&�� "ĉ%��"D)A�0v�(����A�c����{ T����MN��xTa�O`��ɃG�/A�: S�Ap!�	�Tʇ�q	��҉*��%ES���"�!��B�(�
)�DL`9#�������
�Clu6�̡� � R����t�;��	,L�ـ[R`P#�a�L�a��q7�S�\��iT��>pZ����H �ꈃ�P������x���6�\x��
Ƈ�!J����p.ޅ���qX��-V�s{R���;��C�G�9,���>]�}R��L�A��o���a>\���)�@������T��9/���(��L����5�\��&��#É��#�	�4-���Ԡ@�`��x��������wX4�)
��I	01<�I�
8����ģ����G��S8�H��Cp8���@/�؏���yp S;�s
wl�{\�ÁwD|������������:]�;���Q�gX��G����=sX��d���	����	�s8�s9������`�o��c�
93���&@�����O���1��`&�����?7������t�����
88.���q'�B�=��:>�����OG���	�xxz&�`~�ŝ!���	��?<��?9���O�?9�P`��C�A��x��h���h~t܉9?����88,��X�1�z;�ͳ�g�5� �8֩�=�Pqc��� ���p������I�p€�8p^�z���pv\��OK�A������'pSq�'�C~��)	.?<�WĘ��#(�����	pr���&#��	�w���Hp�`�����O�F�C��P1�M��#��
�M��T�G&�j���g|N���L�v8�����G&��'~c�������O�#���f>����G�,�D�\�`PG&�tU�	��dܑ	�����3/���^��q����N�;�zjr��Q�a�N�a8�^��?/�A���8c�c��D�N4��	P(��@���,ΰp�����=�X����~"�������T���1f�:`�?F��#����O>��#�O�	4���NP��1��8a�zB�=@
��w^���?/�??���H\ON>��	�8��q�œ"���#-p8����GZ�pXÑ0w�Ǒp��?��8�����Q����,��GZ0�(�Cn�!b���㑀��ۈ�q�x�?DN��P�C`��Cp���/'0L����cI0�Cp���8�C�O��-X�P�BȨ�h�w��`���~����P�/I�J��3}�0��?=������P�+A�z�ĝ�z~,���	\����ab<>���ӗ�:��:�""�O�p@�O�����	��Y��	{�\
����;>8/�?.������
���O�	��	��a�a��0gr���OP�s��r����Cps�B�?D�(��p9G���0q�J0�3�2xı����((wj�bO
@�4�������b=���g�a�=?<�����o.�`��`�������-�������qp(�BϤ��:>'��'��w|�;�
�l=`O��#�*����#�	<G(�屒��|��G(���s%���i�w(�؏w`�)<��"�����(@��3�E���3��?2v����`PG)�t�z��9w����7:"�o��e`A�͘�>D�4�X�d��	�1��0�s�B�?L��a
x�;.��;�N���C?���:���R>���������N
�:�
�����*x菺�r�1�����Q\C�Q�?��O`9M&��(8���Qpf�Y
ppd.����<JK�P:)�Q��<J�!�� <��G)�c�pܤ�`��?��Sx�R�`�?2����K=G�����=ʗ�
B�H�B=?�=E
�_�>ME	���
�Z��P��%H�G)�Ÿ��pp0N#H���06��?K>Ŝ�P��R�Fy�z���������sNt���Ot�4�w����O
��`��O����e�g�c
�Q��P�R��#�����U�(�
F4L�H!⇎��0���t��a���']����<N�8��N�9����']�tf�I�vd_�#xP�Q
X��^�(p�Ǩ�\~����s�QN"ڱ�ǎQQ�"D�2���#���x̸�,���]�I��*LLߦ*�Up�#�!�38%(�3�G���+��?���� 0�a�`y�t��=rx���	�0����˒�Z��=f��8<�,��������'������W><1�3����
�l�$8����?&�wv1�!M`���4���<�#�����O��!x���ѕ'��,�����!��9%_;�N%�k;k�����c�c���>�e%f�c���a��3�#f@|&B)�����<qG�Χvda �>�``�LJ�@?v���}��qӐ���E�!��{����$�ÁD��g����F|��t8q�����Y��9��D�O.�/��a��I��H�9q�`H9�ѓ8[�5��xAN{@��0�
Nг
�h0�a��;.���l��/	o��k�	��q�;$����'������?$A�:f�!l�v�9�v�7����wN4���	�Oc>'x�	`���c�5��F9�5,�tq���R�D{g�x�8#Pp���oP���x�:|�cP�SX��'�;B�	8?���5��T�;���\����y�w��n��+��"�=������-��!�-�5.8� �907N��8�;Z�s�=Z���6ď	���gBQa��ò�-G�f,���SGD~X���̰'#��'L�����a�$�@��c'`e��S5�N���P�OP��'���|b'Q�ǁxWx4ńA
�����۾q�����=�����=+�ßP�R~T����uR�Q�I	�2J�iG�C���
��)?.��\<H:�����8-�#*p�/P����]� �1F
���A4�#*`at|jpF�#*������a�Q�uX�}D,�2�Q�ˉ�������:1�?���	zZ��j�A
̧N܁�p֮�"��~Txe�ܤ���(��x=��������.A'CP����rN�q������	�yN�w&|�ω��&���OD���L�7.܉��!8���;.~!����M��܉x�����̅���?&��<�b ��C,��F'Z��]����qT���\x9l�s����wT��Q��O`��?-�{H��8��Z@>0ʤ�w`�9x������BQaP#���h��Dh����j��t���;8Xcc�`��?+$���I�5~X�	;�����,����
w^�)�a
\�a��o�N�h�;1��������a�<��`<0>0�f2���{V0?�~Ƈ������R�+����@�\�0������\O�;�Ԁ�~j4�Z�ujǹ	8��
��?�9�
���#�Q6��#Vvl4��������M��FԩwZ���uZ�g����?��s8�E�P����#��`�1�#X��G��y�G�PP��<`��
�'�)��@��������7�v~P𩝟gŽ� >.���82������p&�@�VF����'�y�y�>���sJ\!��*�
;.x||z���,���%��y�|\����	\��W&���3p?h�?2�O>2�C����C�k?3��f|I83Ѐ
}f�0���@vdL�:8�p�|z��83��p�I:1�����yb���'�rt����G�;=���apA���wr�I<9P�'��??N����A(,jl��w��6�-�f���*n��X@����vd�x=;�c���Xp��O�X<f�?A��>A�#�����G��wbρ�G;0�`<0�b�7�H���������?q&����
=*���;-�A58�����`b��8��qh@?4����p��
�nL���>7��F���)���3ѡ�w�7g8`���G�l� ��3pur����=n��'�=9^EP~d�<2Ѓ&��#؏���<����tn@�_pG���耗x���\�X���8
86Ѐ�|��0��@3�`q���0���X�s`@�p���<�`9AV��;k�g��C*����������������Ÿh8ŅA
�����D��P
S�h4�0���/7>;F������rh�g�p��?9��8.N�3`���#N
�����?5�s�N
`�6�C`��£��P0�G�?M�a��n��c�0�*~tn��t�O���M�׳#?+��ȏ��\�"��<�;.���x9ȃ�`�����s������p ���c�N��Sp~d�� 56�p���?F�<4��+���s�UƉ��|^���?,��8���cxF�E�P������GWp��rt�'��@�BHjh>+1��d�7�õ��H"�)���-;���
���	=:P�GP��0`�	<Q���!
/��1�  �0(G8?�	�{�{��\cF;;�pA��L���>9u�]�1� ����	wk��%� 
 ��:xt5<�гXƀ�9`F�\ܳ<�f�
��u���Ax=�\c�ɂ&�"���Hc�GrO8�s��R�N,��A7>��
���A�/ƹ(/�^'����0��ɀ�B�>5�jP�F���Tj��a�z���~Cđ�@��U@X�. ,D&�
S���"aR�0a�@��L ,|'�m�"��5Z�l�"V��@X�r Lx;&�ޠh?= ���E�B3��`!AX�� ,RL���JL��Fa�Ѱ�i�h\��
M<D�fa�����FS�0)��N{�0!�hs0Z}��;�T��j��A��ӏ@��ѡ ,��g��t��aa}���F@X\' ,������a�S����P��PAD���H�_����;k�"��!�Q��T��V����MOFDATAMUIzh-TWSIDs Remote Request BaseSIDs Remote Request BaseLSA LookupsLSA Lookups+LSA �g��He���xehVƖTS+T�xehV��S,nϑ LSA 3^6b
T1z�T SID �g~b�v>~He0Names Inbound Requests/secNames Inbound Requests/sec%dk�xehVo�:y�_,g_j�S�}�(u6b�z0R,g0W LSA �v�PeQ3^6b
T1z�g~b��Bl��s0Names Outbound Requests/secNames Outbound Requests/sec"dk�xehVo�:y�_,g_j LSA 0R`��z:O
ghV�v8��Q3^6b
T1z�g~b��Bl��s0#Isolated Names Inbound Requests/sec#Isolated Names Inbound Requests/secdk�xehVgo�:y�PeQ LSA �v���
T1z�g~b��Bl��s0 $Isolated Names Outbound Requests/sec$Isolated Names Outbound Requests/secdk�xehVgo�:y�}�W�c6R�z
N`��zܕ�����
T1z�g~b��Bl��s0Names Completion TimeNames Completion Time dk�xehVo�:y LsaLookupNames |T�S�vs^GW�[bBf��0PANames Completion BaseNames Completion Base!(u�O��{ LsaLookupNames |T�Ss^GW�[bBf���v�Wy<P0Names Remote Request TimeNames Remote Request Time!dk�xehVo�:y LSA I{�_`��z:O
ghV
g�R
T1z�g����Bl@b�����vBf��0Names Remote Request BaseNames Remote Request Base(u�O��{`��z�g~b��Bls^GW�[bBf���v�Wy<P0Names Errors/secNames Errors/sec dk�xehVo�:y�k�y LsaLookupNames |T�S/����v��s0PANames Unresolved/secNames Unresolved/secdk�xehVgo�:y�k�y!q�l㉐g
T1z�v��s0Names Cache % HitNames Cache % Hitdk�xehVgo�:y�_ SID/
T1z�}X[㉐g�v % 
T1z��Bl0Names Cache % Hit BaseNames Cache % Hit Base
T1z�_�S�_�S���S�xehV�v
N�S���v�W�^�xehV0Names Cache % FullNames Cache % Fulldk�xehVo�:y % �v SID/
T1z�_�S�]�n0PANames Cache % Full BaseNames Cache % Full Base
T1z�_�S��aԚ % �[te�xehV�v�Wy�xehV0 Name/SID Cache Size(Max Entries) Name/SID Cache Size(Max Entries)dk�xehVo�:y�vMR LSA 
T1z/SID �g���_�S�v'Y\
NP�0Names Xforest Requests/secNames Xforest Requests/secdk�xehVgo�:y�k�y(W�O�N9j-N\~b LSA 
T1z�v��s0Names Xforest TimeNames Xforest Time*dk�xehVo�:y LSA I{�_`��z:O
ghV
g�R Xforest 
T1z�gb���Bl@b�����vBf��0PANames Xforest BaseNames Xforest Base&(u�O��{�[b Xforest 
T1z�g~b��BlKNs^GWI{PBf���v�Wy<P��υ�xehV0!Names Trusted Domain Requests/sec!Names Trusted Domain Requests/secdk�xehVgo�:y�k�y(W�S�O�N�}�W-N�v LSA 
T1z�g~b��s0!Names Trusted Domain Request Time!Names Trusted Domain Request Time'dk�xehVo�:y LSA I{�_�S�O�N�}�W-N`��z:O
ghV
g�R
T1z�gb���Bl@b�����vBf��0!Names Trusted Domain Request Base!Names Trusted Domain Request Base(u�O��{�S�O�N�}�W�g����Bl�[bKNs^GWI{PBf���v��υ�W�^�xehV0PA!Names Primary Domain Requests/sec!Names Primary Domain Requests/secdk�xehVo�:y;N�W-N�k�y�v`��z LSA 
T1z�gb���s0Names Primary Domain TimeNames Primary Domain Time)dk�xehVgo�:y LSA (W;N���}�W�v`��z:O
ghV
NI{P
g�R
T1z�g~b��Bl@b�����vBf��0Names Primary Domain BaseNames Primary Domain Base#(u�O��{;N���}�W-N`��z
T1z�g~b��Bl�[b�vs^GWI{�_Bf���v��υ�W�^�xehV0SIDs Inbound Requests/secSIDs Inbound Requests/sec&dk�xehVo�:y�_,g_j�S�}�(u6b�z0R,g0W LSA �v�PeQ SID �g~b��Bl��s0SIDs Outbound Requests/secSIDs Outbound Requests/sec#dk�xehVo�:y�_,g_j LSA 0R`��z:O
ghV�v8��Q SID �g~b��Bl��s0SIDs Completion TimeSIDs Completion Timedk�xehVo�:y LsaLookupSids |T�S�vs^GW�[bBf��0!SIDs Average Completion Time Base!SIDs Average Completion Time Base&(u�O��{ LsaLookupSids |T�Ss^GW�[bBf��KN
N�S���v�Wy�xehV0SIDs Remote Request TimeSIDs Remote Request Time$dk�xehVo�:y LSA I{�_`��z:O
ghV
g�R SID �gb���Bl@b�����vBf��0#(u�N��{�[b`��z SID �gb���BlKNs^GWI{�_Bf���v
N�S���v�W�^�xehV0SIDs Errors/secSIDs Errors/secdk�xehVo�:y�k�y LsaLookupSid |T�S/����v��s0SIDs Unresolved/secSIDs Unresolved/secdk�xehVgo�:y�k�y!q�l㉐g SID �v��s0SIDs Cache % HitSIDs Cache % Hitdk�xehVo�:y�_�_�S㉐g�v SID ��Bl�p %0SIDs Cache % Hit BaseSIDs Cache % Hit BaseSID �_�S���S�xehV�v
N�S���v�W�^�xehV0SIDs Cache % FullSIDs Cache % Fulldk�xehVo�:y % �v SID/
T1z�_�S�]�n0SIDs Cache % Full BaseSIDs Cache % Full BaseSID �_�S % �]�n�xehV�v
N�S���v�W�^�xehV0SIDs Xforest Requests/secSIDs Xforest Requests/secdk�xehVo�:y�O�N9j�|-N�k�y�v SID �g����s0PASIDs Xforest Request TimeSIDs Xforest Request Time,dk�xehVo�:y LSA I{�_`��z:O
ghV
g�R Xforest SID �gb���Bl@b�����vBf��0SIDs Xforest Request BaseSIDs Xforest Request Base)(u�N��{�[b Xforest SID �gb���BlKNs^GWI{�_Bf���v
N�S���v�W�^�xehV0 SIDs Trusted Domain Requests/sec SIDs Trusted Domain Requests/secdk�xehVo�:y�S�O�N�}�W�v LSA SID �k�y�gb���s0 SIDs Trusted Domain Request Time SIDs Trusted Domain Request Time*dk�xehVo�:y LSA I{�_�S�O�N�}�W-N`��z:O
ghV
g�R SID �gb���Bl@b�����vBf��0PASIDs Trusted Domain BaseSIDs Trusted Domain Base((u�N��{(W�S�O�N�}�W-N�[b SID �gb���BlKNs^GWI{�_Bf���v
N�S���v�W�^�xehV0 SIDs Primary Domain Requests/sec SIDs Primary Domain Requests/secdk�xehVo�:y;N�W-N�k�y�v`��z LSA SID �gb���s0 SIDs Primary Domain Request Time SIDs Primary Domain Request Time#dk�xehVo�:y`��z:O
ghV(W;N�W-N
g�R SID �gb���Bl@b�����vs^GWBf��0SIDs Primary Domain BaseSIDs Primary Domain Base#(u�e��{;N�W-N`��z SID �gb���Bls^GW�[bBf���v
N�S���v�W�^�xehV0 Name/SID cache entries added/sec Name/SID cache entries added/sec�e�X��_�S�v SID/
T1z��vxe!Name/SID cache entries purged/sec!Name/SID cache entries purged/sec�_�_�S-Nnd��v SID/
T1z��vxePA dd���L,/�@B�	���
����T��`
	,�' �* 9 ($; Q  '@@*��D*	�	�\,���,��-���-@�@�,<��4=��P>���@ �#��A0�0��B00$CPPDCpp�C�������D�����D���D��`E&�&��G��[hQ'`WY�N*g�_�ST:O
ghVW�I�@b��v��I�0%n%nWY�N
T1z:%t%1%nO(u�
T1z:%t%2%n�}�W
T1z:%t%3%n:O
ghV
T1z:%t%4%n�S�Ow��vO(u�:%t%5%n/����x:%t%6%n

4(W{v�Q�[bKN�_��[hQ'`WY�N6e0R�}�{veQ��Bl0%n%nO(u�
T1z:%t%1%n�}�W
T1z:%t%2%n{veQX�%R�x :%t%3%n{v�QBf��:%t%4%nPID:%t%5%nz_:%t%6%n;NԚ
T1z:%t%7%n:O
ghV
T1z:%t%8%nWY�N
T1z:%t%9%n|T�S^��W:%t%10%n/����x:%t%11%n

�D}�]c>mf}�e{veQ0%n%n�e{veQ:%n%t�[hQ'`X�%R�x:%t%t%1%n%t3^6b
T1z:%t%t%2%n%t3^6b�}�W:%t%t%3%n%t{veQX�%R�x:%t%t%4%n%t{veQ GUID:%t%t%5%n%n�N�N�^R:%t%t%6 / %7%n%n�D}b�Tnj<h:%t%t%8

��[JT�]c>mf}�e{veQ0%n%n�e{veQ:%n%t�[hQ'`X�%R�x:%t%t%1%n%t3^6b
T1z:%t%t%2%n%t3^6b�}�W:%t%t%3%n%t{veQX�%R�x:%t%t%4%n%t{veQ GUID:%t%t%5%n%n%n%t{veQ^��W:%t%t%6%n%n%n%n�N�N�^R:%t%t%7 / %8%n%nO(u��[JT:%t%t%9%n%n݈n�[JT:%t%t%10%n%nvu�^�z�e{veQ�]\O���kN�r�{veQ�]\O���kܕo��vO(u�
kVgS+TO(u��T/b݈n�[JTBf�g"uudk�N�N0[�e{veQ] kMOc�Q�]{veQ�v3^6b0�!q�l(W�UN�N�N-NS+TO(u�
kVg-N�v@b	gO(u��݈n�[JT�\"uuYPdk^��N�N0[�N�N�^R] kMOc�Qݑ
\dk{veQ�]\O���k"uu�vvQ�N�N�Nxe�v0�kPO(u�b݈n�[JT��/f�NNR<h_HT�s:%n%n%tClaimID ClaimTypeID : Value1, Value2 &  %n%n8^���[JT^��W�p: 0 (!qHe�v^��W)01 (64 MOCQtexe02 (
N6^ck��_��v 64 MOCQtexe)03 (W[2N)04 (FQBN)05 (SID)06 (^�g<P) � 16 (Blob)0傣[JT<P��N�AQ1��vw��^
NP��GRW[2NP}>\�p ...

��]6e0RO(u� %1 {v�Q��w0%n%nLogonId:%t%2%nAuthorityName:%t%3%nAccountName:%t%4%n>�Bf: %t%5 �y%n

��[hQ'`WY�N*g�_�SO(u��v{veQ��I�0%n%nWY�N
T1z:%t%1%nO(u�
T1z:%t%2%n�}�W
T1z:%t%3%n�S�Ow��vO(u�:%t%4%n

|��R͑�e_U�R{veQ�]�)R-��[NR3^6b�v��R{veQ��I�:%n%n%t3^6b
T1z:%t%t%1%n%t3^6b�}�W:%t%t%2

D��R͑�e_U�R{veQ!q�l-��[��R{veQ��I��/���:%n%n%1

D��R͑�e_U�R{veQ�]�_ LSA ��aԚ-N�)R*Rd���R{veQ��I�

@�[hQ'`\݈ %1 "uu�OY�r�l0�OY�r�lnj
��pnj�e0

@!q�lGS}hQ�W�y�[ %10ˊ�j�g�|q}gQ�v@b	g
g�R�rKa0

�gP�_ %1 #��}�v?S
T�]\O���k�]Vf���_U��S��f�
N�v LSA �SGR�c6R�N�x0�PVf��V�p STATUS_ACCESS_DENIED ���b��N�MQ)mo	g�[hQ'`g�na�vnj
�f}?S
T�v|T�S�0%n �_��Ock2�L��PVf��v�a(uz_0ˊ#�a}�a(uz_�^FU0�`�S�N\\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\TurnOffAnonymousBlock DWORD <P-��[�p 1�\P(u�P�[hQ'`�e_��NZP�p�fBf�v�zl�e�l0%n �P
�o`N)YgY�Sg��N!k0

\(W{veQVf�N�z-N�O(u��vnj
��[hQgQ�[/}Mz*YY�[hQ'`X�%R�x0�/fNP�vvu
N\8^�v�r�l0ˊ�_N�NhQ�Wb,g_j�D}-N�yd�O(u���On\�[hQ'`X�%R�x�vxe�v��N�OuOeQnj
��[hQgQ�[-N0%nO(u��v SID /f %1%n�Y�g�/f Administrator 3^6b�(W�[hQ!j_N{veQ\O Administrator �S�N�}1u��RP�6R�D}b�Tnj<h�O{veQ0

�|T�S InitializeSecurityContext API �OR�YS8��Q NTLM nj
��[hQgQ�[Bf�S+Tc�[U�tz�^X�%R�x %1 �vz_ %2 �c�O�N NULL bzz�vj
T1zf} pszTargetName �Sxe0����v�NW�I�Bf��g"uu�[hQ'`����0%n %n ��TS�R2�bk�`a;e�d�ˊ���`�vz_�x�f�[hQ0���#jZP�ˊ���fz_����[(W pszTargetName �SxekMOc�[�vj
T1z�6q�_͑�e�}o�z_�x0

�S+Tc�[U�tz�^X�%R�x %1 �vz_ %2�!q�lO(u�vj
T1z %3 �O2�L�,g_jW�I�0O(u�v�vj
T1z!qHe0�vj
T1z�ar��SgqvQ-NNP,g_j��f�
T1z��O�Y�DNS ;N_j
T1z0%n %n ˊVf�vQ�N�vj
T1z0

XMicrosoft Windows Server uP,n0R(u6b�z�dk:O
ghVKN���vMRck(WO(u NTLM W�I�0(u6b�z,{N!kO(u NTLM T:O
ghVW�I�Bf�:O
ghV�k!k��_jBf��g|vuN!kdk�N�N0%n %nNTLM /f�1_�vW�I�_j6R0ˊ�j�g:%n %n      �T�N�a(uz_ck(WO(u NTLM W�I�?%n      /f&T	g-��[OUL��\�!q�lO(u�7_�vW�I� (�O�Y Kerberos W�I�)?%n      �Y�g�_�/e�c NTLM�/f&T�]-��[0�dEQ�Ow�
0?%n %n�`�S�N(W http://go.microsoft.com/fwlink/?LinkId=225699 ~b0R�YUO�[b��N�j�g�vs�0}nj
�0

XMicrosoft Windows Server uP,n0R(u6b�z�dk:O
ghVKN���vMRck(WO(u NTLM W�I�0(u6b�z,{N!kO(u NTLM T:O
ghVW�I�Bf�:O
ghV�k!k��_jBf��g|vuN!kdk�N�N0%n %nNTLM /f�1_�vW�I�_j6R0ˊ�j�g:%n %n      �T�N�a(uz_ck(WO(u NTLM W�I�?%n      /f&T	g-��[OUL��\�!q�lO(u�7_�vW�I� (�O�Y Kerberos W�I�)?%n      �Y�g�_�/e�c NTLM�/f&T�]-��[0�dEQ�Ow�
0?%n %n�`�S�N(W http://go.microsoft.com/fwlink/?LinkId=225699 ~b0R�YUO�[b��N�j�g�vs�0}nj
�0

\\݈ %1 �vW�I���Blm�0R�bU}��V�p�vjnj
�!qHe0W�I���Bl
N&{T�vj
T1z %20

�%1 �v CredSSP W�I�!q�l�N�mN,��
�TS�[Hr,g0`��z;N_j�c�OHr,g %2��R�[�:y�O�_
NAQ1�dkHr,g0%n%n�Y�s�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?linkid=8666600

X(u6b�z�gb��N LSA \l\�v�y�[ir�N0�W�e�[hQ'`�V }��N�R�[<h_�P�Vdkir�N0

\�b�Sdk��f��v�eƖ-NX[�S�SGRBf|vu/���0%n%n!q�l�b�SNR DN �v�SGR:%n%1

�U�tdk��f��v�eƖ-NX[�S�SGRBf|vu/���01uNbYPƖ-NX[�S�SGR�Sgq�vNRƖ-NX[�S��GRW�I�1YWe:%n%n%t/���:%t%t%1%n%n%t
T1z:%t%t%2%n%t�c�:%t%3

tCredential Guard �]-��[�p�WL��FO&N*grs�_�c
k0Credential Guard *g_U�R0

�PDC �]�[b@b	g�O�N�v��R�O�N�c�c\Omi�N*g|vu�NUO/���0%n%n�Y�s�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?linkid=21620890

�PDC �]�[b@b	g�O�N�v��R�O�N�c�c\Omi�N�\|vuNP/���0%n%n�Y�s�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?linkid=21620890

�PDC �]ݑ
\�O�N'%1'�[b�|q}�{t�T��Bl�v�O�N�c�c�d\O�*g|vu�NUO/���0%n%n�Y�s�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?linkid=2162089.

�PDC ~b
N0Rc�[�v�O�N'%1'�O�c�c0�O�N
NX[(Wb
N/f8�eQ�O�NbٖT�O�N0%n%n�Y�s�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?linkid=2162089.

�PDC �]�[b�O�N'%1'�v�{t�T��Bl�O�N�c�c�d\O�FO|vu/���0%n%n�Y�s�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?linkid=2162089.

�PDC Vf��c�cwQ
T�O�NBf|vu/���0%n%n�O�N: %1%n%n/���: %2(%3)%n%n�Y�s�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?linkid=21620890

8MessageIdTypedef=DWORD

NULL SID

Everyone

LOCAL

$CREATOR OWNER

$CREATOR GROUP

,NT Pseudo Domain

$NT AUTHORITY

DIALUP

NETWORK

BATCH

 INTERACTIVE

SERVICE

BUILTIN

SYSTEM

(ANONYMOUS LOGON

4CREATOR OWNER SERVER

4CREATOR GROUP SERVER

DENTERPRISE DOMAIN CONTROLLERS

SELF

0Authenticated Users

 RESTRICTED

Internet$

4TERMINAL SERVER USER

PROXY

$LOCAL SERVICE

(NETWORK SERVICE

<REMOTE INTERACTIVE LOGON

USERS

0NTLM Authentication

4Digest Authentication

8SChannel Authentication

,This Organization

0Other Organization

IUSR

(Mandatory Label

<Untrusted Mandatory Level

0Low Mandatory Level

8Medium Mandatory Level

4High Mandatory Level

8System Mandatory Level

LProtected Process Mandatory Level

$OWNER RIGHTS

,WRITE RESTRICTED

dENTERPRISE READ-ONLY DOMAIN CONTROLLERS BETA

@Medium Plus Mandatory Level

$CONSOLE LOGON

DThis Organization Certificate

<ALL APPLICATION PACKAGES

DAPPLICATION PACKAGE AUTHORITY

�`�v�}���}�#��}

4�`�v�}���}�#��}�S�b�_�}���}PeQ�v#��}

$�`�v�[(u�}�b�]\O4X@b�}�

�`�vWGr�ZԚ�j

�`�v��
��ZԚ�j

�`�v�j�ZԚ�j

�`�v�e�N�^

$�`�v Windows ��I�

 ߎԚ�lxԚ�aI�bzfgaaS

�b�S_X[>e݈n

O(u�!j_E��Rz_

�[JT	gHe

�T��RX�%RX[(W

LMicrosoft Account Authentication

$W�I��c
k�UMO�[1z�vX�%R��R


g�R�[1z�vX�%R��R

,g_j3^6b

@,g_j3^6b� Administrators �D}�vb�T

�`�v}g

�`�v#�a}�N

(DefaultAccount

�|q}�S�c3^6b�D}

��z3^6bW�I�

ёp��O�N��RX�%R

 ёp�l\'`Y͑�� }W�I�

ёp�l\'`I�f

 �e�vlQ(uёp���RX�%R

$@b�N�SP�6R�v�a(uz_\S

4Window Manager Group

$Device Owners

(LsaSetupDomain

�d\��Bl���#��}0R�}�W %1 �v�}�W�c6R�z0LSA (W�}�W
N~b
N0R�}�W�c6R�z�@b�N!q�lU�t��Bl0ˊ�j�g�_�P�}�W�c6R�z0R�}�W %2 �v#��}�rKa�S�[hQ'`�S��[݈z_0

�d\��Bl���#��}0R�}�W�c6R�z %10,g_j LSA !q�l#�a}`��z�}�W�c6R�z�v LSA0ˊ�j�g�_�P�}�W�c6R�z0R�}�W�c6R�z %2 �v#��}�rKa�S�[hQ'`�S�-��[0

�d\��Bl���`��z�}�W�c6R�z %1 
N�vd\
g�R0`��z�}�W�c6R�z!q�lU�t��Bl�@b�N,g_j LSA !q�lU�t�S�Yd\��Bl0ˊ�j�g�_�P�}�W�c6R�z0R�}�W�c6R�z %2 �v#��}�rKa�S�[hQ'`�S�-��[0

dLSA !q�l�N� TCP/IP �Nb�{v��[�v RPC �Nb�0ˊ�x�[�
�TS�[/f&Tck�x�[݈0

@(W_U�Rg���LSA !q�l��w UBPM��rKa�p %10

4Schannel �[hQ'`\݈�]�}b�R	�eQ0

���_U�|q} %1 �[�x�}o�!jD}Bf|vu�V͑/���0��� SSL b TLS �[�x�}o��
�TS�[�v�d\O\!q�lck8^K�\O0/����x�p %20

(ck(W�^�z TLS %1 ��I�0

�TLS %1 ��I��v�y�[ёp�	g�NNgQ�[:%n%n  CSP 
T1z: %2%n  CSP ^��W: %3%n  ёp�
T1z: %4%n  ёp�^��W: %5%n ёp��ej: %6%n%n D��R�vnj�e-NS+T�aI�0

�TLS %1 ��I��v�aI�&N*gD��R�y�[ёp�nj
�gQ�[0vu�`O(u/����v�e_�P�N�aI���_�Q���SBf��8^g|vudkOUL�0dk
�o`�S��_Nh�:y�aI�;��Q1YWe0

|Vf�X[�S TLS %1 ��I��y�[ёp�Bf|vu�V͑/���0�_�[�x�}o�!jD}�P�V�v/����x�p %20 gQ�/����rKa�p %30

H�^�z TLS %1 ��I�Bf|vu�V͑/���0gQ�/����rKa�p %20

�!q�l�b�S TLS %1 c�[�v�aI�ȓP}:%n%n   1YWe�rKa: %2%n   �ej: %3%n%n D��R�vnj�e-NS+T�aI�0

�w��Y TLS #��}Bf|v�s
N�S/e�c�v�R�[WY�N0�h�:y(u6b�z�a(uz_�T/b�[݈�v�[�x�}o�!jD}|vu-��[OUL�0TLS #��}��Bl1YWe0

|6e0R�O�`��z(u6b�z�a(uz_�v %1 #��}��Bl�FO:O
ghV
N/e�c(u6b�z�a(uz_/e�c�v�R�[WY�N0TLS #��}��Bl1YWe0

�`��z:O
ghV�]�}��Bl TLS (u6b�zW�I��FO/f~b
N0Ri�T�v(u6b�z�aI�0\Vf�?S
T#��}0��:O
ghV�v�SGR-��[��[�dk TLS #��}��Bl�S��b�Rb1YWe0

p�_`��z:O
ghV6e0R�v�aI�*g�}ck�xW�I�0/����x�p %10TLS #��}��Bl1YWe0D��R�vnj�e-NS+T:O
ghV�aI�0

d�_`��z(u6b�z�a(uz_6e0R�v�aI�*g�}ck�x�x��0/����x�p %10D��R�vnj�e-NS+T(u6b�z�aI�0

��_`��z(u6b�z�a(uz_6e0R�v�aI�
Ni�T�v�c
\�a0R(u6b�z�|q}3^6b��S���V�p|vL��aI��v�c
k�UMO
N�[hQ�S�O�N0/����x�p %10D��R�vnj�e-NS+T(u6b�z�aI�0

��_`��z(u6b�z�a(uz_6e0R�v�aI�*gck�x
\�a0R(u6b�z�|q}3^6b0/����x�p %10�
NN�[/f�V͑/�����V�p:O
ghV�a(uz_��/f�S���c�S�P�aI�0

(�]�)R�[b TLS %1 �N�c0�N�m�v�[�x�}o��Sxe�YN0%n%n   �
�TS�[Hr,g: %2%n   CipherSuite: %3%n   �N�c7_�^: %4 MOCQ%n   gQ�[�c6R�N�x: %5%n   �vj
T1z: %6%n   ,g_j�aI�;NԚ
T1z: %7%n   `��z�aI�;NԚ
T1z: %8

d�_`��z:O
ghV6e0R�v�aI��]0Rgb\*guHe0TLS #��}��Bl1YWe0D��R�vnj�e-NS+T:O
ghV�aI�0

��_`��z:O
ghV6e0R�v�aI�/f1u*g�S�O�N�v�aI��c
k�UMO@b=||v0�Vdk�!q�lW�I��aI�-NS+T�vnj�e0TLS #��}��Bl1YWe0D��R�vnj�e-NS+T:O
ghV�aI�0

��_`��z:O
ghV6e0R�v�aI��]���d��0�h�:y=||v�aI��v�aI��c
k�UMO�]�}\�[\O�^0TLS #��}��Bl1YWe0D��R�vnj�e-NS+T:O
ghV�aI�0

��_`��z:O
ghV6e0R�v�aI�&N*gS+T�g�v
T1z0�Vdk!q�l$R�ebP/f&T#��}0Rck�x�v:O
ghV0bP�g�v:O
ghV
T1z/f %10TLS #��}��Bl1YWe0D��R�vnj�e-NS+T:O
ghV�aI�0

@vu��Bl(u6b�zW�I�Bf���S:O
ghV�P��S�O�N�v�aI��c
k�UMOn�Uf}(u6b�z0(u6b�zO(u�Pn�U�Ox��d:O
ghV@b�O�N�v(u6b�z�aI�0�vMR���S:O
ghV�O�N1�Y�aI��c
k�UMO�@b�N �bn�U*Yw�0�Vdk��Pn�U�]��*b�e0��S��f��v�|q}�{t�T�ar��j�g�S�O�N�S�N2�L�(u6b�zW�I��v�aI��c
k�UMO�&N�yd����N&N^�wck����O�N�v�aI��c
k�UMO0

��P�|q}
NX[(Wi�T�v�-�:O
ghV��I�0�#jg2�bk�g)R(u�|q}�-���I��v:O
ghV�a(uz_�c�S SSL #��}0�v�:O
ghV1\/f�.z�a(uz_�v�{�O0�{t��]��I��v�a(uz_��O�Y Internet Information Server�GR
N�Sq_��0

T6e0R�O�`��z�zޞ�v�V͑f�:y0TLS �
�TS�[�[��v�V͑f�:y�N�x�p %10

\�]"uu�V͑f�:y�&N�P�f}`��z�zޞ0��S��g\�#��}B}bk0TLS �
�TS�[�[��v�V͑/����x�p %10%n%n   �vj
T1z: %3%n%n�`�S�N(W http://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-6 ~b0R TLS f�:y{v�

�TLS %1 c�Q�aI�ȓP}
N�[te:%n%n   1YWe�rKa: %2%n%n ��S��\��O�NW�I�1YWeb�N�'`OUL�0�Y�s�0}nj
��ˊ�S�� KB 954755%n D��R�vnj�e-NS+T�aI�0

!q�l�d�S OCSP �V�a0%n%n   1YWe�S�V�p�%1%n    OCSP Url �p�%2%n   HQMR�v OCSP �V�aS+T�NNRBf���%n      ThisUpdate�%3%n      NextUpdate�%4%n%nD��Rnj�e-NS+T�aI�0

`�[hQ'`�|q}uP,n�Q:O
ghV %1 �vW�I�/���0�O�W�I��
�TS�[ %2 �v1YWe�x�p %30

P�[hQ'`�|q}!q�l�^�z�:O
ghV %1 �v�[hQ#��}0�l	g�S(u�vW�I��
�TS�[0

l�[hQ'`�|q}!q�lW�I�:O
ghV %1��V�p:O
ghV�]�[bW�I��FO(u6b�zW�I��
�TS�[ %2 \*g�[bW�I�0

H�[hQ'`�|q}6e0RNP
NfW�I��
�TS�[�vW�I�Vf�0��Bl�]�}1YWe0

H�[hQ'`�|q}�]�}x��S %2 ZP�p:O
ghV %1 �vW�I��
�TS�[0

T�[hQ'`�|q}�]6e0RW�I�Vf��&N$R�[(u6b�z�U}Y�v�
�TS�[ %1 /f�S�c�S�v0

@�[hQ'`�|q}�]6e0RW�I��
�TS�[ %1 �v�v�cW�I���Bl0

@�[hQ'`�|q}6e0RNP!q�l㉼x�vW�I���Bl0��Bl�]�}1YWe0

L�[hQ'`�|q}�]6e0RW�I�Vf��&N$R�[�
�TS�[ %1 /flQ(u�
�TS�[0

t�[hQ'`�|q}(W#�a}	N�R SPN %n%n %1 %n%n BfuP,n0RM�}Vf��/����x�p %20W�I�m�0R�bU}0

l�[hQ'`�|q}#�a} 3 �R SPN %n%n %1 %n%n Bfck(W=z8hM�}Vf��/����x�p %20

`�]�}\P(u{veQ�_�S0�}�^r�b-N�eg����S��g|vu�fBf'`W�I�1YWe0ˊ#�a}�`�v�|q}�{t�T0

`{veQVf�1YWe �bO(u� %1 {veQ�_�S��v�v*Rd�0W�I�\݈/f %2�/���
�o`�p %30

\O(u� %1 �v{veQ�_�S��v/fg
��v��v�N�]�}�yd�0dk��v�vBf��3b�/f %20

(W�I� DTLS #��}��Bl1YWe0

D�]�bU} DTLS ����V�pr���
N(W�vMR�v�c6e���zgQ0

H�]�bU} DTLS ����V�pr���/fHQMR@b�c6e���v͑��0

0�]��Bl͑�e�P8� DTLS �N�c
�o`0

D(W %1 ~b
N0R(u�O�Ow� TLS �]\O���khyI��vёp�gQ�[0

���Y

\Pbk

͑'Y

/���

f�JT

nj
�

<Security Package Manager

Locator

0SPNEGO (Negotiator)

 Logon Cache

LSA Logon

0LSA SID-Name Lookup

Max

(u6b�z

:O
ghV

Omi��I�nj�e

,g_j��I�nj�e

4Microsoft-Windows-LSA

System

 Operational

 Diagnostic

LMicrosoft-Windows-Authentication

tMicrosoft-Windows-Authentication/ProtectedUser-Client

�Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController

�Microsoft-Windows-Authentication/ProtectedUserSuccesses-DomainController

�Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController

@LogonSession alive after interactive user logoff. Indicates a possible token leak in one of the services. %nLogon ID:%1%nAccount Name:%2%nDomain Name:%3%n

�4VS_VERSION_INFO��
�aJ
�aJ?�StringFileInfo�040404B0LCompanyNameMicrosoft Corporation@FileDescriptionLSA :O
ghV DLLn'FileVersion10.0.19041.6807 (WinBuild.160101.0800)6InternalNamelsasrv.dll�.LegalCopyright� Microsoft Corporation. All rights reserved.FOriginalFilenamelsasrv.dll.muij%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.19041.6807DVarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD