HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Windows/System32/zh-TW/wsecedit.dll.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PEL�!�

��@ ��8.rdata�@@.rsrc� �@@9�ŀ
T889�ŀ$��8.rdata8x.rdata$zzzdbg p,.rsrc$01pLh�.rsrc$02 �K���MG�bO��������]3��o?r9�ŀ��0�H�h�����Bj��k�����(��@��X��p���������������������0��H��`��x������������������� ��8��P��h����������������������(��@��X��p�����������������	��	��0	��H	��`	��x	���	���	���	��	��	�
� 
�8
�P
�h
��
��
�	�
�
�
���
����
�G�(�@�X�p�������	��
���
�0�H�`�x�����������
� 
�8
�P
�h
��
��
�#�
�,�
�-�
�/�
�0�1(�w@�xX�yp�z��{��|��}��~������0��H��`�x������������ �8�	P�*h�0��1��h��i��j��k��l�m(�n@�oX�pp�q��r������� 0@P`p�������� 0@P`p�������� 0@P`p�������� 0@P`p�������� 0@P`p�������� 0@P`p�������� 0@P`p�������� 0@P`p�������� 0@P`p�:��H;�� =\�|?��8A���C���E�H���Ip�$K���L6�(O���P ��Q��RT�HU�PWZ��Y���\���^0��`��c���fn�hT�li��(kT�|lh��m��tn��loL��p���r��$t��v���w��x���z��{Z�}^�l~���8�L�p�����\�d����ԇ*��,�,�����R�L���H���$��8���������,�4����(�(� �H�p���h� ���������Ħ���������������D�ȭZ�$�����t�0�����,�$�����p�$�������\�p�̹b�0�0�`�����������T���������������V�������.���$�������>�����d����D�L�`���J������l�h�|���p*�T�&�H9���R�mx'�|��7���4���&��'
)��P�)��zt1�(�����������(�r������������H�����8��>�T�p���L��������������$���L�4�T�����H�T�������*���T�d�h��d��MUI����*���tћPҌ�0��`u�_;��`iW����MUIzh-TW���Ȁ���{,g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P(�����-��[
kP��c�n�U$P#�
0����[��{,ggQ�v��N�SGR-��[(&D):	�P2�g���P�d�����e�XO(u�b�D}(&U)...Po�2�����yd�(&R)@ ��)YSysLink@�������PA���Ȁ��-��[ <group> �vb�Tnj<h	�Microsoft JhengHei UIP�	��������P�D}�vb�T:	�P�F"����@�F����PZA$����e�Xb�T(&D)...PSZA%����yd�(&R)Po�	�����P�D}��l\�e:	�Pz�F ����@z�F����P�A�����e�X�D}(&G)...PS�A�����yd�(&E)@0���@�������Ȁ���]R�g�v�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����͑�e}T
T�|q}�{t�T3^6b$PF�
0����[�nj�e�^-N�v�P�SGR(&D):��PR�����Px�r���-��[�Sgq_��nj�e�^�
Ng���f�vMR�v��f�-��[0P#�	}�����f�-��[:��P.��������Ȁ���]R�g�v�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'������}/�xeW[l\'`$Pa�0����[�nj�e�^-N�v�P�SGR(&D):Pr�	L���(WVf�1YWe(&L):� �P}-����4P8}
�msctls_updown32Spin1PK��	����!k�_���[3^6bP��r���-��[�Sgq_��nj�e�^�
Ng���f�vMR�v��f�-��[0P-�	}�����f�-��[P=�	K�����N��PBf��KN�_���[3^6b:��PG�����P������Static���Ȁ���]R�g�v�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'������[hQ�|q}ir�N PK�
0����[�nj�e�^-N�v�P�SGR(&D):	$PZ�
�����]_U(u(&E)	$Pi�
�����]\P(u(&S)P��r���-��[�Sgq_��nj�e�^�
Ng���f�vMR�v��f�-��[0P)�}�����f�-��[:��P3��������Ȁ	���]R�g�v�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����=z8h�jHhX[�S$PK�
0����[�nj�e�^-N�v�P�SGR(&D):PY�	t���=z8h��NVf�:$Pi�
����b�R(&S)$Px�
����1YWe(&F)P��r�����N-��[�Sgq_��nj�e�^�
Ng���f�vMR�v��f�-��[0P)�}�����f�-��[:��P3�-������Ȑ�_	�Microsoft JhengHei UIP-J2����x�[PcJ2����S�mP�J2���WY(uP�>�������	P
s
�����c�S�vMR�v�[hQ'`-��[<P	P
&y
�������fb�^p�-��[P�
?����j��(&V)...P�!?����j��/�}/�(&E)...���Ȁ�x��S{v�_j�x	�Microsoft JhengHei UIP	`���{v�(&R):�Px&SysTreeView32Tree1P�	p���x��S�v_j�x(&S):��P�S���P��2����x�[P��2����S�m���Ȁ���{,g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����=z8h�jHhX[�S$P)�
0����[��{,ggQ�v��N�SGR-��[(&D)P8�	t���=z8h��NVf�:$PG�
���b�R(&S)$PV�
���1YWe(&F)@#x�)YSysLink@
x������PA���Ȁ
���{,g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'������}/�xeW[l\'`$P$�
0����[��{,ggQ�v�P�SGR-��[(&D)P2�	<���(WVf�1YWe(&L):� �P=-���4P7=�msctls_updown32Spin2PE?�	����!k�_���[3^6bPP�
����Static@ Z�(YSysLink@\������PA���Ȁ���{,g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����_U(u/\P(ul\'`$P#�
0����[��{,ggQ�v�P�SGR-��[(&D)	$P2�
�����]_U(u(&E)	$PA�
�����]\P(u(&S)@ Q�)YSysLink@	Q������PA���Ȁ�j�{,g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����͑�e}T
T�|q}�{t�T3^6b$P)�
0����[��{,ggQ�v�P�SGR-��[(&D)��P5�������Ȑ�2QX[�[hQ'`�{,g	�Microsoft JhengHei UIP�	a���x��S��2QX[�v-��[(&S):	�P�x'���P��2���/fP��2���&TPA���Ȁ	���]R�g�v�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'������[hQ'`���j�Oc�e�l$PF�
0����[�nj�e�^-N�v�P�SGR(&D):	$PU�
.����O�eg���[�N�N(&O)	$Pd�
4�����������[�N�N(&V)	$Ps�5���
N�����[�N�N (�NKb�R�e_nd���)(&N)P��r���-��[�Sgq_��nj�e�^�
Ng���f�vMR�v��f�-��[0P$�}�����f�-��[:��P.�-������Ȁ���{,g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'������[hQ'`���j�Oc�e�l$P)�
0����[��{,ggQ�v�P�SGR-��[(&D)	P8�
.����O�eg���[�N�N(&O)	PG�
4�����������[�N�N(&V)	$PV�
5���
N�����[�N�N (�NKb�R�e_nd���)(&N)@ d�(YSysLink@f������PA���Ȁ	R�g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'������_�}�X[�S��S��f�$P-�
0����[�nj�e�^-N�v�P�SGR(&D):PDS	c���c>mf}(&S)PxD?
d���nj�e�^-��[P�D?	e�����f�-��[�PP�a1CHECKLIST_SCECheckListP��r�����N-��[�Sgq_��nj�e�^�
Ng���f�vMR�v��f�-��[0P�d�����e�XO(u�b�D}(&U)...PA���Ȁ
���]R�g�v�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'������v���[hVP �}�����f�-��[:P/�f���
g�R_U�R!j_:��P9�����P�MP4����j���[hQ'`(&V)...$Pe�
0����[�nj�e�^-N�v�P�SGR(&D):Pt�/���x��S
g�R_U�R!j_:	$P��
������R(&U)	P��
����Kb�R(&M)	P��
�����]\P(u(&S)P�P3����}/��[hQ'`(&E)...P��r���-��[�Sgq_��nj�e�^�
Ng���f�vMR�v��f�-��[0���Ȁ���{,g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����,g_j�x�x�{t�T$P)�
0����[��{,ggQ�v�P�SGR-��[(&D)P8�/���x��S
g�R_U�R!j_:	$PG�
������R(&U)	$PV�
����Kb�R(&M)	$Pe�
�����]\P(u(&S)PyP3����}/��[hQ'`(&E)...���Ȁ���{,g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP�����������P'�����	$P$�
~���-��[�P�jHhbnj�e>Y6q�_(&C)	$Pg����
NAQ1��P�jHhbnj�e>Y�v
kP����S�N(&N)	$P8�����\|~b
kP��P�d0R@b	gP[nj�e>Y�T�jHh(&P)	$PM�3����N|~bO(u
k�S�N@b	g�jHhbP[nj�e>Y�v�sX[O(u
k(&R)P�P7����}/��[hQ'`(&E)...$@0������Ȁ���]R�g�v�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'������v���[hVPR��^���$P
Ry
0����[�nj�e�^-N�v�P�SGR(&D):	$Pa�
~���-��[�P�jHhbnj�e>Y6q�_(&C)	$P�����
NAQ1��P�jHhbnj�e>Y�v
kP����S�N(&N)	$P&p�����\|~b
kP��P�d0R@b	gP[nj�e>Y�T�jHh(&P)	$P&��3����N|~bO(u
k�S�N@b	g�jHhbP[nj�e>Y�v�sX[O(u
k(&R)P�P9����}/��[hQ'`(&E)...P$�}�����f�-��[:��P.�;���P�B<:����j���[hQ'`(&V)...�������R�g�|q}�[hQ'`	�Microsoft JhengHei UIP�	T���R�g:@B�����g@LJ���3^6b�SGR@*C�����g@*KK���,g_j�SGR@AD�����g@@KL����SP��D}@XE�����g@WMM���{v�@cF�����g@md	N����jHh�|q}@c*G�����g@m*j	O����|q}
g�R@cAH�����f@m@k	P����v�
g�Rir�N�Pi�Amsctls_progress32Progress1PA���Ȁ�z	�Microsoft JhengHei UIP`\!����x�[P,�0�����[hQ'`-��[�SR�g/fNP�|q}�{t�v�]wQ�(u�O-��[��f��[hQ'`�SR�g�[hQ'`0�`�S�N�^�zb�}/��[hQ'`�{,g0WY(u�[hQ'`�{,g09h�d�{,g�O�WL�R�g0�So�:yR�gP}�g0P������[hQ'`-��[�SR�g
1.0 Hr
PA���Ȁ�N-��[�|q}	�Microsoft JhengHei UI��P�O���P�2P���p��(&B)...P
'�R���P�2���/������j�v_(&E):P�92����x�[P�92����S�m��@P��	�Microsoft JhengHei UIPX	<����P�D}�vb�T(&M)PcD	g���nj�e�^-��[P�9	e�����f�-��[�P�f"CHECKLIST_SCECheckList�@�f����P�2�����e�X(&D)... P��q����[�nj�e�^-N�v�D}(&E):���Ȁ�N�WL�R�g	�Microsoft JhengHei UIP�����/������j�v_(&E):��P�O���P�2P���p��(&B)...P)�R���P�92����x�[P�92����S�m���Ȁ�O/SeQ�{,g	�Microsoft JhengHei UI��P�O���P�2P���p��(&B)...P�1h���/������j�v_P%�
N������[nj�e�^-N�sX[�v�{,g(&O)P�:2����x�[P�:2����S�m��@D�	�Microsoft JhengHei UIP�
N���/SeQMRnd��Pnj�e�^(&C)���Ȁ�a�[hQ'`�{,g�c�	�Microsoft JhengHei UIP�	i����c�(&D):D�P�0����P�L2����x�[P�L2����S�m���Ȁ���e�[hQ'`�{,g	�Microsoft JhengHei UIP�	��������{,g
T1z(&T):��P�U���P*�	��������c�(&D):D�P4�0����P�p2����x�[P�p2����S�m���Ȁ��,g_j�[hQ'`-��[	�Microsoft JhengHei UIP����������P'�����=z8h�jHhX[�S$@-�0����[��{,ggQ�v��N�SGR-��[(&D)P=�
t���=z8h��NVf�:$PM����b�R(&S)$P]����1YWe(&F)@#x�)YSysLink@
x������PA���Ȁ��,g_j�[hQ'`-��[	�Microsoft JhengHei UIP����������P&�����_U(u/\P(ul\'`$@#�
0����[��{,ggQ�v�P�SGR-��[(&D)	$P2�
�����]_U(u(&E)	$PA�
�����]\P(u(&S)@ Q�)YSysLink@	Q������PA���Ȁ��,g_j�[hQ'`-��[	�Microsoft JhengHei UIP����������P'������}/�xeW[l\'`$@-�
0����[��{,ggQ�v�P�SGR-��[(&D)P<�	<���(WVf�1YWe(&L):� �PG-���4P7G�msctls_updown32Spin2PEK�	����!k�_���[3^6bP\�����Static���Ȁ��,g_j�[hQ'`-��[	�Microsoft JhengHei UIP����������P'������[hQ'`���j�Oc�e�l$@-�0����[��{,ggQ�v�P�SGR-��[(&D)	P=�.����O�eg���[�N�N(&O)	PM�4�����������[�N�N(&V)	$P]�5���
N�����[�N�N (�NKb�R�e_nd���)(&N)���Ȁ�s,g_j�[hQ'`-��[	�Microsoft JhengHei UIP����������P'�����͑�e}T
T�|q}�{t�T3^6b$@-�0����[��{,ggQ�v�P�SGR-��[(&D)��P9�������Ȁ��,g_j�[hQ'`-��[	�Microsoft JhengHei UIP����������P(�����-��[
kP��c�n�U$@#�
0����[��{,ggQ�v��N�SGR-��[(&D):	�P8�g���P�d�����e�XO(u�b�D}(&U)...Po�2�����yd�(&R)@ ��)YSysLink@�������PA�����g�x��-��[���f	�Microsoft JhengHei UIPZR2���/f(&Y)P�R2���&T(&N)P"�EYSysLink
P�������Ȁ�r,g_j�[hQ'`-��[	�Microsoft JhengHei UIP����������P&�����
\q�
T1z$@)�
0����[��{,ggQ�v�P�SGR-��[(&D)!P3�W���@ G�(YSysLink@I������PA���Ȁ�r�{,g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P&�����
\q�
T1z$P)�
0����[��{,ggQ�v�P�SGR-��[(&D)!P3�=W���@ G�(YSysLink@I������PA���Ȁ���]R�g�v�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����
\q�$PF�
0����[�nj�e�^-N�v�P�SGR(&D):!PR�W���Pt�r���-��[�Sgq_��nj�e�^�
Ng���f�vMR�v��f�-��[0P$�}�����f�-��[:��P.��������ȀW��^p��v<P���f�MS Shell DlgP5Y����V�p%s�v<P�vMR/f%s�NR��v�v-��[<P\���f�p�^p�<P0�P$FPXSysListView32List1P�|2����x�[P|2����S�m(&C)���Ȁ���[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P&�����=z8h�jHhX[�S$P)�
0����[���N�SGR-��[(&D)P8�	t���=z8h��NVf�:$PG�
���b�R(&S)$PV�
���1YWe(&F)���Ȁ���[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����_U(u/\P(ul\'`$P#�
0����[��P�SGR-��[(&D):	$P2�
�����]_U(u(&E)	$PA�
�����]\P(u(&S)@ Q�)YSysLink@	Q������PA�������-��[ <group> �vb�Tnj<h	�Microsoft JhengHei UIP�	��������P�D}�vb�T(&M):	�P�H"����@�H����P�2$����e�X(&A)...P�#2%����yd�(&R)Ph�	�����P�D}��l\�e(&T):	�Pr�H ����@r�H����P�r2�����e�X(&D)...P��2�����yd�(&E)@0���@�������Ȁ�j�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P&�����͑�e}T
T�|q}�{t�T3^6b$P)�
0����[��P�SGR-��[(&D)��P4�������Ȁ
���[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'������}/�xeW[l\'`$P$�0����[��P�SGR-��[(&D)P3�	<���(WVf�1YWe(&L):� �P=-���4P7=�msctls_updown32Spin2PE@�����!k�_���[3^6bPP�
����Static@ Z�(YSysLink@	\������PA���Ȁ���[hQ'`�SGR-��[	�Microsoft JhengHei UIP�����������P'�����	$P$�
~���-��[�P�jHhbnj�e>Y6q�_(&C)	$Pg����
NAQ1��P�jHhbnj�e>Y�v
kP����S�N(&N)	$P8�����\|~b
kP��P�d0R@b	gP[nj�e>Y�T�jHh(&P)	$PM�3����N|~bO(u
k�S�N@b	g�jHhbP[nj�e>Y�v�sX[O(u
k(&R)P�P7����}/��[hQ'`(&E)...$@0������Ȁ���[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P(�����-��[
kP��c�n�U$P#�
0����[���N�SGR-��[(&D):	�P2�g���P�d�����e�XO(u�b�D}(&U)...Po�2�����yd�(&R)@ ��)YSysLink@�������PA���Ȁ�r�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����
\q�
T1z$P)�
0����[��P�SGR-��[(&D)!P3�=W���@ G�(YSysLink@	I������PA���Ȁ���[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'������[hQ'`���j�Oc�e�l$P)�
0����[��P�SGR-��[(&D)	P8�
.����O�eg���[�N�N(&O)	PG�
4�����������[�N�N(&V)	$PV�
5���
N�����[�N�N (�NKb�R�e_nd���)(&N)@ d�(YSysLink@	f������PA���Ȁ���[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����,g_j�x�x�{t�T$P)�
0����[��P�SGR-��[(&D)P8�/���x��S
g�R_U�R!j_:	$PG�
������R(&U)	$PV�
����Kb�R(&M)	$Pe�
����\P(u(&S)PyP3����}/��[hQ'`(&E)...���Ȁ���{,g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����YP SZ$P-�0����[��{,ggQ�v�P�SGR-��[(&D)��P:�E������Ȁ���]R�g�v�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����YP SZ$PL�0����[�nj�e�^-N�v�P�SGR(&D):��PW�>����P��r���-��[�Sgq_��nj�e�^�
Ng���f�vMR�v��f�-��[0P'�	}�����f�-��[:��P2��������Ȁ��,g_j�SGR-��[	�Microsoft JhengHei UIP����������P'�����YP SZ$@-�0����[��{,ggQ�v�P�SGR-��[(&D)��P>�E������Ȁ���[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����YP SZ$P+�0����[��{,ggQ�v�P�SGR-��[(&D)��P7�E������Ȁ���{,g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����=z8h�jHhX[�S$P,�0����[��{,ggQ�v��N�SGR-��[(&D)P8�;�CHECKLIST_SCE���Ȁ���]R�g�v�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����=z8h�jHhX[�S$PQ�0����[�nj�e�^-N�v�P�SGR(&D):P��r�����N-��[�Sgq_��nj�e�^�
Ng���f�vMR�v��f�-��[0P-�	}�����f�-��[:��P7�����P]�;�CHECKLIST_SCE���Ȁ��,g_j�[hQ'`-��[	�Microsoft JhengHei UIP����������P'�����=z8h�jHhX[�S$@-�0����[��{,ggQ�v��N�SGR-��[(&D)P?�;�CHECKLIST_SCE���Ȁ���[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����=z8h�jHhX[�S$P+�0����[���N�SGR-��[(&D)P7�;�CHECKLIST_SCE���Ȁ
���e�Xir�N	�Microsoft JhengHei UIP�����������P'�����	$P$�
~���-��[�P�jHhbnj�e>Y6q�_(&C)	$Pg����
NAQ1��P�jHhbnj�e>Y�v
kP����S�N(&N)	$P8�����\|~b
kP��P�d0R@b	gP[nj�e>Y�T�jHh(&P)	$PM�3����N|~bO(u
k�S�N@b	g�jHhbP[nj�e>Y�v�sX[O(u
k(&R)P�P7����}/��[hQ'`(&E)...P��2����x�[P��2����S�m$@0�����@�H��*QHQ��^	�Microsoft JhengHei UIP������P%�P�SysListView32Py������(Wn�U-N	g�ؚ�v GPO �v��v�d	g�ؚ�v*QHQ��^0P�����P!��,����Pw�'�������Ȁ�w�{,g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����$P){
0����[��{,ggQ�v�P�SGR-��[(&D)P8��������(W�{,g-N�[��SGR-��[�_��Y�g�[hQ'`�c�CQ�N�pzz}v��SGR-��[\!q�l7_6R�WL�0PT<	��������[hQ'`�c�CQ(&S):��P^�����P�]PW����}/��[hQ'`(&E)...���Ȁ�w�{,g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����$@){
0����[��{,ggQ�v�P�SGR-��[(&D)P8��������(W�{,g-N�[��SGR-��[�_��Y�g�[hQ'`�c�CQ�N�pzz}v��SGR-��[\!q�l7_6R�WL�0PT<	��������[hQ'`�c�CQ(&S):��P^�����P�]OW����}/��[hQ'`(&E)...���Ȁ�w�{,g�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����$P)[
0����[��P�SGR-��[(&D)P8��������(W�{,g-N�[��SGR-��[�_��Y�g�[hQ'`�c�CQ�N�pzz}v��SGR-��[\!q�l7_6R�WL�0PT<	��������[hQ'`�c�CQ(&S):��P^�����P�]OW����}/��[hQ'`(&E)...���Ȁ���]R�g�v�[hQ'`�SGR-��[	�Microsoft JhengHei UIP����������P'�����$PF�
0����[�nj�e�^-N�v�P�SGR(&D):��PR�����P�QFW����}/��[hQ'`(&E)...Px�r���-��[�Sgq_��nj�e�^�
Ng���f�vMR�v��f�-��[0P$�}�����f�-��[:��P.��������Ȁ�㉪�	�Microsoft JhengHei UI�P�������P�����SysLink�Y�vQ�N	gܕ�[hQ'`�SGR�S�vܕ Windows �R���vnj
��ˊ<A>�S�� Microsoft �}�z</A>0PA���Ȑ
|�Ɩ-NX[�S�SGR-��[	�Microsoft JhengHei UIC	�P�������P�H2������e�X(&A) >S	�P��������P�\2�����< �yd�(&R)D�P�n�����P�	��������S(u�vƖ-NX[�S�SGR:P��	�������i�(u�vƖ-NX[�S�SGR:P�d	��������c�:P�2����x�[PC�2����S�mWSecEdit �^8O!jD}^�%R
T1z�c��SGRnj�e�^-��[��f�-��[�[hQ'`�{,g�{,g
N!k�v-��[/R�g�[hQ'`�{,g/f�[�(u�O-��[bR�g��f�0
N!k�v-��[/R�g�[hQ'`�SGRO(u�
kP�c>m�SP��D}�|q}
g�RPA{v��jHh�|q}O(u�
kP�c>m�SP��D}�|q}
g�R-��[<P{v��[hQ'`-��[<P	�jHh�|q}�[hQ'`-��[�[hQ'`�{,g(*g2QX[)�[hQ'`-��[WSecEdit �[hQ'`-��[^�%RWSecEdit �[hQ'`�{t�T^�%R�`�x�[��*Rd� %s �U?�`��*Rd�@b	gx��S�v��v?!�zsSR�g��f�(&A)...
9h�dx��S�vnj�e�^�[hQ'`-��[<P�OR�g��f�/S�Q�{,g(&E)...
/S�Q�vMR��f��v�W,g�{,g�e�X�jHh(&L)...
\�e�jHh�ReQ�P�{,g0�e�X�{,gd\_(&N)...
�e�X�{,gMOn0R�[hQ'`�{,g�vd\_ (.inf - INF<h_)�e�X�{,g(&N)...
�^�zNP�e�{,g�yd�_(&R)
�_d\_-N�yd�@bx��S�vMOn͑�etet(&F)
�f�e�PMOn�No�:ygя�e�X�v�{,g�zsS-��[��f�(&F)...
9h�dx��S�{,g�O-��[��f�Windows !q�l�_ %s /SeQ�{,g�SX[�e�j(&A)...
(u�e
T1z2QX[�{,g���(&C)
\@bx��S�v�{,gnj
����0RjR��?|��
N(&P)
\jR��?|nj
���0R�{,g
N�O�n GPO͑�etet(&R)
͑�etetnj�ePA�_���	g�[hQ'`Mb���e�X�Pir�NWindows !q�l/SeQ�[hQ'`�{,g�[�x�SGR
�[�xgw�O(ugP�
)Y
�[�xg�wO(ugP�
)Y
g\�[�xw��^
PW[CQ7_6R�WL��[�xwkz��
��a�v�[�x�[�x�_�&{T�ܖ'`�Bl
O(u��_�{veQMb�����f�[�x3^6b���[�SGR3^6b���[��<P
!k
Nck�x�v{veQVf�͑-�3^6b���[�xehV�vBf������
R�	3^6b���[Bf��
R�
�`��*Rd��P�{,g�U?nj�e�^\*g	�eQ0�}[hQ'`: 7_6RP�6R{veQBfxePA3^6b: ͑�e}T
T�|q}�{t�T3^6b3^6b: ͑�e}T
T�Oӌ3^6b
T1z͑�e	�eQ
�_�SGRnj�e�^͑�e	�eQ,g_j�T	gHe�v�SGRh�<h�D}
T1z�N�N���j
�|q}���j'Y\g'Y<P
KB	�|q}���j�Oc�e�l�|q}���j�OYu)Yxe
)Y�[hQ'`���j'Y\g'Y<P
KB
�[hQ'`���j�Oc�e�l�[hQ'`���j�OYu)Yxe
)Y�a(uz_���j'Y\g'Y<P
KB
�a(uz_���Oc�e�l
�a(uz_���j�OYu)Yxe
)Y�[hQ'`=z8h���j�]�nBfܕ����f�=z8h�SGR�N�N=z8h!j_=z8h�|q}�N�N=z8h{veQ�N�N=z8hir�NX[�S=z8hyr�k
kP�O(u=z8h�SGR���f=z8h3^6b�{t=z8hz�^��d��[hQ'`x��\*g�[�!q�l�e�Xb�T	!q�lo�:y�[hQ'`-��[!q�l�e�XO(u�!q�l�e�X�v�ir�N!q�l�e�Xnj�e>Y      -- b�T�P�j
T-NS+TN�N�vMR�v�|q}���!q�l��X��vW[CQ0ˊ͑�e}T
T0
kP�=z8hWindows !q�l�e�X�jHh0�{,g
T1z
Nck�x0/S�QX[>e�{,gBf|vu/���0Windows !q�l�e�X{v�_j�x0�[hQ�c6R�O9e���S�T�WL�R�Qnj�e>YgQ�[���S�[eQ
hTJ�nj�e>Y/�WL��jHh*Rd�!q�[hQ�c6R���S�[eQ�gb�xe<P-��[xe<P�^�zP[_j�xR	�P[_j�xPA��w�^�z#�P}�WL�!q�l�^�z�WL��}
!q�lW�I�NR3^6b: %1
���j
T1z�WL��[hQ'`R�g�[hQ'`�SGR-��[
�[hQ'`-��[�SR�g
v1.0E�[hQ'`-��[�SR�g/f(u�O-��[��f��[hQ�SR�g�[hQ'`�v�|q}�{t�]wQ0�[���`�^�z�S�}/��[hQ'`�{,g�WY(u�[hQ'`�{,g�9h�d�{,g�WL�R�g�So�:yR�gP}�g0
N!kR�g�WL��e
�W,g�[hQ'`-��[�j�c�:
��f�/f�OgqNR�{,g@b-��[�v0
\*g�WL�R�g0&N*gO(u�[hQ'`-��[�SR�g�O-��[bR�gnj�e�^0
ܕ�e�[hQ'`-��[�SR�gܕ�e
N!kR�g\-��[�jMOn�e�X0R�[hQ'`�{,gPAir�N
T1z<P
NN���_U�{,g�[hQ'`�{,g (.inf)|*.inf||inf
��_U���jBf|vu/���log���jHh (.log)|*.log||PAGSoftware\Microsoft\Windows NT\CurrentVersion\SecEdit\Template LocationsWindows !q�l��_U�{,g�jHh0Windows !q�l���S�{,gnj
�0(�`@bx��S�vnj�e�^-N�l	g�So�:y�vR�gnj
�0ˊO(u [R�g] �R��h��O_U�R�P�]wQ00�������[}Y~^)YKb�R�]_U(u�]\P(u��ܕ\*g�[�b�Tb�T��l\CLASSES_ROOTMACHINEUSERS�]b�RPA
Nf�v/���\Security\Templates	�_�}�X[�S��S��f�AQ1�,g_j{veQ!q�l2QX[ 2QX[(&S)
2QX[�{,g4Software\Microsoft\Windows NT\CurrentVersion\SecEdit�e�Xnj�e>Y�e�Xnj�e>Y(&F)...
\�enj�e>Y�R0R�P�{,g�e�X_j�x(&K)...
\�e_j�x�R0R�P�{,g�e�X�D}(&G)...
\�e�D}�R0R�P�{,g
g�R
T1z_U�R�]R�g�]-��[��RKb�R�x�[���gnj�e�^�[hQ'`
N!k�[hQ'`R�g �[hQ'`�[hQ�c6R���S�[eQ�D}b�Tnj<h�P�D}�vb�Tb�T��l\b�T3^6b�SGR	�[�x�S3^6b���[�SGR,g_j�SGRck(W=z8hO(u�
kP��S�[hQ'`x���SGR�N�N���j�N�N���j-��[<P�S�N�N�j��hVPA=z8h�v�
g�RX[�S=z8h3^6b{veQ�N�N
NAQ1�,g_j�OӌX[�S�|q}���j
NAQ1�,g_j�OӌX[�S�[hQ'`���j
NAQ1�,g_j�OӌX[�S�a(uz_���j8l`�euN��S�N�Nyb!k�]\O{veQ�N
g�R�e_{veQPAActive Directory ir�NActive Directory ir�N�v�[hQ'`�{t&�e�X�v�ir�N(&O)
\ Active Directory ir�N�ReQ�P�{,g���S�[eQ
R�Qnj�e>Y/���Snj�e���Sl\'`���S�dEQl\'`	�^�z�jHh/�[eQnj�e
�^�znj�e>Y/D��Rnj�e�[eQl\'`�[eQ�dEQl\'`	*Rd�P[nj�e>Y�S�jHh*Rd����S
kP����f
kP��S�_�d	g
kTekU�t���S0�[eQ�S�WL��[eQ�S�WL�hTJ�/�WL��S	g�Pnj�e>Y
�Pnj�e>Y0P[nj�e>Y�S�jHh
�Pnj�e>Y�SP[nj�e>Y�Pnj�e>Y�S�jHh	�S	gP[nj�e>Y�S�jHh�S	gP[nj�e>Y�PP��jHh�S	g�P_j�x�P_j�x�SP[_j�x�S	gP[_j�x�P_j�x�SP[_j�xPA�S	gP[_j�x���Y0\Pbk�S�f\P�gb��{,g���f�{,g�gb��rKaR	��OX[���Y\Pbk�f\P�S|~�~�b�O(u��[��v�c6R�[hQ�c6R���S�[eQ�^�zP[�|*Rd�P[�|n�UgQ�[�e�X/�yd���]���SgQ�[�[eQgQ�[�S	g�P�[hV�P�[hV�SP[�[hV�S	gP[�[hV
[[,g_j��f��SGR-��[ ]]3^6b
Ng�����[0	�[�x�S�N�zsS���f0
N����[�x0
N�OX[�[�x�vwkz��0�[�x0Rg�e:AQ1��[�x���f�e:�[�xg\�_�/f:PA	�[�x���v�OYug:3^6b\�����[(W:3^6b���[g��:���[�N�N
��e:�[�x8l
N0Rg03^6b\�����[ (�v0R�|q}�{t�T�d����[)0
O(u�S���S�v�R�[�OX[>e�[�xKerberos �SGR7_6R�WL�O(u�{veQP�6R��f�Bf�TekU�t�vg'Y�[/�'`
R�
g�RhyI�gw�X[Yug
R�
O(u�hyI�gw�X[Yug
\BfO(u�hyI��f�e�vgw�X[Yug
)Y�e�Xb�TPA��aԚ
N���!q�lo�:y�P@S�k
�l	gܕ�e
N!kR�g�vnj
��S(uWindows !q�l2QX[���f�v�{,g0�`�x�[��*Rd� %s �U?�[hQ'`-��[�SR�g���g/SeQ�{,g(&I)...
\�{,g/SeQ0Rdknj�e�^Windows !q�l�^�zb��_U %s~b�Q/������jsdb'�[hQ'`nj�e�^�jHh (*.sdb)|*.sdb|@b	g�jHh (*.*)|*.*||\�{,gWY(u0R��f�����f�-��[2��^�v/������j_
�[hQ'`(&S)...
�}/��P��v�v�[hQ'`BSoftware\Microsoft\Windows NT\CurrentVersion\SecEdit\Configuration�[hQ'`(&S)...
�}/��P��v�v�[hQ'`EnvironmentVariablesa%AppData%|%UserProfile%|%AllUsersProfile%|%ProgramFiles%|%SystemRoot%|%SystemDrive%|%Temp%|%Tmp%|��_Unj�e�^(&P)...
��_U�sX[b�e�vnj�e�^�e�Xnj�e�^(&N)...
�^�z&N��_U�e�vnj�e�^-��[�c�(&P)...
(Wdk�v��^�z�{,g�v�c�
\help\sce.chm@b	g�jHh (*.*)|*.*||nj�e�^: %sVf���_Unj�e�^Bf|vu
Nf�v/���0 �`�_�HQR�gMb��O(unj�e�^0�_nj�e�^�R��h��x��Sx���O2�L�R�g0"�`Vf���_U�vnj�e�^
NX[(W0ˊ�_ [nj�e�^] �R��h�	c [/SeQ�{,g]0PAnj�e�^�]�}
d�k0���Ocknj�e�^ˊ�S��}
N��f�vnj
�0��aԚ
N���N	�eQnj�e�^0ˊܕ���g�N�a(uz_��Qf�N!k0(nj�e�^X[�S���b0d�^�nj�e�^�v
kP����f�N�&TGR�`�_�	g�|q}�{t
kP�Mb��O(unj�e�^0\Security\Database�`��\���f2QX[0R %s �U?B	g�sX[/SeQ�v�{,g�dn0傁�2QX[�ˊ	c [�S�m]�6q�_(W/SeQ�SNP�{,gMR��WL�R�gb-��[0傁�euN�MRNP/SeQ�v�{,g�ˊ	c [�x�[]0
@b	gx��S�v�jHh�bU},g_j{veQ�bU}�_�}�X[�S��S��f�	�bU}�N
g�R�e_{veQ	�bU}�Nyb!k�]\O{veQ�e�X�D}�D}(&G):\*gR�gR�gBf|vu/���\*g�[��^p��v-��[<P,g_j�SGR ...
�_,g_j�SGR-��[<P�^�z�{,g�jHh	gHe�SGR ...
�_	gHe�SGR-��[<P�^�z�{,g�jHh<H2>�[hQ'`-��[�SR�g</H2> <H4>��_U�sX[nj�e�^</H4> <OL><LI ALIGN="LEFT" ID="OPEN_DATABASE_1">(W <I>[�[hQ'`-��[�SR�g]</I> ��W��v
N	cNN�n ��Su� <LI ALIGN="LEFT" ID="OPEN_DATABASE_2">	cNN <B>[��_Unj�e�^]</B> <LI ALIGN="LEFT" ID="OPEN_DATABASE_3"> x��Snj�e�^�6q�_	cNN <b>[��_U]</b></OL> <H4>�^�z�enj�e�^</H4><OL> <LI ALIGN="LEFT" ID="OPEN_DATABASE_4">(W <I>[�[hQ'`-��[�SR�g]</I> ��W��v
N	cNN�n ��Su� <LI ALIGN="LEFT" ID="OPEN_DATABASE_5"> 	cNN <B>[��_Unj�e�^]</B>  <LI ALIGN="LEFT" ID="OPEN_DATABASE_6"> 8�eQ�e�vnj�e�^
T1z�6q�_	cNN <b>[��_U]</b> <LI ALIGN="LEFT" ID="OPEN_DATABASE_7">x��d��/SeQ�v�[hQ'`�{,g�6q�_	cNN <b>[��_U]</b></OL>Q<HTML DIR="ltr" ID="MAIN_HEADER"><BODY><FONT face="Microsoft JhengHei UI" size=2></FONT></BODY></HTML>�`ckVf���_U�vnj�e�^
NX[(W02�`�S�N�N�x��S<I>�[hQ'`-��[<P</I>�R��h�}T�N�v<B>/SeQ�SGR</B>�O�^�z�e�v,g_j�SGRnj�e�^0nj�e�^X[�S���b0)�j�����j(&G)
(Wx��S [�[hQ'`-��[�SR�g] �{ޞ�_�R�c���jbnj�e>Y�vo�:y\<BR>�`�s(W�S�N)R(u�Pnj�e�^�v�[hQ'`-��[�R�gb-��[�`�v��f�0<BR> <H4>-��[�`�v��f�</H4><OL><LI ALIGN="LEFT" ID="NO_ANALYSIS_1">(W <I>[�[hQ'`-��[�SR�g]</I> ��W��v
N	cNN�n ��Su�<LI ALIGN="LEFT" ID="NO_ANALYSIS_2">x��S <B>�zsS-��[��f�</B><LI ALIGN="LEFT" ID="NO_ANALYSIS_3">(Wr�
\q��eJX-N�8�eQ�`���j��KN���j�v���j
T1z�6q�_	cNN <B>[�x�[]</B></OL><B>�la:</B> -��[�[b�_��`�_��WL�R�g�O�j���`nj�e�^gQ�vnj
�<BR><BR><H4>R�g�`�v��f��[hQ'`-��[<P</H4> <OL><LI ALIGN="LEFT" ID="NO_ANALYSIS_4">(W <I>[�[hQ'`-��[�SR�g]</I> ��W��v
N	cNN�n ��Su�<LI ALIGN="LEFT" ID="NO_ANALYSIS_5">x��S <B>[�zsSR�g��f�]</B><LI ALIGN="LEFT" ID="NO_ANALYSIS_6">(Wr�
\q��eJX-N�8�eQ���j�v_�6q�_	cNN <B>[�x�[]</B></OL><BR><B>�la:</B> 傁��j��-��[bR�gBf@b�^�z�v���j�ˊx��S <I>[�[hQ'`-��[�SR�g]</I> gQ�[�R��h�
N�v <B>[�j�����j]</B>0<h3> ���SMOn|vu/���</h3>��f�-��[�SGR-��[�[hQ-��[�|H�(&W)...
�[hQ:O
ghV҉r��|H�Windows !q�l/SeQ
Nck�x�v�{,g %sPA3^6b: Administrator 3^6b�rKa3^6b: Guest 3^6b�rKa gQ�[O(u�
T1z
Nck�x0�S��zz}vb
NS+T�NN�NUOW[CQ: 
%1�l	gg\<PO(u��S�D}
T1z�S��&N*gS+T�NUONRW[CQ:
%1�|q}~b
N0Rc�[�v_:
%1�jHh
T1z
N��S+T�NUONRW[CQ:
%1�_�x��SNP_U�R!j_09!q�l*Rd�ir�N "%1"��V�p	gP��_U-N�v���zck(Wo�:yvQgQ�[0
��*Rd��Pir�N�vq��ܕ��r����z�6q�_x��S [*Rd�]0-��[ %.17s �vb�Tnj<h...͑-�3^6b���[�xehV�vBf��-��[�c�(&P)...
�^�z�P�{,g�v�c��c��S��
NS+T�NN�NUOW[CQ:
%1�{,g-��[�SGR-��[PAˊ�x�[�`/f&T	g0R�Pir�N�v	gHe
kP�0ˊ�x�[�Pir�N�]�}X[(W0
N�S�NO(u %1 nj�e>Y0ˊx��dvQ�Nnj�e>Y0b�v��f��jHh
T1z*Yw�0PAAspolsconcepts.chm::/html/2ff43721-e5fb-4e0c-b1a1-4ee3f414a3b7.htmPA�jHh
T1z
N���SS+T�NUONRW[CQ:
%1%1
dk�j
T�]�OYuf}݈n
T1zO(u0
ˊx��dvQ�N
T1z0�jHh^��W
Nck�x0�`�_�/f�|q}�{t�T�D}�vb�T�Mb���WL���Bl�v�d\O0/�j
T %1 
Nck�x0
ˊ�Nck�x<h_͑�e8�eQ�j
T��O�Y c:\location\file0%203^6b
T1zKN��!q�l
\�a��]�}�[b�[hQ'`X�%R�x�p�Nq_���}�W3^6b��_�(W�-��}�W�SGR-N�[�dk-��[0,g_j�[hQ'`�SGR%1%2%1%2
%3%1%2%1%2yr�kPASAM `��zX[�S�v�[hQ'`-��[`��zX[�S
>e�g\�[�xw��^P�6Rg\�[�xw��^=z8h}�=z8h�N�N|vu�e�e�[�x�w�e�NETLOGON �[hQ�S��v�[hQ'`-��[	�^�zf�S;e�d�v#��}Ɩ-NX[�S�SGRWY(u�jHh�|q}�vƖ-NX[�S�SGR
!!
Nf�v�SGR!!:%1 %2AQ1��|q}�{t�T3^6b���[�S�O�N��f�3^6b�d	g��v�[hQ'`-��[�S�O�N�v��f�3^6b�d	g�7_6R�WL��[�xwkz��



���[hQ'`-��[zl�[͑��O(u
��[�xMR��_��O(u�3^6b�vܕ�v/UN�e�[�xxe�v0dk<P�_��N�e 0 �T 24 P�[�xKN��0



�P�SGR�S���|q}�{t�TɅ1u�x�[
N�Q|~�~͑�O(u
��[�x��N�X�R�[hQ'`0



�-�<P:



(W�}�W�c6R�z
N�p 240

(Whs�z:O
ghV
N�p 00



�la: �O�-��b�T��f�gu��_vQ�}�W�c6R�z�v-��[0

�p�N�}w��[�xwkz���v	gHe'`�ˊ�RAQ1��V�p_U(u [�[�xg�wO(ugP�] �[hQ'`�SGR-��[�Mb���fN��v�[�x��zsS�Q!k���f0�Y�	gܕ0�[�xg�wO(ugP�
0�[hQ'`�SGR-��[�vs�0}nj
��ˊ�S��0�[�xg�wO(ugP�
00!�[�xgw�O(ugP�



���[hQ'`-��[zl�[�|q}��BlO(u����f�[�xKNMR��[�x�S�NO(u�vgP� ()Yxe)0�`�S�N-��[�[�x(W 1 � 999 )YKN�_0Rg; b\)Yxe-��p 0�h�:y�[�x8l`�
Ng0Rg0�Y�g0�[�xgw�O(ugP�
0�N�e 1 0R 999 )YKN���GR0�[�xg�wO(ugP�
0
N�_��N�0�[�xgw�O(ugP�
0�v)Yxe0�Y�g0�[�xgw�O(ugP�
0-��[�p 0�GR0�[�xg�wO(ugP�
0�S�N/f�N�e 0 0R 998 )YKN���v�NUOxe<P0



�la: 9h�d�`�v�t�X��[��[hQ'`�vgsO\O�l/f���[�x�k 30 � 90 )Y0Rg0�YdkN�O�;e�d�4x�O(u��[�x�SX[�S�`�v�}�nj�n�vBf���O�_	gP�0



�-�<P: 420��[�xg�wO(ugP�



���[hQ'`-��[zl�[(WO(u����f�[�xKNMR��[�x�_�O(u�vgP� ()Yxe)0�`�S�N-��[ 1 �T 998 )YKN���v<P�b-��[)Yxe�p 0��NAQ1��zsS���f0



0�[�xg�wO(ugP�
0
N�_��N�0�[�xgw�O(ugP�
0�d�^�0�[�xgw�O(ugP�
0-��[�p 0�h�:y�[�x8l`�
Ng0Rg0�Y�g0�[�xgw�O(ugP�
0-��[�p 0�GR0�[�xg�wO(ugP�
0�S�N-��[�p�N�e 0 0R 998 KN���v�NUOxe<P0



�Y�g�`����07_6R�WL��[�xwkz��
0uHe�ˊ\0�[�xg�wO(ugP�
0-��p 0 �N
N0傒l	g-��[0�[�xg�wO(ugP�
0�O(u��O�S͑�O(u�[�x��v0R�S&P�pbk0�-�<P&N*g�O�_dk�^p��@b�N�|q}�{t�T�S�pO(u�c�[�[�x�6q�_(WO(u�{veQBf��Bl���f�|q}�{t�T�[��v�[�x0�Y�g0�[�xwkz��
0-��p 0�O(u��O
N�x��d�e�[�x0�Vdk�9h�d�-��[7_6R�WL��[�xwkz��] -��[�p 10



�-�<P:



(W�}�W�c6R�z
N�p 10

(Whs�z:O
ghV
N�p 00



�la: �O�-��b�T��f�gu��_vQ�}�W�c6R�z�v-��[0�g\�[�xw��^



dk�[hQ-��[zl�[O(u�3^6b�[�x�SS+T�vg\W[CQxe0



dk-��[�vg'Y<P�Szl�e0>e�[g\�[�xw��^P�6R
0�v-��[<P0



�Y�g*g�[�0>e�[g\�[�xw��^P�6R
0-��[�GRdk-��[�S�N-��p 0 0R 140



�Y�g�]�[�&N\P(u0>e�[g\�[�xw��^P�6R
0-��[�GRdk-��[�S�N-��p 0 0R 140



�Y�g�]�[�&N_U(u0>e�[g\�[�xw��^P�6R
0-��[�GRdk-��[�S�N-��p 0 0R 1280



\@b��vW[CQxe-��[�p 0 h�:y
N����[�x0



�la�9h�d�-��b�T��f�gu��_vQ�}�W�c6R�z�v-��[0



�-�<P�



(W�}�W�c6R�z
N�p 70

(Whs�z:O
ghV
N�p 00



�dk-��[��N� 14�GR�S��gq_���(u6b�z0
g�R�T�a(uz_�v�v�['`�Microsoft �^p��`�P(WO(u0g\�[�xw��^
0=z8h-��[�,nf��e-��[-N�v[o(W
N�v�['`�_�Mb\dk-��[-��p'Y�e 140



�Y�s�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?LinkId=20971910



�[�x�_�&{T�ܖ'`�Bl



���[hQ'`-��[zl�[�[�x/f&T�_�&{T�ܖ'`�Bl0



�Y�g_U(u�Ndk�SGR�GR�[�x�_�&{TNRg\�Bl:




NS+TO(u��v3^6b
T1zhQ
T-N���N�iQP�N
N�v#��~W[CQ

w��^�\�p 6 PW[CQ

S+TNR�V.zW[CQ-N�v	N.z:

�e'Y�[W[CQ (A 0R Z)

�e\�[W[CQ (a 0R z)

10 2�MOxeW[ (0 0R 9)

^��eW[�kW[CQ (�O�Y: !0$0#0%)

�^�zb���f�[�xBfg7_6R�WL��ܖ'`�Bl0







�-�<P:



(W�}�W�c6R�z
N�p_U(u0

(Whs�z:O
ghV
N�p\P(u0



�la: 9h�d�-��b�T��f�g�O�_vQ�}�W�c6R�z�v-��[0	O(u�S���S�v�R�[�OX[>e�[�x



���[hQ'`-��[zl�[\Omi�|q}/f&TO(u�S���S�v�R�[�OX[>e�[�x0



dk�SGR/e�c�a(uz_O(u����wS�O(u��[�x�O2�L�W�I��v�
�TS�[0O(u�S���S�v�R�[�OX[>e�[�x��W,g
N�TX[>e}�eW[�[�x/f�vT�v0�W�e�Pt1u�d�^��a(uz_�Bl�k�Ow��[�xnj
�͑���&TGRU}
N�ar�_U(u�P�SGR0



vu�N�`��zX[�Sb�}���}�W�I�
g�R (IAS) O(u Challenge-Handshake W�I��
�TS�[�OW�I�Bf��O������SGR0(W�}���}�nj
�
g�R (IIS) -NO(uXd��_W�I�Bf�_N����P�SGR0



�-�<P: �]\P(u0�3^6b���[g��



dk�[hQ'`-��[zl�[(W���[3^6b��R�d����[KNMR���g|~�~���[�vR�xe0�S(u�v�{
W/f�_ 0 R�0R 99,999 R�0�Y�g\3^6b���[g��-��[�p 0�\g|~�~���[3^6b��v0R�|q}�{t�Tf�x\r�3^6b�d����[0



�Y�g�]�[�3^6b���[��<P�3^6b���[g���_�'Y�ebI{�e͑-�Bf��0



�-�<P: !q��V�p�S	gvuc�[3^6b���[��<PBf�dk�SGR-��[Mb	ga�0�3^6b���[��<P



dk�[hQ'`-��[zl�[\�O(u�3^6b�����[�vVf�{veQ1YWe!kxe0d�^�1u�|q}�{t�T͑-�br�3^6b�v���[g���]0Rg�&TGR!q�lO(ur����[3^6b0�`�S�N\1YWe�v{veQVf�<P-��[�p�N�e 0 0R 999 KN��0�Y�g\<P-��[�p 0�\8l`�
Ng���[r�3^6b0




\O(u CTRL+ALT+DELETE b�S�[�x�Ow��v��U^�Ow�݈n�O���[�v�]\O�zbb�T:O
ghV8�eQ�[�x1YWe�_N�{/f1YWe�v{veQVf�0



�-�<P: 00�͑-�3^6b���[�xehV�vBf��



dk�[hQ'`-��[zl�[(W{veQVf�1YWeKN�_�_��}N�~^R��Mbg\1YWe�v{veQVf��xehV͑-��p 0 !k1YWe0�S(u�v�{
W/f�_ 1 R�0R 99,999 R�0



�Y�g�]�[�3^6b���[��<P�dk͑-�Bf���_�\�ebI{�e3^6b���[g��0



�-�<P: !q��V�p�S	gvuc�[3^6b���[��<PBf�dk�SGR-��[Mb	ga�0�7_6R�WL�O(u�{veQP�6R



dk�[hQ'`-��[zl�[ Kerberos V5 ёp�|vHO-N�_ (KDC) /f&Tgݑ
\O(u�3^6b�vO(u�
kP��SGR��OW�I��]\O���khyI��v�kP��Bl0W�I��]\O���khyI��v�kP��Bl/fx�(u�v��V�pM�Y�vek_������N�NBf���N�S��gn�}�_�}�X[�S
g�R�v��^0



�-�<P: �]_U(u0
g�RhyI�gw�X[Yug



���[hQ'`-��[zl�[�c��v�]\O���khyI��S(u�OX[�Syr�[
g�R�vgw�Bf�� (R�)0dk-��[�_�'Y�e 10 R�N
N'Y�e0O(u�hyI�gw�X[Yug
0�v-��[0



�Y�g(u6b�z(W��Bl:O
ghV#��}Bf�Q:y�N0Rg�v�]\O���khyI��:O
ghVg�P�VNGR/���
�o`0(u6b�z�_�T Kerberos V5 ёp�|vHO-N�_ (KDC) ��Bl�e�]\O���khyI�0
NN��N�e#��}W�I��[bu�_��]\O���khyI�/f&T	gHe�O
N͑��0�]\O���khyI��S(u�OW�I��:O
ghV�v�e#��}0�Y�g(u�OW�I�#��}�v�]\O���khyI�(W#��}g��0Rg�2�L�-N�v\Omi
Ng��-N�e0



�-�<P: 600 R� (10 \Bf)0DO(u�hyI�gw�X[Yug



dk�[hQ'`-��[zl�[O(u��vhyI��c
khyI� (TGT) �SO(u�vgw�Bf�� (\Bf)0



�-�<P: 10 \Bf0EO(u�hyI��f�e�vgw�X[Yug



dk�[hQ'`-��[zl�[O(u��vhyI��c
khyI� (TGT) �S��g�f�e�vg�� ()Yxe)0



�-�<P: 7 )Y0���f�Bf�TekU�t�vg'Y�[/�'`



dk�[hQ'`-��[zl�[ Kerberos V5 (W(u6b�zBf���S�WL� Windows Server 2003 &N�c�O Kerberos W�I��v�}�W�c6R�z
N�vBf��KN���S�[1��vg'YBf���]pu (�NR��)0



�p2�bk0͑�e�WL�;e�d
0�Kerberos V5 O(uBf��3b�ZP�pvQ�
�TS�[�[��vN�N0�p�N��Bf��3b��� Yck8^K�\O��}�W�c6R�z�T:O
ghV�vBf��_��v�S��Tek0_N1\/f���iQ�S��f����_�-�b�vT�vBf���T�eg01u�eiQ�S��f��vBf��8^/f
NTek��Vdk�|q}�{t�T�S�NO(u�P�SGR��^�z(u6b�zBf��T�}�W�c6R�zBf�KN�� Kerberos V5 �S�c�S�vg'Y�]pu0�Y�g(u6b�zBf��T�}�W�c6R�zBf�KN���v�]pu\�edk�SGRc�[�vg'YBf���]pu�GRiQ�S��f�KN���]\O���k-NO(u�v�NUOBf��3b�1\g�����pck�x�v0



͑��



(W Vista KNMR�vs^�S
N��P-��[
N/fc�~	gHe0�Y�g�`-��[dk-��[�6q�_͑�e_U�R��f��GRdk-��[g���S0R�-�<P0



�-�<P: 5 R�0C=z8h3^6b{veQ�N�N



dk�[hQ'`-��[zl�[�k!kdk��f�W�I�3^6b�v��I�Bf�\Omi�|q}/f&T2�L�=z8h0



�S����f�
\
kP��{
WgQ�v3^6b��I�2�L�W�I�Bf�1\g"uu{veQ�N�N0�}�Wb�T�*g�ReQ�}�W�v��f�
\vQ,g_j3^6b��wQ	g
kP�; �}�W�c6R�z
\�}�W-N�v3^6b��wQ	g
kP�0��I�W�I��S/e�c,g_j{veQ�b��(W�}�W�c6R�z�v Active Directory �}�W3^6bHh�O-N��S/e�c{veQvQ�N��f�0��I�W�I�/f!q�rKa�v��Vdk3^6b{veQ�N�N
Ng	g
\�a�v{v�Q�N�N0



�Y�g�[�dk�SGR-��[��|q}�{t�T�S�Nc�[�S=z8hb�R�N�N0�S=z8h1YWe�N�N�bTBf=z8hiQ��b/f
N=z8h@b	g�N�N (�O�Y
N=z8hb�Rb1YWe)0



(u6b�zHr,g�v�-�<P:



  ��I�W�I�: �l	g=z8h

  Kerberos 
g�RhyI��d\O: �l	g=z8h

  vQ�N3^6b{veQ�N�N: �l	g=z8h

  Kerberos W�I�
g�R: �l	g=z8h



:O
ghVHr,g�v�-�<P:



  ��I�W�I�: b�R

  Kerberos 
g�RhyI��d\O: b�R

  vQ�N3^6b{veQ�N�N: �l	g=z8h

  Kerberos W�I�
g�R: b�R



͑��: �Y��fY=z8h�SGR�v�c6R�ˊO(u [2���=z8h�SGR-��[] �{ޞ-N�v-��[0�Y� [2���=z8h�SGR-��[] �vs�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?LinkId=1409690\=z8h3^6b�{t



���[hQ'`-��[zl�[/f&T=z8h��f�
N�kN�3^6b�{t�N�N03^6b�{t�N�N�v�{�OS�b:



�^�z0���fb*Rd�O(u�3^6bb�D}0

͑�e}T
T0\P(ub_U(uO(u�3^6b0

-��[b���f�[�x0

傚[��Ndk�SGR-��[��O�S�Nc�[/f&T��=z8hb�R�N�N0=z8h1YWe�N�Nb
N=z8h�N�N^��W0b�R=z8hg(W�NUO3^6b�{t�N�Nb�RBf"uuNP=z8h{v�01YWe=z8hGR(W�NUO3^6b�{t�N�N1YWeBf"uu=z8h{v�0傁�\dk<P-��p [�l	g=z8h]�ˊ(Wdk�SGR-��[�v [gQ�[] 
\q��eJX-N�x��S [�[���N�SGR-��[<P] 8h�S�eJX��Qnd� [b�R] �S [1YWe] 8h�S�eJX0



(u6b�zHr,g�v�-�<P:



  O(u�3^6b�{t: b�R

  ��f�3^6b�{t: �l	g=z8h

  �[hQ'`�D}�{t: b�R

  |vHO�D}�{t: �l	g=z8h

  �a(uz_�D}�{t: �l	g=z8h

  vQ�N3^6b�{t�N�N: �l	g=z8h



:O
ghVHr,g�v�-�<P:



  O(u�3^6b�{t: b�R

  ��f�3^6b�{t: b�R

  �[hQ'`�D}�{t: b�R

  |vHO�D}�{t: �l	g=z8h

  �a(uz_�D}�{t: �l	g=z8h

  vQ�N3^6b�{t�N�N: �l	g=z8h



͑��: �Y��fY=z8h�SGR�v�c6R�ˊO(u [2���=z8h�SGR-��[] �{ޞ-N�v-��[0�Y� [2���=z8h�SGR-��[] �vs�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?LinkId=1409690V=z8h�v�
g�RX[�S



dk�[hQ'`-��[zl�[�|q}(WO(u�Vf�X[�S Active Directory ir�NBf/f&T2�L�=z8h0�S	g�]c�[�|q}X[�S�c6Rn�U (SACL) �vir�N��N�S��Bl�vX[�S^��W (�O�Y�[eQ0���Sb�O9e) �T|v�Q��Bl�v3^6b&{T SACL �v-��[Bf�Mbg"uu=z8h0



�|q}�{t�T�S�Nc�[�S=z8hb�R�N�N0�S=z8h1YWe�N�N�bTBf=z8hiQ��b/f
N=z8h@b	g�N�N (�O�Y
N=z8hb�Rb1YWe)0



�Y�g_U(u [b�R] =z8h�GR�NUO3^6bb�RX[�S�]c�[�v&{KN SACL �v Directory ir�NBf�1\g"uu=z8h{v�0



�Y�g_U(u [1YWe] =z8h�GR�NUOO(u�!q�lb�RX[�S�]c�[�v&{KN SACL �v Directory ir�NBf�1\g"uu=z8h{v�0



(u6b�zHr,g�v�-�<P:



  �v�
g�RX[�S: �l	g=z8h

  �v�
g�R���f: �l	g=z8h

  �v�
g�R��[: �l	g=z8h

  s�0}�v�
g�R��[: �l	g=z8h



:O
ghVHr,g�v�-�<P:



  �v�
g�RX[�S: b�R

  �v�
g�R���f: �l	g=z8h

  �v�
g�R��[: �l	g=z8h

  s�0}�v�
g�R��[: �l	g=z8h



͑��: �Y��fY=z8h�SGR�v�c6R�ˊO(u [2���=z8h�SGR-��[] �{ޞ-N�v-��[0�Y� [2���=z8h�SGR-��[] �vs�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?LinkId=1409690:=z8h{veQ�N�N



dk�[hQ'`-��[zl�[O(u�Vf�{veQb{v�Qdk��f�Bf�\Omi�|q}/f&T2�L�=z8h0



�S��{veQ�vO(u�3^6b{veQ�]\O���kB}bk��Og"uu{v�Q�N�N0�Y�g�[�dk�SGR-��[��|q}�{t�T�S�Nc�[�S=z8hb�R�N�N0�S=z8h1YWe�N�N�bTBf=z8hiQ��b/f
N=z8h@b	g�N�N (�O�Y
N=z8hb�Rb1YWe)0



(u6b�zHr,g�v�-�<P:



  {veQ: b�R

  {v�Q: b�R

  3^6b���[: b�R

  IPsec ;N��!j_: �l	g=z8h

  IPsec �_�!j_: �l	g=z8h

  IPsec �^8O!j_: �l	g=z8h

  yr�k{veQ: b�R

  vQ�N{veQ/{v�Q�N�N: �l	g=z8h

  �}SGR:O
ghV: b�R01YWe



:O
ghVHr,g�v�-�<P:

  {veQ: b�R01YWe

  {v�Q: b�R

  3^6b���[: b�R

  IPsec ;N��!j_: �l	g=z8h

  IPsec �_�!j_: �l	g=z8h

  IPsec �^8O!j_: �l	g=z8h

  yr�k{veQ: b�R

  vQ�N{veQ/{v�Q�N�N: �l	g=z8h

  �}SGR:O
ghV: b�R01YWe



͑��: �Y��fY=z8h�SGR�v�c6R�ˊO(u [2���=z8h�SGR-��[] �{ޞ-N�v-��[0�Y� [2���=z8h�SGR-��[] �vs�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?LinkId=1409690�=z8hir�NX[�S



dk�[hQ'`-��[zl�[O(u�Vf�X[�S^� Active Directory ir�NBf�\Omi�|q}/f&T2�L�=z8h0�S	g�]c�[�|q}X[�S�c6Rn�U (SACL) �vir�N��N�S��Bl�vX[�S^��W (�O�Y�[eQ0���Sb�O9e) �T|v�Q��Bl�v3^6b&{T SACL �v-��[Bf�Mbg"uu=z8h0



�|q}�{t�T�S�Nc�[�S=z8hb�R�N�N0�S=z8h1YWe�N�N�bTBf=z8hiQ��b/f
N=z8h@b	g�N�N (�O�Y
N=z8hb�Rb1YWe)0



�Y�g_U(u [b�R] =z8h�GR�NUO3^6bb�RX[�S�]c�[�v&{KN SACL �v^� Directory ir�NBf�1\g"uu=z8h{v�0



�Y�g_U(u [1YWe] =z8h�GR�NUOO(u�!q�lb�RX[�S�]c�[�v&{KN SACL �v^� Directory ir�NBf�1\g"uu=z8h{v�0



�la��`�S�NO(uir�N [gQ�[] 
\q��eJX-N�v [�[hQ'`] "}_jd|�O-��[�jHh�|q}ir�N�v SACL0



�-�<P: �l	g=z8h0



͑��: �Y��fY=z8h�SGR�v�c6R�ˊO(u [2���=z8h�SGR-��[] �{ޞ-N�v-��[0�Y� [2���=z8h�SGR-��[] �vs�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?LinkId=1409690�=z8h�SGR���f



dk�[hQ'`-��[zl�[�k!kVf����fO(u�
kP�c>m�SGR0=z8h�SGR03^6b�SGRb�O�N�SGRBf�\Omi�|q}/f&T2�L�=z8h0



�|q}�{t�T�S�Nc�[�S=z8hb�R�N�N0�S=z8h1YWe�N�N�bTBf=z8hiQ��b/f
N=z8h@b	g�N�N (�O�Y
N=z8hb�Rb1YWe)0



�Y�g_U(u [b�R] =z8h�GRVf����fO(u�
kP�c>m�SGR0=z8h�SGRb�O�N�SGRb�R�_��Og"uu=z8h{v�0



�Y�g_U(u [1YWe] =z8h�GR*grs�c
k�S���f��BlKN�SGR�v3^6b(WVf����fO(u�
kP�c>m�SGR0=z8h�SGRb�O�N�SGRBf�1\g"uu=z8h{v�0



 �-�<P:



  =z8h�SGR���f: b�R

  W�I��SGR���f: b�R

  �c
k�SGR���f: �l	g=z8h

  MPSSVC ��GRd\}�SGR���f: �l	g=z8h

  �{x�s^�S�SGR���f: �l	g=z8h

  vQ�N�SGR���f�N�N: �l	g=z8h



͑��: �Y��fY=z8h�SGR�v�c6R�ˊO(u [2���=z8h�SGR-��[] �{ޞ-N�v-��[0�Y� [2���=z8h�SGR-��[] �vs�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?LinkId=1409690S=z8hyr�k
kP�O(u



���[hQ'`-��[zl�[/f&T=z8he\L�O(u�
kP��v�kNPO(u��WL�PԚ0



�Y�g�[��Ndk�SGR-��[��O�S�Nc�[/f&T��=z8hb�R�N�N0=z8h1YWe�N�Nb�[hQ
N=z8h�^��W�v�N�N0b�R=z8hg(We\L�O(u�
kP�b�RBf"uuNP=z8h{v�01YWe=z8hGR(We\L�O(u�
kP�1YWeBf"uu=z8h{v�0



傁�\dk<P-��p [�l	g=z8h]�ˊ(Wdk�SGR-��[�v [gQ�[] 
\q��eJX-N�x��S [�[���N�SGR-��[<P] 8h�S�eJX��Qnd� [b�R] �S [1YWe] 8h�S�eJX0



�-�<P: [�l	g=z8h]0



sSOb�R=z8hb1YWe=z8hc�[�p [=z8hyr�k
kP�O(u]�O(uNRO(u�
kP�Bf_N
Ng"uu=z8h0_U(u��NO(u�
kP��v=z8h�g(W�[hQ'`���j-N"uu1�Y�N�N���Yy�`��f��vHe��0傁�=z8hNRO(u�
kP��ˊ_U(u FullPrivilegeAuditing {v�_j�x0



euN�hTJ��j�g

z_uP/�

�^�z
kVgir�N

�f�cU�td\
kVg

"uu�[hQ'`=z8h

�P�N�jHh�S�v�

���S�jHh�S�v�



f�JT




Nck�x0W�}/�{v�\g
\�|q} �b�V͑�v
d�[0(W���f{v�MR��`�aHQ�P�N��f�
N�NUO	g�P<P�vnj�e0



͑��: �Y��fY=z8h�SGR�v�c6R�ˊO(u [2���=z8h�SGR-��[] �{ޞ-N�v-��[0�Y� [2���=z8h�SGR-��[] �vs�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?LinkId=1409690V=z8hz�^��d�



dk�[hQ'`-��[zl�[\Omi�|q}/f&T=z8hz�^�vܕ�N�N��O�Yz�^�^�z0z�^B}bk0�c6R�x͑��T���cir�NX[�S0



�Y�g�[�dk�SGR-��[��|q}�{t�T�S�Nc�[�S=z8hb�R�N�N0�S=z8h1YWe�N�N�bTBf=z8hiQ��b/f
N=z8h@b	g�N�N (�O�Y
N=z8hb�Rb1YWe)0



�Y�g_U(u [b�R] =z8h�GR�k!k\Omi�|q}�WL�
N�z�^�vܕ;m�RBf�1\g"uu=z8h{v�0



�Y�g_U(u [1YWe] =z8h�GR�k!k\Omi�|q}�WL�
N�;m�R1YWeBf�1\g"uu=z8h{v�0



�-�<P: �l	g=z8h



͑��: �Y��fY=z8h�SGR�v�c6R�ˊO(u [2���=z8h�SGR-��[] �{ޞ-N�v-��[0�Y� [2���=z8h�SGR-��[] �vs�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?LinkId=1409690�=z8h�|q}�N�N



dk�[hQ'`-��[zl�[\Omi�|q}/f&T=z8hNR�NN�N�N:



"  Vf����f�|q}Bf��

"  Vf�_U�Rbܕ���[hQ'`�|q}

"  Vf�	�eQ�S�^8O�vW�I�CQ�N

"  �V�p=z8h�|q}1YWe�z�1Y=z8h�v�N�N

"  �[hQ'`���j'Y\��N��S-��[�vf�JT��<PI{}0



�Y�g�[�dk�SGR-��[��|q}�{t�T�S�Nc�[�S=z8hb�R�N�N0�S=z8h1YWe�N�N�bTBf=z8hiQ��b/f
N=z8h@b	g�N�N (�O�Y
N=z8hb�Rb1YWe)0



�Y�g_U(u [b�R] =z8h�GR�k!k\Omi�|q}b�R�WL�
N�;m�RBf�1\g"uu=z8h{v�0



�Y�g_U(u [1YWe] =z8h�GR�k!k\Omi�|q}Vf��WL�
N�;m�R1YWeBf�1\g"uu=z8h{v�0



�-�<P:

�[hQ'`�rKa���f  b�R

�[hQ'`�|q}�^8O  �l	g=z8h

�|q}�[te'`  b�R01YWe

IPsec E��Rz_  �l	g=z8h

vQ�N�|q}�N�N  b�R01YWe



͑��: �Y��fY=z8h�SGR�v�c6R�ˊO(u [2���=z8h�SGR-��[] �{ޞ-N�v-��[0�Y� [2���=z8h�SGR-��[] �vs�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?LinkId=14096901�_�}�X[�S��S��f�



dkO(u�
kP�zl�[AQ1��T�NO(u��S�D}�N��}�#��}0R��S��f�0`��zLhb�
g�R
N�SdkO(u�
kP��vq_��0



�la: `��zLhb�
g�R(W
�Hr�v Windows Server -N1z�p0B}�z_j
g�R
00



(W�]\O�z�S:O
ghV
N�v�-�<P:

Administrators

Backup Operators

Users

Everyone



(W�}�W�c6R�z
N�v�-�<P:

Administrators

Authenticated Users

Enterprise Domain Controllers

Everyone

Pre-Windows 2000 Compatible AccessJvub\Omi�|q}�vN�R



dkO(u�
kP��S��U�tz�^!j�d�NUOO(u���!q�W�I�0�VdkU�tz�^1\�S�N�S�_�r�O(u��vT�v,g_jnj�nX[�S
k0



���dkyr�k
kP��vU�tz�^�aO(u LocalSystem 3^6b (vQ�]S�bdkyr�k
kP�)��
N�aO(uvQ�Nyr%Rc>mdkyr�k
kP��vO(u�3^6b0�Y�g�`�vD}T~�PO(u Windows Server 2003 �|Rb�T�v:O
ghV�GR�`!q�\dkyr�k
kP�c>mf}O(u�0
NN���Y�g�`�vD}T~O(u�WL� Windows 2000 b Windows NT 4.0 �v:O
ghV�GR�`�S�����c>mdkyr�k
kP���NO(u�N}�eW[�N�c�[�x�v�a(uz_0



f�JT



c>mdkO(u�
kP��S��gqS�S�[hQ'`0ˊ�P\dkO(u�
kP�c>mf}�O�N�vO(u�0



�-�<P: !q0�\�]\O�z�e�X�}�W



dk�[hQ'`-��[zl�[�T�N�D}bO(u��S\�]\O�z�e�X�}�W0



dk�[hQ'`-��[�S(W�}�W�c6R�z	gHe0�NUO�]W�I��vO(u��-���	g�P
kP���NgY�S(W�}�WgQ�^�z 10 P��f�3^6b0



\��f�3^6b�e�X0R�}�W��S����f��S� Active Directory �p;N�v�}R��0�O�Y�\�]\O�z�ReQ�}�W��S��r��]\O�z��X� Active Directory -N�v3^6b�T�D}0



�-�<P: �}�W�c6R�z
N�v�]W�I�O(u�0



�la: (W Active Directory ��f��[hV-N�d	g [�^�z��f�ir�N] yr�k
kP��vO(u��_N�S�N(W�}�W-N�^�z��f�3^6b0
NT�v/f��[hV
NwQ	g
kP��vO(u�
Ng�S0R�S���^�z 10 P��f�3^6b�vP�6R0dkY�)R(u [\�]\O�z�e�X�}�W] @b�^�z�v��f�3^6b\�}�W�|q}�{t�Tvu\O��f�3^6b�d	g���)R(u��f��[hV
kP�@b�^�z�v��f�3^6b\�^�z�vu\O��f�3^6b�d	g�0�Y�gO(u��d	g�[hV
kP��_N�d	g [\�]\O�z�e�X�}�W] O(u�
kP��GRg9h�d��f��[hV
kP��O�e�X��f���^�9h�dO(u�
kP�0



���teU�tz�^�v��aԚM�M�



dkyr�k
kP�zl�[�����fU�tz�^�SO(u�vg'Y��aԚ�v�N�T0



dkO(u�
kP��[�(W [�-��}�W�c6R�z�D}�SGR] ir�N (GPO) �S�]\O�z0:O
ghV�v,g_j�[hQ'`�SGR-N0



�la: dkyr�k
kP�	g�R�e�|q}��te�FO�S��g���o(u��O�Y�bU}
g�R�v;e�d0



�-�<P: Administrators

Local Service

Network Service0



5,g_j{veQ



zl�[�T�NO(u��S�N{veQ��f�0



͑��



�O9edk-��[�S��gq_��(u6b�z0
g�R�T�a(uz_�v�v�['`0�Y�dk-��[�v�v�['`nj
��ˊ�S�� Microsoft �}�z
N�v0AQ1�,g_j{veQ
0(https://go.microsoft.com/fwlink/?LinkId=24268 )0



�-�<P:



"  (W�]\O�z�:O
ghV
N: Administrators0Backup Operators0Power Users0Users � Guest0

"  (W�}�W�c6R�z
N: Account Operators0Administrators0Backup Operators �T Print Operators0�AQ1��N�`��zLhb�
g�R{veQ



dk�[hQ'`-��[zl�[�T�NO(u�b�D}�d	g�N`��zLhb�
g�R(u6b�z{veQ�v
kP�0



�-�<P:



(W�]\O�z�S:O
ghV
N: Administrators0Remote Desktop Users0

(W�}�W�c6R�z
N: Administrators0



͑��



dk-��[
\�e\*gGS}� Service Pack 2 �v Windows 2000 ��f��l	g�NUOq_��0



c�P�N�jHh�S�v�



dkO(u�
kP�zl�[�T�NO(u��S�N�Q�e�P�N�|q}�v�v�v�euN��jHh�S�v�0{v��SvQ�Nc�~ir�N
kP�0



wQԚ���dkO(u�
kP�^�<O�e\�|q}
N@b	g�jHh�Snj�e>Y�vNR
kP��c��vܕ�vO(u�b�D}:



hTJ�nj�e>Y/�WL��jHh

R�Qnj�e>Y/���Snj�e

���Sl\'`

���S�dEQl\'`

���S
kP�



f�JT



c>mdkO(u�
kP��S��gqS�S�[hQ'`01u�e�l	g�e�l�S�x�[O(u�/f&Tck(W�P�Nnj�e0�z�Snj�eb�����|vL��vnj�e��Vdkˊ�S\dkO(u�
kP�c>mf}�S�O�N�vO(u�0



(W�]\O�z�S:O
ghV
N�v�-�<P: Administrators

Backup Operators0



(W�}�W�c6R�z
N�v�-�<P:Administrators

Backup Operators

Server Operators



meuN�hTJ��j�g



dkO(u�
kP�zl�[�T�NO(u�sSO�l	ghTJ��v��v
kP��_N�� YhTJ��v�9j�rP}�i0dkyr�k
kP�
NAQ1�O(u�R�Q�v��vgQ�[���S��hTJ��v�0



dkO(u�
kP��[�(W [�-��}�W�c6R�z�D}�SGR] ir�N (GPO) �S�]\O�z0:O
ghV�v,g_j�[hQ'`�SGR-N0



(W�]\O�z�S:O
ghV
N�v�-�<P:

Administrators

Backup Operators

Users

Everyone

Local Service

Network Service



(W�}�W�c6R�z
N�v�-�<P:

Administrators

Authenticated Users

Everyone

Local Service

Network Service

Pre-Windows 2000 Compatible Access



���f�|q}Bf��



dkO(u�
kP�zl�[�T�NO(u��T�D}�� Y���f��f�gQ�Bf��vBf���T�eg0�]c>mdkO(u�
kP��vO(u��Szl�[�N�N���j�vY��0�Y�g�|q}Bf��m�0R���f����v�N�N\g�S f�Q�e�vBf����^��N�N|vu�v�[��Bf��0



dkO(u�
kP��[�(W [�-��}�W�c6R�z�D}�SGR] ir�N (GPO) �S�]\O�z0:O
ghV�v,g_j�[hQ'`�SGR-N0



(W�]\O�z�S:O
ghV
N�v�-�<P:

Administrators

Local Service



(W�}�W�c6R�z
N�v�-�<P:

Administrators

Server Operators

Local Service



��^�zR��j



dkO(u�
kP�zl�[�T�NO(u��S�D}�� Y|T�SgQ��a(uz_��|v�Nb� (API) �O�^�zR��j�S���fvQ'Y\0dkO(u�
kP�/f1u\Omi�|q}gQ�O(uN�8^
N���c>mf}�NUOO(u�0



�Y�	gܕ�YUO�pc�[�v�x�x_jc�[R��j'Y\�vs�0}nj
��ˊ�S��0���f[��d��aԚR��j�v'Y\
00



�-�<P: Administrators0



��^�z
kVgir�N



dk�[hQ'`-��[zl�[U�tz�^�SO(u�T�N3^6b�O�^�z
kVg�6q�_(WU�tz�^O(ugQ��a(uz_��|v�Nb� (API) �O�^�zX[�S
kVgBf�(u�N�S�_�NUO,g_jnj�n�vX[�S
k0



dkO(u�
kP�/f1u\Omi�|q}gQ�O(u0d�^�	gdk�_���&TGR
N��\dkO(u�
kP�c>mf} Local System �NY�vO(u�0�D}bU�tz�^0



f�JT



c>mdkO(u�
kP��S��gqS�S�[hQ'`0
N��\dkO(u�
kP�c>mf}
N�`1uvQ�c�c�|q}�v�NUOO(u�0�D}bU�tz�^0

�-�<P: !q0



��^�zhQ�Wir�N



dk�[hQ'`-��[zl�[O(u�/f&T�S�N�^�z@b	g�]\O���k�S(u�vhQ�Wir�N0�Y�gO(u��l	gdkO(u�
kP���N6q�S�N�^�z��]�]\O���k\(u�vir�N0�S�N�^�zhQ�Wir�N�vO(u��S��gq_��vQ�NO(u��]\O���k�vz�^��V��S��\��a(uz_1YWebnj�e
d�k0



f�JT



c>mdkO(u�
kP��S��gqS�S�[hQ'`0ˊ�S\dkO(u�
kP�c>mf}�O�N�vO(u�0



�-�<P:



Administrators

Local Service

Network Service

Service}�^�z8lENqQ(uir�N



dkO(u�
kP�zl�[�T�N3^6bU�tz�^�S�NO(uir�N�{t�T�O�^�z�v�ir�N0



dkO(u�
kP�/f1u\Omi�|q}gQ�O(u�N	g�R�e�^8Oir�N}T
Tzz��0�V�pdkO(u�
kP��]�}c>mf}(W8h�_!j_N�WL��vCQ�N�@b�N
N���yr%Rc>m0



�-�<P: !q0PA�uP/�z_



dkO(u�
kP�zl�[�T�NO(u��S\uP/��]wQD��R0R�NUOU�tz�^b8h�_0
N���\dkO(u�
kP�c>mf}
\�L���|v�v�a(uz_2�L�uP/��v��|v�N�T0FO��|v�N�T���dkO(u�
kP��Mb��
\�e�v�|q}CQ�N2�L�uP/�0dkO(u�
kP��S
\_j�[Nܕu��v\Omi�|q}CQ�N�c�O�[teX[�S
k0



f�JT



c>mdkO(u�
kP��S��gqS�S�[hQ'`0�S\dkO(u�
kP�c>mf}�O�N�vO(u�0



�-�<P: Administratorsa�bU}�_�}�X[�S��S��f�



dk�[hQ'`-��[zl�[g;�bk�T�NO(u��_�}�X[�S��f�0dk�SGR-��[g�S�N [�_�}�X[�S��S��f�] �SGR-��[��Y�gO(u�3^6bTBf�SP��e�iQ.z�SGR0



�-�<P: Guest]�bU}�Nyb!k�]\O{veQ



dk�[hQ'`-��[zl�[g;�bk�T�N3^6b�Nyb!k�]\O{veQ0dk�SGR-��[g�S�N [�Nyb!k�]\O{veQ] �SGR-��[��Y�gO(u�3^6bTBf�SP��e�iQ.z�SGR0



�-�<P: !q0



��bU}�N
g�R�e_{veQ



dk�[hQ'`-��[zl�[g;�bk�T�N
g�R3^6b�N
g�R�e_{v�U�tz�^0dk�SGR-��[g�S�N [�N
g�R�e_{veQ] �SGR-��[��Y�g3^6bTBf�SP��e�iQ.z�SGR0



�la: dk�[hQ'`-��[
Ni�(u�e System0Local Service b Network Service 3^6b0



�-�<P: !q0}�bU},g_j{veQ



dk�[hQ'`-��[zl�[g;�bk�T�NO(u�{veQ��f�0dk�SGR-��[g�S�N [AQ1�,g_j{veQ] �SGR-��[��Y�g3^6bTBf�SP��e�iQ.z�SGR0



͑��



�Y�g\dk�[hQ'`�SGRWY(u0R Everyone �D}�\!q�N�� Y{veQ,g_j0



�-�<P: !q0w�bU}�N�`��zLhb�
g�R{veQ



dk�[hQ'`-��[zl�[g�ybk�T�NO(u��S�D}�N`��zLhb�
g�R(u6b�z{veQ0



�-�<P: !q0



͑��



dk-��[
\�e\*gGS}� Service Pack 2 �v Windows 2000 ��f��l	g�NUOq_��0q����f��SO(u�3^6b�S�O���N2�L��Y>m



dk�[hQ'`-��[zl�[�T�NO(u��S�N(WO(u�b��f�ir�N
N-��[ [�O�N�Y>m] -��[0



�d	gdkyr�k
kP��vO(u�bir�N��N��d	g
\O(u�b��f�ir�NKN3^6b�c6R�ej�v�[eQX[�S
k0(W���O�N�N�O2�L��Y>m�v��f�
N (b(WO(u��t�XN)�@b�WL��v:O
ghVU�tz�^�S�N�(u6b�z�v�Y>m��I��OX[�S�SN�S��f��vnj�n�MR�c/f(u6b�z3^6b
N��	g [!q�l�Y>m3^6b] 3^6b�c6R�ej-��[0



dkO(u�
kP�g�[�(W [�-��}�W�c6R�z�D}�SGR] ir�N (GPO) �S�]\O�z0:O
ghV�v,g_j�[hQ'`�SGR-N0



f�JT



�o(udkO(u�
kP�b [�O�N�Y>m] -��[�g �b�}�^�8^�[f�S0Ryrm
O(g��z_�v;e�d; dkz_g!j�d#�eQ(u6b�z�&NO(uvQ��I���S�_
\�}�nj�n�vX[�S
k0



�-�<P: (W�}�W�c6R�z
N�p Administrators0�7_6R�_`��z�|q}2�L�ܕ��



dk�[hQ'`-��[zl�[�T�NO(u��� Y�_�}�
N�v`��zMOn\��f�ܕ_j0�o(udkO(u�
kP�g �b�bU}
g�R0



dkO(u�
kP��[�(W [�-��}�W�c6R�z�D}�SGR] ir�N (GPO) �S�]\O�z0:O
ghV�v,g_j�[hQ'`�SGR-N0



�-�<P:



(W�]\O�z�S:O
ghV
N: Administrators0

(W�}�W�c6R�z
N: Administrators0Server Operators0�"uu�[hQ'`=z8h



dk�[hQ'`-��[zl�[U�tz�^�SO(u�T�N3^6b\��v�e�X0R�[hQ'`��0dk�[hQ'`���j/f(u�O��d�*g�}�c
k�v�|q}X[�S0�Y�g_U(u [=z8h: vu!q�l���[hQ'`=z8hBf��|q}�zsSܕ_j] �[hQ'`�SGR-��[��o(udkO(u�
kP�g\�"uu1�Y=z8h�N�N0�S��g��υ;e�d�v��X���b �b�bU}
g�R0�Y�vQ�Nnj
��ˊ�S��0=z8h: vu!q�l���[hQ'`=z8hBf��|q}�zsSܕ_j
00



�-�<P: Local Service

Network Service0�(WW�I��_!j�d(u6b�z



\dkyr�k
kP�c�[f}O(u��S���Nh�r�O(u��WL��vz_!j�d(u6b�z0��BldkO(u�
kP��N2�L�dk^�!j�d��S2�bk*g�}�c
k�vO(u���
g(u6b�z#��c (�O�Y��N�`��zz�^|T�S (RPC) bwQ
T�{S�) ��NP@b�^�z�v
g�R6q�_!j�dr�(u6b�z�2���MQ\*g�c
kO(u��v
kP��cGS0R�{tb�|q}d\}0



f�JT



c>mdkO(u�
kP��S��gqS�S�[hQ'`0ˊ�P\dkO(u�
kP�c>mf}�O�N�vO(u�0



�-�<P:



Administrators

Local Service

Network Service

Service



�la: �O�-��1u0
g�R�c6R�{t�T
0_U�R�v
g�Rg\gQ�^�v Service �D}�ReQvQX[�S
kVg01u COM �WyP}�i@b_U�RN-��[(Wyr�[�v3^6bN�WL��vCQ�Nir�N!j�W (COM) :O
ghV(WvQX[�S
kVg-N_N�e�X	g Service �D}0P}�g/f��N
g�Rg(W_U�R�vBfP�S�_dkO(u��v
k)R0



dkY�O(u�_N�S(W	gNR�NN�`�lBf!j�dX[�S
kVg:



��!j�d�vX[�S
kVgl\�edkO(u�0

(Wdk{veQ�]\O���k-N�vO(u��Nf�x�v��I�{veQ�}O�^�zX[�S
kVg0

��Bl�vd\}�k!j�d�vNO��O�Y0?S
T
0b0��RX�%R
00

�W�e��N�V }�O(u��8^
N���dkO(u�
kP�0



�Y��vܕnj
��ˊ(W Microsoft Platform SDK -Nd\ "SeImpersonatePrivilege"0



f�JT



�Y�g�`_U(u�P-��[�HQMRwQ	g0!j�d
0yr�k
kP��v�a(uz_�S��gz�1Yr�
kP��&NN�S��!q�l�WL�0��X�R�cz*QHQ��^



dk�[hQ'`-��[zl�[�T�N3^6b��O(uwQ	g�[eQgQ�[�vU�tz�^X[�SvQ�NU�tz�^��O�X�Rc>mf}vQ�NU�tz�^�v�WL�*QHQ��^0wQ	gdkyr�k
kP��vO(u��� Y�N� [�]\O�{t�T] O(u��Nb��O���fU�tz�^�v�cz*QHQ��^0



�-�<P: Administrators0�	�eQ�S�d�	�eQ݈nE��Rz_0



dkO(u�
kP�zl�[�T�NO(u���(W8h�_!j_-N�RKa	�eQ�T�d�	�eQ݈nE��Rz_bvQ�Nz_�x0dkO(u�
kP�
Ni�(u�e���csS(u݈nE��Rz_0�^p��`
N��\dkyr�k
kP�c>mf}vQ�NO(u�0



f�JT



c>mdkO(u�
kP��S��gqS�S�[hQ'`0
N��\dkO(u�
kP�c>mf}
N�`1uvQ�c�c�|q}�v�NUOO(u�0�D}bU�tz�^0



(W�]\O�z�S:O
ghV
N�v�-�<P: Administrators0



(W�}�W�c6R�z
N�v�-�<P:

Administrators

Print Operatorsx���[��aԚ-N�vR�



dk�[hQ'`-��[zl�[�T�NO(u���O(uU�tz�^�O�OYu�[Ԛ��aԚ-N�vnj�e�;�bk�|q}\nj�eR�0R�x�x
N�v[��d��aԚ0e\L�dkyr�k
kP�gM�NO�S(u�v��_jX[�S��aԚ (RAM) xeϑ��
\�|q}He�� �bo�W�q_��0



�-�<P: !q0��Nyb!k�]\O{veQ



dk�[hQ'`-��[AQ1�O(u��Nyb!kGOR-��P{veQ�N�P�c�O�
�Hr Windows �v�[KN(u0



�O�Y�vuO(u��N�]\O�czhV�c�N�]\OBf��]\O�czhVg�Nyb!kO(u�{veQr�O(u���
N/f�N�R_O(u�0





�-�<P: Administrators

Backup Operators0��N
g�R�e_{veQ



dk�[hQ'`-��[�S�NAQ1��[hQ'`;NԚ�N
g�R�e_{veQ0
g�R�S�N-��[b�N Local System0Local Service b Network Service 3^6b�WL����N3^6bwQ	ggQ�^
kP��S�N
g�R�e_{veQ0�NUO�NP%R�vO(u�3^6b�WL��v
g�R���_���c>mdk
kP�0



�-�<P: !q0��{t=z8h�S�[hQ'`���j



dk�[hQ-��[zl�[�T�NO(u��� Yc�[P%Rnj�n (�O�Y�jHh0Active Directory ir�N�T{v�_j�x) �vir�NX[�S=z8hx��0



dk�[hQ'`-��[
NAQ1�O(u�_U(u�jHh�Tir�NX[�S=z8h0�Y�_U(u�^�=z8h��O�_�-��[ [��f�-��[\Windows -��[\�[hQ'`-��[\,g_j�SGR\=z8h�SGR] -N�v [=z8hir�NX[�S] -��[0



�`�S�N(W�N�N�j��hV�v�[hQ'`���j-N�j��=z8h�v�N�N0wQ	gdkyr�k
kP��vO(u�_N�S�N�j���Tnd��[hQ'`���j0



�-�<P: Administrators0��O9e̗Ԛ�t�X<P



dk�[hQ'`-��[zl�[UO�N�S�N�O9e̗Ԛ�t�X<P0̗Ԛ�t�X��xe/fX[>e(W^� x86 �W��f�KN^��c|v'` RAM -N�v-��[0-��[�vHe�g���U�thV��[0



(W x86 �W��f�
N��S�N�N�c>m�PO(u�
kP���O9e�v/UN̗Ԛ�t�X<P/f0
N!k�vck�x-��[
0����ar��S1u�|q}�O9e0

(W Itanium �W��f�
N���_jnj
�/f2QX[(W^��c|v'` RAM -N0�_�\dkO(u�
kP�c>mf}O(u��O(u�Mb���WL� bootcfg.exe �S���f [�|q}gQ�[] -N [_U�R�S�O�_] 
N�v [�-�\Omi�|q}] -��[0

(W@b	g�v��f�
N��[݈bGS} Windows �����dkO(u�
kP�0



�la: ���[hQ'`-��[
Ngq_�����O9e�|q}�t�X��xe�SO(u��t�X��xe (MO�e [�|q}gQ�[] �v [2���] "}_jd|) �vO(u�0�Y��YUO�O9e��N��xe�v�vܕnj
��ˊ�S��0�e�Xb���f�t�X��xe<P
00



�-�<P: Administrators0��WL��x�x@S�}w��]\O



dk�[hQ'`-��[zl�[�T�NO(u��S�D}��(W�x�x@S
N�WL��}w��]\O��O�Y`��z�x�x͑D}0



c>mdkO(u�
kP�Bf��yr%R\�_0wQ	gdkO(u�
kP��vO(u��S�Np���x�x�T\�jHh�^8O0RS+TvQ�Nnj�e�v��aԚ-N0vu�^8O�jHh��_UBf�O(u��� Y���S�T�O9e�S�_�vnj�e0



�-�<P: AdministratorsT�v���UNU�tz�^



dk�[hQ'`-��[zl�[�T�NO(u��SO(uHe���v���]wQ�O�v��^��|q}U�tz�^�vHe��0



�-�<P: Administrators0Power users0I�v���|q}He��



dk�[hQ'`-��[zl�[�T�NO(u��SO(uHe���v���]wQ�O�v���|q}U�tz�^�vHe��0



�-�<P: Administrators0



��_�dEQ�^�yd���f�



dk�[hQ'`-��[zl�[O(u�/f&T!q�{veQ�O�S�_�dEQ�^xSd��Se_��f�0



�Y�g_U(udk�SGR�O(u��_�HQ{veQ�Mb���_�dEQ�^�yd��Se_��f�0�Y�g\P(udk�SGR�O(u�!q�{veQ�O�S�_�dEQ�^�yd��Se_��f�0



�-�<P: Administrators0Power Users �T Users0��S�NU�tz�^I{}
kVg



dk�[hQ'`-��[zl�[�T�NO(u�3^6b�� Y|T�S CreateProcessAsUser() �a(uz_��|v�Nb� (API)��YdkNP
g�R�O�� Y_U�R�SNP
g�R0�]\O�czhV�O/fO(udkO(u�
kP��vU�tz�^�{�O0�Y��]\O�czhV�vs�0}nj
��ˊ�S��0�]\O�czhV�i��
00



�-�<P: Network Service0Local Service0_���S�jHh�S�v�



dk�[hQ'`-��[zl�[�T�NO(u��S�N(W���S�P�N�jHh�S�v�Bf�euN��jHh0�v�0{v��SvQ�Nc�~ir�N�v
kP��&Nzl�[�T�NO(u��S�Nir�N�d	g��v��R�-��[�NUO	gHe�v�[hQ'`;NԚ0



wQԚ���dkO(u�
kP�^�<O�e\�|q}
N@b	g�jHh�Snj�e>Y�vNR
kP��c�N�vܕ�vO(u�b�D}:



hTJ�nj�e>Y/�WL��jHh

�[eQ



f�JT



c>mdkO(u�
kP��S��gqS�S�[hQ'`01u�e�d	gO(u�
kP��vO(u��S�N���[{v�-��[0��υnj�e�S�S�_�|q}ir�N�v@b	g
k�ˊ�Pc>m�PO(u�
kP�f}�O�N�vO(u�0



�-�<P:



�]\O�z�:O
ghV: Administrators0Backup Operators0

�}�W�c6R�z: Administrators0Backup Operators0Server Operators0�ܕ���|q}



dk�[hQ'`-��[zl�[�T�N,g_j{veQ��f��vO(u��� YO(u Shutdown }T�N\\Omi�|q}ܕ_j0�o(udkO(u�
kP�g �b�bU}
g�R0



(W�]\O�z
N�v�-�<P: Administrators0Backup Operators0Users0



(W:O
ghV
N�v�-�<P: Administrators0Backup Operators0



(W�}�W�c6R�z
N�v�-�<P: Administrators0Backup Operators0Server Operators0Print Operators0STekU�t�v�
g�Rnj�e



dk�[hQ'`-��[zl�[�c
k�T�NO(u��S�D}TekU�t@b	g�v�
g�Rnj�e0�_N1z�p Active Directory TekU�t0



�-�<P: !q0��S�_�jHhbvQ�Nir�N�v�d	g
k



dk�[hQ'`-��[zl�[�T�NO(u��� Y�S�_�|q}-N�NUO�[hQir�N�v�d	g
k�S�b Active Directory ir�N0�jHh�Snj�e>Y0pSh�_j0{v�_j�x0U�tz�^�T�WL��}0



f�JT



c>mdkO(u�
kP��S��gqS�S�[hQ'`01u�eir�N�d	g�\g�d	g�[hQ�c6R�ˊ�S\dkO(u�
kP�c>mf}�O�N�vO(u�0



�-�<P: Administrators0m3^6b: Administrator 3^6b�rKa



���[hQ'`-��[zl�[��_U(ub\P(u,g_j Administrator 3^6b0



�la



�(W\P(u Administrator 3^6bKN�_Vf�͑�e_U(udk3^6b���sL� Administrator �[�x
N&{T�[�x�Bl��`1\!q�l͑�e_U(udk3^6b0(Wdk�`�lN��_�1u Administrators �D}�v�f�Nb�T͑-� Administrator 3^6b�v�[�x0�Y��YUO͑-��[�x�v�vܕnj
��ˊ�S��0͑-��[�x
00

(W�g�N�`�lN�\P(u Administrator 3^6b�S��gb�p�}w�OUL�0



(W�[hQ!j_��_jBf��S	g��f�*g�ReQ�}�WN�l	gvQ�N,g_j	gHe�v�|q}�{t�T3^6b�Mbg_U(u\P(u�v Administrator 3^6b0�Y�g��f��]�ReQ�}�W�\
Ng_U(u\P(u�v�|q}�{t�T3^6b0



�-�<P: �]\P(u0�3^6b: Guest 3^6b�rKa



dk�[hQ'`-��[zl�[_U(ub\P(u Guest 3^6b0



�-�<P: �]\P(u0



�la: �Y�g\P(u Guest 3^6b��N [�}�X[�S: ,g_j3^6b�vqQ(u�T�[hQ'`!j�W] �[hQ'`x��/f-��[�p [�Pi�(u�e�Oӌ]�GR�}�{veQ (�O�Y�1u Microsoft �}�:O
ghV (SMB 
g�R) @b�WL��v�}�{veQ) \g1YWe0i3^6b: P�6RO(uzz}v�[�x�v,g_j3^6b�P��{veQ0R;N�c�S



���[hQ'`-��[zl�[*g�S�[�x�Ow��v,g_j3^6b�/f&T�S(u�O�_�[Ԛ��f�;N�c�S�NY�vMOn{veQ0�Y�g�]_U(u�����*g�S�[�x�Ow��v,g_j3^6b\�S��Ʌ1u��f�u��v{veQ0



�-�<P: �]_U(u0





f�JT:




N/fMO�e�[���[hQMOn�v��f���aN�vݑ
\@b	g,g_jO(u�3^6b7_6R�WL�7__�[�x�SGR0&TGR��kMO�[��X[�S��f��vO(u��v�SO(u�l	g�[�x�vO(u�3^6b{veQ0�
\�Se_��f��O��$\vQ͑��0

�Y�g�`\dk�[hQ'`�SGRWY(u0R Everyone �D}�GR�NUO�N��
N���N�`��zLhb�
g�R{veQ0



D�;�



�P-��[
\�eO(u�}�W3^6b�v{veQ�l	gq_��0

�a(uz_�O(u`��z�N�R_{veQ�GR�S�N�N��P-��[0



�la: `��zLhb�
g�R(W
�Hr�v Windows Server -N1z�p0B}�z_j
g�R
00�3^6b: ͑�e}T
T�|q}�{t�T3^6b



dk�[hQ'`-��[zl�[
NT�v3^6b
T1z/f&T� Administrator 3^6b�v�[hQ'`X�%R�x (SID) �vܕo�0͑�e}T
T�]�w�v Administrator 3^6bgO*g�}�c
k�v�N�T�
N�[fs�Q	gdkyr�k
kP��vO(u�
T1z�T�[�xD}T0



�-�<P: Administrator03^6b: ͑�e}T
T�Oӌ3^6b
T1z



dk�[hQ'`-��[zl�[
NT�v3^6b
T1z/f&T� "Guest" 3^6b�v�[hQ'`X�%R�x (SID) �vܕo�0͑�e}T
T�]�w�v Guest 3^6bgO*g�}�c
k�v�N�T�
N�[fs�QdkO(u�
T1z�T�[�xD}T0



�-�<P: Guest0



�=z8h: =z8h�(u�|q}ir�N�vX[�S


dk�[hQ'`-��[zl�[/f&T=z8h�(u�|q}ir�N�vX[�S0


�Y�g_U(udk�SGR�g\�|q}ir�N �Y Mutex (�N�e)0�N�N0�O_��T DOS ݈n(W�^�zBf�O+T	g�-��v�|q}X[�S�c6Rn�U (SACL)0�S	gwQ
T�vir�Ng��c�[ SACL; SACL 
Ngc�[f}�l	g
T1z�vir�N0�Y�g_N_U(u [=z8hir�NX[�S] =z8h�SGR�GRg=z8h��N�|q}ir�N�vX[�S0


�la: -��[dk�[hQ'`-��[Bf�(W͑�e_U�R Windows KN�_�@bZP�v���fMbguHe0


�-�<P: �]\P(u0=z8h: =z8h�P�N����S
kP��vO(u



dk�[hQ'`-��[zl�[(W [=z8hyr�k
kP�O(u] �SGRuHeBf�/f&T=z8h@b	gO(u�
kP��vO(u�S�b�P�N����S0(W [=z8hyr�k
kP�O(u] _U(uBfTBf_U(udkx���\g
\�P�Nb���S�v�kP�jHh"uuNP=z8h�N�N0



�Y�g\P(udk�SGR�sSO_U(u [=z8hyr�k
kP�O(u]�_N
Ng=z8h�P�Nb���S
kP��vO(u0



�la: (W Windows Vista KNMR�v Windows Hr,g-N-��[dk�[hQ'`-��[�@bZP�v���f(W�`͑�e_U�R Windows KN�_MbguHe0(W�P�NBf_U(udk-��[�S��g �b'Yϑ�N�N�	gBf�k�yg	gxe~vP0



�-�<P: �]\P(u0



�=z8h: vu!q�l���[hQ'`=z8hBf��|q}�zsSܕ_j



���[hQ'`-��[zl�[�|q}(W!q�l���[hQ'`�N�NBf�/f&T���zsSܕ_j0



�Y�g_U(u�N���[hQ'`-��[��S��!q�l���[hQ=z8h��|q}�Og\Pbk0�W,g
N�vu�[hQ'`=z8h���j�]�n�N�[hQ'`���j�v�Oc�e�l-��p [
N�����[�N�N] b [�O�eg���[�N�N]��O!q�l�Q���N�N0



�Y�g�[hQ'`���j�]�nN!q�l���[�s	g��v�FO�]_U(udk�[hQ'`x���GRg�Q�sNR\Pbk/���:



STOP: C0000244 {Audit Failed}

Vf�"uu�[hQ'`=z8hBf|vu1YWe0

傁��O�_��|q}�{t�T�_�{veQ0�P�N���j (�Sweu)0nd����j��Q�O���͑-�dkx��0�v0R���[hQ'`-��[͑-�KNMR�d��N Administrators �D}�vb�TKNY��NUOO(u���!q�l{veQdk�|q}�sSO�[hQ'`���j*g�n0



�la: (W Windows Vista KNMR�v Windows Hr,g-��[dk�[hQ'`-��[Bf����f��I{0R͑�e_U�R Windows KN�_MbguHe0



�-�<P: �]\P(u0



�݈n: AQ1�xSd��
N�{veQ



���[hQ'`-��[zl�[/f&T�SxSd��Se_��f��
N�{veQ0�Y�g�]_U(udk�SGR�GR
N�{veQsS�SO(uY�lxԚ�v��Q	c��OxSd���f�0�Y�g\P(udk�SGR�����O(u��_�{veQN�d	g [�_�dEQ�^�yd���f�] yr�k
kP�Mb��xSd���f�0



�-�<P: �]_U(u0



f�JT



\P(udk�SGR�S��g��O(u�O(uY�lxԚ��Q	c��NY�v�e�l�Vf�&N�[���_�dEQ�^�yd���
N�W��f�01u�e�#j�S��g �blxԚ�v
d�X��VdkN,����O���-��[�S��(W�[��
N�_�[hQ�v��
N�W��f�
N\P(u0



�݈n: AQ1�<h_S�N�S��Q�b�S_�ZԚ



dk�[hQ'`-��[zl�[AQ1��T�N�N<h_S�T��Q�b�S_ NTFS �ZԚ0dk�R���Sc�[f}:



Administrators

Administrators �N�S Interactive Users



�-�<P: �P�SGR\*g�[�N�S	g Administrators 	g�����R0



݈n: vu#��}�qQ(upSh�_jBf2�bkO(u��[݈pSh�_jE��Rz_



������f�RpS�qQ(u�vpSh�_j��_�(W,g_j��f�
N�[݈qQ(upSh�_j�vE��Rz_0dk�[hQ'`-��[zl�[���S�N(W#��}�qQ(u�vpSh�_jBf�[݈pSh�_jE��Rz_0�Y�g_U(udk-��[��S	g Administrators �S�N(W#��}�qQ(upSh�_jBf�[݈pSh�_jE��Rz_0�Y�g\P(udk-��[��NUOO(u�(W#��}�qQ(u�vpSh�_jBf����S�N�[݈pSh�_jE��Rz_0



:O
ghV�-�<P: �]_U(u

�]\O�z�-�<P: �]\P(u





�la



dk-��[
Ngq_���e�X,g_jpSh�_j�v���R0

dk-��[
Ngq_�� Administrators0

�݈n: CD-ROM X[�S�SP��e{veQ,g_j�vO(u�



dk�[hQ'`-��[zl�[,g_jO(u��T`��zO(u�/f&T��TBfX[�S CD-ROM0



�Y�g_U(udk�SGR��O�SAQ1��N�N�R�e_{veQ�vO(u�X[�S�b�S_ CD-ROM �ZԚ0�Y�g_U(udk�SGRFO!q�N�N�N�R�e_{veQ��O���_�}�X[�Sr� CD-ROM0



�-�<P: *g�[�dk�SGR�N CD-ROM �S&N*g�PP��e,g_j{veQ�vO(u�0



�݈n: ߎ�x_jX[�S�SP��e{veQ,g_j�vO(u�



dk�[hQ'`-��[zl�[,g_jO(u��T`��zO(u�/f&T��TBfX[�S�b�S_ߎ�x_j�ZԚ0



�Y�g_U(udk�SGR��O�SAQ1��N�N�R�e_{veQ�vO(u�X[�S�b�S_ߎ�x_j�ZԚ0�Y�g_U(udk�SGRFO!q�N�N�N�R�e_{veQ��O���_�}�X[�Sr�ߎ�x_j0



�-�<P: *g�[�dk�SGR�Nߎ�x_jX[�S&N*g�PP��e,g_j{veQ�vO(u�0



�݈n: *g=|r�vE��Rz_�[݈�d\O



dk�[hQ'`-��[zl�[Vf����[݈݈nE��Rz_ ()R(u�[݈z_ API) Bf���WL��v�R\O��r�E��Rz_\*g�}N� Windows lxԚ�T�{萀� (WHQL) �v,nf�0



x���YN:



�N!q
�o`�e_�[݈

|v�Qf�JTFOAQ1��[݈


NAQ1��[݈

�-�<P: |v�Qf�JTFOAQ1��[݈0



��}�W�c6R�z: AQ1�:O
ghV�d\O��cz�]\O



dk�[hQ'`-��[zl�[/f&TAQ1� Server Operators �N AT �cz-��P�c�N�]\O0



�la: dk�[hQ'`-��[�Sgq_��0R AT �cz-��P; FO
Ngq_��0R�]\O�czhV-��P0

�-�<P: *g�[�dk�SGR��h�:y�|q}g\vQ���p\P(u0



$�}�W�c6R�z: LDAP :O
ghV=|�z��Bl



���[hQ'`-��[zl�[ LDAP :O
ghV/f&T���� LDAP (u6b�z�N�m=|�z��YN@b:y:



!q: 
N���nj�e=|�zsS�S�:O
ghV#�P}0�Y�g(u6b�z��Blnj�e=|�z�:O
ghV�S�c�O/e�c0

��Bl=|�z: d�^�O(u TLS\SSL�&TGR�_��N�m LDAP nj�e=|�zx��0



�-�<P: *g�[�dk�SGR��vvu�e-��[�p [!q]0



f�JT



�Y�g�`\:O
ghV-��[�p [��Bl=|�z]������`_N�_�-��[(u6b�z0�Y�g*g-��[(u6b�z�g �b�:O
ghV�v#��}-N�e0



�la



dk-��[
\�e LDAP !|�Uk~P}b�N� SSL 2�L��v LDAP !|�Uk~P}�l	g�NUOq_��0Windows XP Professional ��D��v@b	g Microsoft LDAP (u6b�zGW
NO(u LDAP !|�Uk~P}b�N� SSL 2�L��v LDAP !|�Uk~P}��}�W�c6R�z�
�0

�Y�g���=|�z�GR\�bU} LDAP !|�Uk~P}�T�N� SSL 2�L��v LDAP !|�Uk~P}0�WL� Windows XP Professional b Windows Server 2003 �|R�v@b	g Microsoft LDAP (u6b�zGW
NO(u LDAP !|�Uk~P}b�N� SSL 2�L��v LDAP !|�Uk~P}��v�
g�Rk~P}0



��}�W�c6R�z: �bU}��f�3^6b�[�x���f



dk�[hQ'`-��[zl�[�}�W�c6R�z/f&Tg�bU}b�T��f����f��f�3^6b�[�x�v��Bl09h�d�-�<P�b�T��f��k 30 )Y1\g���f��f�3^6b�[�xN!k0�Y�g_U(u��}�W�c6R�z\g�bU}��f�3^6b�[�x�v���f��Bl0



�Y�g_U(u�dk-��[�O
NAQ1��}�W�c6R�z�c�S
\��f�3^6b�v�[�x@bZP�v�NUO���f0



�-�<P: *g�[�dk�SGR��h�:y�|q}g\�[���p [�]\P(u]0



��}�Wb�T: �[hQ�S�nj�e�R�NxeMO�R�[b=|�z (��R)



���[hQ'`-��[zl�[��}�Wb�T_U�R�v@b	g�[hQ�S��P8�/f&T�_��}N�=|�zb�R�[0



vu��f��ReQ�}�WBf�g�^�z��f�3^6b0���_�_U�R�|q}Bf��|q}gO(u��f�3^6b�[�x�pvQ�}�W�^�zNP��}�W�c6R�z�v�[hQ�S�0dk�[hQ�S�(u�O�WL����Y NTLM �N�W�I��S LSA SID/
T1z�gb��v�d\O0



��-��[zl�[�}�Wb�T_U�R�v@b	g�[hQ�S��P8�/f&T&{TgNO�[hQ'`�Bl0yr%R/f��[zl�[�N�}�Wb�T_U�R�v@b	g�[hQ�S��P8�/f&T�_��}N�=|�zb�R�[0�Y�g�]_U(u���SGR�����\
Ng�^�z�[hQ�S��d�^��]�N�m@b	g�[hQ�S��P8��v=|�zb�R�[0�Y�g\P(u�N���SGR�����@b	g�[hQ�S��P8��v�R�[�T=|�z��g��}�W�c6R�z2�L��N�m�(Wdk�`�lN�=|�z�T�R�[�vI{}/f9h�d�}�W�c6R�z�vHr,g�N�SNRiQ��SGR�v-��[��[:



�}�Wb�T: �[hQ�S�nj�e�R�NxeMO�R�[ (�S���vq�)

�}�Wb�T: �[hQ�S�nj�e�R�NxeMO=|�z (��R)



�-�<P: _U(u0



�la



�Y�g_U(u�Ndk�SGR�GR�SGR [�}�Wb�T: �[hQ�S�nj�e�R�NxeMO=|�z (�S���vq�)] GP-��]��_U(u��
N�navQ�vMR�v-��[0�g�x�O�}�Wb�T�\Vf��N�m�[hQ�S��P8��v=|�z0

�Y�g_U(u�Ndk�SGR�GR�SGR [�}�Wb�T: �[hQ�S�nj�e�R�NxeMO=|�z (�S���vq�)] GP-��]��_U(u��
N�navQ�vMR�v-��[0�g�x�O�}�Wb�T�\Vf��N�m�[hQ�S��P8��v=|�z0

�N��[hQ�S��P8��v{veQnj
�N�[g�}N��R�[�!q֊0@b	g
0vQ�N�[hQ�S��P8��v�R�[/f&T�]2�L��N�m0



��}�Wb�T: �[hQ�S�nj�e�R�NxeMO�R�[ (�S���vq�)



���[hQ'`-��[zl�[��}�Wb�T/f&TVf��pvQ@b_U�R�v@b	g�[hQ�S��P8��N�m�R�[0



vu��f��ReQ�}�WBf�g�^�z��f�3^6b0���_�_U�R�|q}Bf��|q}gO(u��f�3^6b�[�x�pvQ�}�W�^�zNP��}�W�c6R�z�v�[hQ�S�0dk�[hQ�S�(u�O�WL����Y NTLM �N�W�I�0LSA SID/
T1z�gb�KN^��v�d\O0



��-��[zl�[�}�Wb�T/f&TVf��pvQ@b_U�R�v@b	g�[hQ�S��P8��N�m�R�[0�Y�g�]_U(u�GR�}�Wb�T\��Bl@b	g�[hQ�S��P8��v�R�[0�Y�g�}�W�c6R�z/e�c@b	g�[hQ�S��P8��v�R�[�GR@b	g�[hQ�S��P8���g�}N��R�[0&TGR��S	g�N��[hQ�S��P8��v{veQnj
�Mbg�}N��R�[0�Y�g\P(u��-��[�GR�}�Wb�T
NgVf��N�m�[hQ�S��R�[0



�-�<P: �]_U(u0



͑��



ck8^�`�lN�
N�ar�\P(udk-��[0d��N
N�_��0Wn\�[hQ�S��S���v_j�[I{}�\P(udk-��[���S��
N�_��0Wn\�[hQ�S�8��ϑ��V�p�S	gvu�[hQ�S��]=|rb�R�[Bf�O(u�[hQ�S��v&NL� API |T�SMb�SL�0



�la: �}�W�c6R�z_N/f�}�Wb�T�&Ng�TN�}�W-N�vvQ�N�}�W�c6R�z�S�S�O�N�}�W-N�v�}�W�c6R�z�^�z�[hQ�S�0



��}�Wb�T: �[hQ�S�nj�e�R�NxeMO=|�z (��R)



���[hQ'`-��[zl�[��}�Wb�T/f&TVf��pvQ@b_U�R�v@b	g�[hQ�S��P8��N�m=|�z0



vu��f��ReQ�}�WBf�g�^�z��f�3^6b0���_�_U�R�|q}Bf��|q}gO(u��f�3^6b�[�x�pvQ�}�W�^�zNP��}�W�c6R�z�v�[hQ�S�0dk�[hQ�S�(u�O�WL����Y NTLM �N�W�I��S LSA SID/
T1z�gb��v�d\O0



��-��[zl�[�}�Wb�T/f&TVf��pvQ@b_U�R�v@b	g�[hQ�S��P8��N�m=|�z0�Y�g�]_U(u�GR�}�Wb�T\��Bl@b	g�[hQ�S��P8��v=|�z0�Y�g�}�W�c6R�z/e�c@b	g�[hQ�S��P8��v=|�z�GR@b	g�[hQ�S��P8���g�}N�=|�z��Ydk���x�O�[
Ng(W�P�Bfm�0R�{9e0



�-�<P: �]_U(u0



�la:



�Y�g_U(u�N�SGR [�}�Wb�T: �[hQ�S�nj�e�R�NxeMO�R�[b=|�z (��R)]�GRgGP-����SGR�p_U(u�rKa�!q֊�vMR-��[�pUO0

�}�W�c6R�z_N/f�}�Wb�T�&Ng�TN�}�W-N�vvQ�N�}�W�c6R�z�S�S�O�N�}�W-N�v�}�W�c6R�z�^�z�[hQ�S�0



|�}�Wb�T: gw���f�3^6b�[�x	gHeg



dk�[hQ'`-��[zl�[�}�Wb�TVf����fvQ��f�3^6b�[�x�v;��s0



�-�<P: 30 )Y0



͑��



dk-��[i�(u�e Windows 2000 ��f��FO!q�l(W��N��f�
N�v0�[hQ'`-��[�{t�T
0�]wQ�S�_0



2�}�Wb�T: ��Bl�X7__ (Windows 2000 b�f�e) �]\O���kёp�



���[hQ'`-��[zl�[�R�[�v�[hQ�S�nj�e/f&T��� 128 MOCQ�vёp�w��^0



vu��f��ReQ�}�WBf�g�^�z��f�3^6b0KN�__U�R�|q}Bf��|q}gO(u��f�3^6b�[�x(Wr��}�WgQ�^�zNPwQ	g�}�W�c6R�z�v�[hQ�S�0dk�[hQ�S�(u�O�WL����Y NTLM �N�W�I�b LSA SID/
T1z�gb�KN^��v�d\O0



9h�d�}�Wb�T2�L��
��v�}�W�c6R�z
N@b�WL��v Windows Hr,g��N�S�Sxe-��[:



�}�Wb�T: �[hQ�S�nj�e�R�NxeMO�R�[b=|�z (��R)

�}�Wb�T: �[hQ�S�nj�e�R�NxeMO�R�[ (�S���vq�)

�N��[hQ�S��P8��v�g�Nb@b	gnj
���g�}N��R�[0���SGR-��[zl�[�R�[�v�[hQ�S�nj
�/f&T��� 128 MOCQ�vёp�w��^0



�Y�g�]_U(u��-��[�d�^����WL� 128 MOCQ�R�[�&TGR
Ng�^�z�[hQ�S�0�Y�g\P(u��-��[�GRg��}�W�c6R�z�N�mёp�w��^0



�-�<P: �]_U(u0



͑��



�p�N(Wb�T�]\O�z�T:O
ghV
N)R(u���SGR�v*Qޞ�@b	g�^�ib�T�}�W�v�}�W�c6R�z���_��WL� Windows 2000 b�f�e�vHr,g0

�p�N(W�}�W�c6R�z
N)R(u���SGR�v*Qޞ��vT�}�W�N�S@b	g�S�O�N�}�W
N�v@b	g�}�W�c6R�z���_��WL� Windows 2000 b�f�e�vHr,g0



6�}�Wb�T: \P(u��f�3^6b�[�x���f



zl�[/f&T�[g���f�}�Wb�T�v��f�3^6b�[�x0�Y�g_U(u�Ndk-��[��}�Wb�T�O
NgVf����fvQ��f�3^6b�[�x0�Y�g\P(u�Ndk-��[��}�Wb�TgVf��O [�}�Wb�T: gw���f�3^6b�[�x	gHeg] �v-��[��O���f��f�3^6b�[�x��-��p�k�� 30 )Y0



�-�<P: �]\P(u0



�la



���[hQ'`-��[
N�a_U(u0��f�3^6b�[�x/f(u�e�^�zb�T�T�}�W�c6R�z��N�S�}�WgQ�}�W�c6R�zKN���v�[hQ�S��
�0N�e�^�z��OgO(u�[hQ�S��O�P8��^�zW�I��T�c
kzlV{@b��vOeanj
�0

(WVf�/e�cO(u�vT��f�3^6b�vٖ͑��_j�`�lN�
N�aO(udk-��[0�Y�g�`��
\#�P}�vT�}�W�viQP�[݈�WL�ٖ͑��_j�ˊc�[
NT��f�
T1zf}�iQP�[݈0v�N�R_{veQ: 
N��o�:y
N!k{veQ

dk�[hQ'`-��[�Szl�[ Windows {veQkub�/f&To�:y
N!k{veQdk��f�KN�N�T�vO(u�
T1z0

�_U(udk�SGR�GR
Ngo�:yO(u�
T1z0



�\P(udk�SGR�GRgo�:yO(u�
T1z0



�-�: \P(u0





?�N�R_{veQ: 
N��Bl	c CTRL+ALT+DEL u�



dk�[hQ'`-��[zl�[O(u�/f&T���	c CTRL+ALT+DEL Mb��{veQ0



�(W��f�
N_U(udk�SGR�O(u�
N���	c CTRL+ALT+DEL �O�S{veQ0
N���	c CTRL+ALT+DEL g��O(u��[f�S0RVf�e*bO(u��[�x�veQ�O0��BlO(u�{veQMR���	c CTRL+ALT+DEL �S�x�OO(u�8�eQ�[�xBf��N�S�O�N�v_2�L��
�0



�\P(udk�SGR�GR�NUOO(u������	c CTRL+ALT+DEL Mb��{veQ Windows0



(W�}�W��f�
N�v�-�<P: _U(u: �\��� Windows 8/\P(u: Windows 7 b�f
�Hr,g0

(Whs�z��f�
N�v�-�<P: _U(u0



u�N�R_{veQ: f}{veQO(u��v
�o`,g�e



���[hQ'`-��[c�[O(u�{veQBfo�:y�v�eW[
�o`0



dk�eW[�8^(WT�l�R_jNO(u��O�Y�
\��(ulQ�Snj
��vO(u��c�Qf�JT�bf�JTO(u��NP�v�R\O�S��g��=z8h0



�-�<P: !q
�o`0



V�N�R_{veQ: f}{veQO(u��v
�o`jL�



dk�[hQ'`-��[AQ1�(WS+T [�N�R_{veQ: f}{veQO(u��v
�o`,g�e] �v���zjL�Ro�:yc�[�vjL�0



�-�<P: !q
�o`0



��N�R_{veQ: �}�W�c6R�z!q�lO(uBf����_�S�vHQMR{veQ!kxe



�kP/UNO(u��v{veQnj
�gX[>e�e,g_j�_�S��Vdk�傲}�W�c6R�z(W�_�~{veQVf�g��!q�lO(u��NP�N6q�S�N{veQ0�_�S�v{veQnj
�/f�_HQMR�v{veQ�]\O���k2QX[0傲}�W�c6R�z!q�lO(uN*g�_�SO(u��v{veQnj
��GRg�NNR
�o`�c:yO(u�:



�vMR!q�S(u�v{veQ:O
ghV�O
g�R{veQˊBl0



(Wdk�SGR-��[-N�0 <Pg\P(u{veQ�_�S0��N� 50 �v�NUO<P�Sg�_�S 50 P{veQVf�0Windows gY/e�c 50 P�_�S��v���kNO(u��(u�v��vxe�v�Szl�e��I�0	��O�O���(W Windows �|q}-NgY�S�N�_�S 50 P/UN�[�xO(u�3^6b�FO�S���_�S 25 PzfgaaSO(u�3^6b��V�pgTBf2QX[�[�xnj
��zfgaaSnj
�0vu�d	g�_�S{veQnj
��vO(u��Q!k{veQBf�g�S�Nr�O(u�P�N�v�_�Snj
�0



�-�<P:



Windows Server 2008: 25



@b	gvQ�NHr,g: 10



f�N�R_{veQ: (W�[�x0RgMR�c:yO(u����f�[�x



zl�[(WO(u��v�[�xsS\0RgBf����cMRYEN ()Yxe) �NHQf�JTO(u�0	g�N�P�NHQf�JT�O(u��O	gBf���^�iNP7__�[�x0



�-�<P: 5 )Y0



��N�R_{veQ: ����}�W�c6R�zW�I�Mb���d����[



�_��c�O{veQnj
�Mb��\���[�v��f��d����[0ݑ
\�}�W3^6b�dk�[hQ'`-��[gzl�[/f&T�#�a}�}�W�c6RhV�zMb��\��f��d����[0�dk-��[\P(u�GRO(u��SO(u�_�S�v��I�\��f��d����[0



�-�: �]_U(u0



͑��



dk-��[i�(u�e Windows 2000 ��f��FO(W��N��f�
N!q�l�N�nj
��[hQ-��[�{t�T�]wQ�R�NO(u0



)�N�R_{veQ: ��Bl�_�O(u Windows Hello OmiHrbzfgaaS



dk�[hQ'`-��[�S��BlO(u��_�O(u Windows Hello OmiHrbzfgaaS�O{veQ݈n0



x���YN:



_U(u: O(u��S��O(u Windows Hello OmiHrbzfgaaS�O{veQ݈n0

\P(ub\*g-��[: O(u��S�NO(u�NUO�e�l�O{veQ݈n0



͑��



dk-��[�N�{v�-N�v���fWY(u0R�WL� Windows 2000 �v��f��FOr��[hQ'`-��[!q�l�N�0�[hQ'`-��[�{t�T
0�]wQD}�O�j��0



Windows 10 v1607 b�f�eHr,g
N
N/e�c��Bl�_�O(u Windows Hello OmiHr�O{veQ0



��N�R_{veQ: zfgaaS�yd��d\O



dk�[hQ'`-��[zl�[vu{veQO(u��vzfgaaS�_zfgaaS��aS_j�yd�Bf���WL��v�R\O0



x���YN:



 !q�R\O

 ���[�]\O�z

 7_6R{v�Q

 �Y�g/f`��zLhb�
g�R�]\O���kGR-N�e#��}



�Y�g(Wdk�SGR�v [gQ�[] 
\q��eJX-N	cN [���[�]\O�z]��Og(WzfgaaS�yd�Bf���[�]\O�z���O(u�6^W��NP�vzfgaaS▋��TBf|~�~�Ow��]\O���k0



�Y�g(Wdk�SGR�v [gQ�[] 
\q��eJX-N	cN [7_6R{v�Q]��Og(WzfgaaS�yd�Bf���R\O(u�{v�Q0



�Y�g	cNN [�Y�g/f`��zLhb�
g�R�]\O���kGR-N�e#��}]��Og(WzfgaaS�yd�Bf-N�e�]\O���k�v#��}��
Ng\O(u�{v�Q0�����O(u�
z�_�ceQzfgaaS&N|~�~r��]\O���k�b/f(W�SN�M��PzfgaaS��aS_j�v��f�|~�~�!q��Q{veQN!k0�Y�g�]\O���k/f,g_j�GRdk�SGR�v�R��� [���[�]\O�z] �vT0



�la: `��zLhb�
g�R(W
�Hr�v Windows Server -N1z�p0B}�z_j
g�R
00



�-�<P: *g�[�dk�SGR��h�:y�|q}g\�[���p [!q�R\O]0



(W Windows Vista �T�f�e�vHr,g-N: 傁���dk-��[uHe��_�_U�RzfgaaS�yd��SGR
g�R0



�Microsoft �}�(u6b�z: �p�
��R
NxeMO=|�z (N�_)



dk�[hQ'`-��[zl�[ SMB (u6b�zCQ�N/f&T��Bl\S=|r0



:O
ghV
�o`@S (SMB) �
�TS�[�p Microsoft �jHh�SRpSqQ(u�1�YvQ�N�}�\Omi (�O�Y`��z Windows �|q}�{t) �c�O�Wy0�p2�bkg�O9e�P8�-N SMB \S�ve*b_;e�d�SMB �
�TS�[/e�c SMB \S�vxeMO=|r0dk�SGR-��[zl�[AQ1��T SMB :O
ghV2�Nek�
�KNMR�SMB \S=|r/f&T�_��}N��N�m0



�_U(udk-��[�Microsoft �}�(u6b�z\
Ng�T Microsoft �}�:O
ghV�
��d�^�r�:O
ghVTa�WL� SMB \S=|r0�\P(udk�SGR�g(W(u6b�z�:O
ghVKN���N�m SMB \S=|r0



�-�<P: �]\P(u0



͑��



�pOdk�SGR(W�WL� Windows 2000 �v��f�
NuHe��_�_N_U(u(u6b�z\S=|r0傁�_U(u(u6b�z SMB \S=|r�ˊ-��[0Microsoft �}�(u6b�z: �p�
��R
NxeMO=|�z (�:O
ghVTa)
00



�la



@b	g Windows \Omi�|q}��/e�c(u6b�z SMB CQ�N�:O
ghV�z SMB CQ�N0(W Windows 2000 ��f�eHr,g�v\Omi�|q}
N�_U(ub��Bl(u6b�z�:O
ghV�z SMB CQ�N�v\S=|r/f1uNR�VP�SGR-��[@b�c6R:

Microsoft �}�(u6b�z: �p�
��R
NxeMO=|�z (N�_) - �c6R(u6b�z SMB CQ�N/f&T��Bl\S=|r0

Microsoft �}�CQ�N: �p�
��R
NxeMO=|�z (�:O
ghVTa) - �c6R(u6b�z SMB CQ�N/f&T_U(u\S=|r0

Microsoft �}�:O
ghV: �p�
��R
NxeMO=|�z (N�_) - �c6R:O
ghV�z SMB CQ�N/f&T��Bl\S=|r0

Microsoft �}�:O
ghV: �p�
��R
NxeMO=|�z (�(u6b�zTa) - �c6R:O
ghV�z SMB CQ�N/f&T_U(u\S=|r0

���e�Hr,g0OS Hr,g0�jHh'Y\0U�thVxS	��R����a(uz_ IO L��p��[�SMB \S=|rgO SMB He��'YE^M�NO0

�Y�s�0}nj
��ˊ�S��: https://go.microsoft.com/fwlink/?LinkID=7871360



�Microsoft �}�(u6b�z: �p�
��R
NxeMO=|�z (�:O
ghVTa)



dk�[hQ'`-��[zl�[ SMB (u6b�z/f&TVf��N�m SMB \S=|r0



:O
ghV
�o`@S (SMB) �
�TS�[/f Microsoft �jHh�SRpSqQ(u�1�YvQ�N�}�\Omi (�O�Y`��z Windows �|q}�{t) �v�Wy0�p2�bkg�O9e�P8�-N SMB \S�ve*b_;e�d�SMB �
�TS�[/e�c SMB \S�vxeMO=|r0dk�SGR-��[zl�[ SMB (u6b�zCQ�N#��}� SMB :O
ghVBf�/f&TVf��N�m SMB \S=|r0



�_U(udk-��[�Microsoft �}�(u6b�z\�e�^�z�]\O���kBf��Bl:O
ghV�WL� SMB \S=|r0��](W:O
ghV
N_U(u\S=|r�\g�N�m\S=|r0�\P(udk�SGR�SMB (u6b�z\
Ng�N�m SMB \S=|r0



�-�<P: �]_U(u0



�la



@b	g Windows \Omi�|q}��/e�c(u6b�z SMB CQ�N�:O
ghV�z SMB CQ�N0(W Windows 2000 ��f�eHr,g�v\Omi�|q}
N�_U(ub��Bl(u6b�z�:O
ghV�z SMB CQ�N�v\S=|r/f1uNR�VP�SGR-��[@b�c6R:

Microsoft �}�(u6b�z: �p�
��R
NxeMO=|�z (N�_) - �c6R(u6b�z SMB CQ�N/f&T��Bl\S=|r0

Microsoft �}�(u6b�z: �p�
��R
NxeMO=|�z (�:O
ghVTa) - �c6R(u6b�z SMB CQ�N/f&T_U(u\S=|r0

Microsoft �}�:O
ghV: �p�
��R
NxeMO=|�z (N�_) - �c6R:O
ghV�z SMB CQ�N/f&T��Bl\S=|r0

Microsoft �}�:O
ghV: �p�
��R
NxeMO=|�z (�(u6b�zTa) - �c6R:O
ghV�z SMB CQ�N/f&T_U(u\S=|r0

�(u6b�z�:O
ghV�z SMB =|riQ��]_U(u�N(u6b�z�^�z�:O
ghVKN���v SMB 1.0 #��}�\gVf� SMB =|r0

���e�Hr,g0OS Hr,g0�jHh'Y\0U�thVxS	��R����a(uz_ IO L��p��[�SMB \S=|rgO SMB He��'YE^M�NO0dk-��[�Si�(u�e SMB 1.0 #��}0

�Y�s�0}nj
��ˊ�S��: https://go.microsoft.com/fwlink/?LinkID=7871360



�Microsoft �}�(u6b�z: �P�*g�R�[�v�[�x0RvQ�N�^FU�v SMB :O
ghV



�Y�g_U(udk�[hQ'`-��[��OAQ1�:O
ghV
�o`@S (SMB) ͑�e\ThV(WW�I�g��\}�eW[�[�x�P�f}
N/e�c�[�x�R�[�v^� Microsoft SMB :O
ghV0



�P�*g�}�R�[�v�[�xg	g�[hQ'`����0



�-�<P: �]\P(u0Microsoft �}�:O
ghV: �f\P�]\O���kMR���Bl�v��nBf��



dk�[hQ'`-��[zl�[:O
ghV
�o`@S (SMB) �]\O���k�v#��~��nBf��w��^��N�Y\Bf��]\O���kg�V�pU��e^�O(u�rKa��f\P0



�|q}�{t�T�SO(udk�SGR��c6R��f��eUOBf�f\P^�O(u-N�v SMB �]\O���k0�(u6b�z;m�R|~�~�GRg��R͑�e�^�z�]\O���k0




\�edk�SGR-��[���<Ph�:y(WTt�vBf���{
WgQQ�-N�e�]\O���k�v#��}0g'Y<P/f 99999�sS 208 )Y; �[��
N�dk<Pg\P(udk�SGR0



�-�<P: *g�[�dk�SGR��h�:y�|q}g\�[���p 15 R� (:O
ghV) b*g�[� (�]\O�z)0



�Microsoft �}�:O
ghV: �p�
��R
NxeMO=|�z (N�_)



dk�[hQ'`-��[zl�[ SMB :O
ghVCQ�N/f&T��Bl\S=|r0



:O
ghV
�o`@S (SMB) �
�TS�[/f Microsoft �jHh�SRpSqQ(u�1�YvQ�N�}�\Omi (�O�Y`��z Windows �|q}�{t) �v�Wy0�p2�bkg�O9e�P8�-N SMB \S�ve*b_;e�d�SMB �
�TS�[/e�c SMB \S�vxeMO=|r0dk�SGR-��[zl�[AQ1��T SMB (u6b�z2�Nek�
�KNMR�SMB \S=|r/f&T�_��}N��N�m0



�_U(udk-��[�Microsoft �}�:O
ghV\
Ng�T Microsoft �}�(u6b�z�
��d�^�r�(u6b�zTa�WL� SMB \S=|r0�\P(udk-��[�g(W(u6b�z�:O
ghVKN���N�m SMB \S=|r0



�-�<P:



ݑ
\b�T:O
ghV\P(u0

ݑ
\�}�W�c6R�z\P(u0



�la



@b	g Windows \Omi�|q}��/e�c(u6b�z SMB CQ�N�:O
ghV�z SMB CQ�N0(W Windows 2000 ��f�eHr,g�v\Omi�|q}
N�_U(ub��Bl(u6b�z�:O
ghV�z SMB CQ�N�v\S=|r/f1uNR�VP�SGR-��[@b�c6R:

Microsoft �}�(u6b�z: �p�
��R
NxeMO=|�z (N�_) - �c6R(u6b�z SMB CQ�N/f&T��Bl\S=|r0

Microsoft �}�(u6b�z: �p�
��R
NxeMO=|�z (�:O
ghVTa) - �c6R(u6b�z SMB CQ�N/f&T_U(u\S=|r0

Microsoft �}�:O
ghV: �p�
��R
NxeMO=|�z (N�_) - �c6R:O
ghV�z SMB CQ�N/f&T��Bl\S=|r0

Microsoft �}�:O
ghV: �p�
��R
NxeMO=|�z (�(u6b�zTa) - �c6R:O
ghV�z SMB CQ�N/f&T_U(u\S=|r0

T#j�v��(u6b�z SMB =|r/f�_���v�r�(u6b�z\!q�l�T*g_U(u\S=|r�v:O
ghV�^�z�]\O���k09h�d�-�<P�:O
ghV�z SMB =|r�Sg(W�}�W�c6R�z
N_U(u0

�_U(u:O
ghV�z SMB =|r�GR\�_U(u(u6b�z SMB =|r�v(u6b�z�N�m SMB \S=|r0

���e�Hr,g0OS Hr,g0�jHh'Y\0U�thVxS	��R����a(uz_ IO L��p��[�SMB \S=|rgO SMB He��'YE^M�NO0



͑��



�pOdk�SGR(W�WL� Windows 2000 �v��f�
NuHe��_�_N_U(u:O
ghV�z\S=|r0傁�_U(u:O
ghV�z SMB \S=|r�ˊ-��[NR�SGR:

Microsoft �}�:O
ghV: �p�
��R
NxeMO=|�z (�:O
ghVTa)



�p�N�� Windows 2000 :O
ghV��� Windows NT 4.0 (u6b�z�N�m=|r��_�\ Windows 2000 :O
ghV
N�vNR{v�<P-��[�p 1:

HKLM\System\CurrentControlSet\Services\lanmanserver\parameters\enableW9xsecuritysignature

�Y�s�0}nj
��ˊ�S��: https://go.microsoft.com/fwlink/?LinkID=7871360



UMicrosoft �}�:O
ghV: �p�
��R
NxeMO=|�z (�(u6b�zTa)



dk�[hQ'`-��[zl�[ SMB :O
ghV/f&T\�T��Bl SMB \S=|r�v(u6b�z�N�m0



:O
ghV
�o`@S (SMB) �
�TS�[/f Microsoft �jHh�SRpSqQ(u�1�YvQ�N�}�\Omi (�O�Y`��z Windows �|q}�{t) �v�Wy0�p2�bkg�O9e�P8�-N SMB \S�ve*b_;e�d�SMB �
�TS�[/e�c SMB \S�vxeMO=|r0dk�SGR-��[zl�[ SMB :O
ghV/f&T\(W SMB (u6b�z��Bl SMB \S=|rBf2�L��N�m0



�_U(udk-��[�Microsoft �}�:O
ghV\(W(u6b�z��Bl SMB \S=|rBf2�L��N�m0_N1\/f�����](W(u6b�z_U(u\S=|r�\g�N�m\S=|r0�\P(udk�SGR�SMB (u6b�z\
Ng�N�m SMB \S=|r0



�-�<P: �S(W�}�W�c6R�z
N_U(u0



͑��



�p�N�� Windows 2000 :O
ghV��� Windows NT 4.0 (u6b�z�N�m=|r��_�\�WL� Windows 2000 �v:O
ghV-N�vNR{v�<P-��[�p 1: HKLM\System\CurrentControlSet\Services\lanmanserver\parameters\enableW9xsecuritysignature



�la



@b	g Windows \Omi�|q}��/e�c(u6b�z SMB CQ�N�:O
ghV�z SMB CQ�N0
\�e Windows 2000 ��f�eHr,g�v\Omi�|q}�_U(ub��Bl(u6b�z�:O
ghV�z SMB CQ�N�v\S=|r/f1uNR�VP�SGR-��[@b�c6R:

Microsoft �}�(u6b�z: �p�
��R
NxeMO=|�z (N�_) - �c6R(u6b�z SMB CQ�N/f&T��Bl\S=|r0

Microsoft �}�(u6b�z: �p�
��R
NxeMO=|�z (�:O
ghVTa) - �c6R(u6b�z SMB CQ�N/f&T_U(u\S=|r0

Microsoft �}�:O
ghV: �p�
��R
NxeMO=|�z (N�_) - �c6R:O
ghV�z SMB CQ�N/f&T��Bl\S=|r0

Microsoft �}�:O
ghV: �p�
��R
NxeMO=|�z (�(u6b�zTa) - �c6R:O
ghV�z SMB CQ�N/f&T_U(u\S=|r0

�(u6b�z�:O
ghV�z SMB =|riQ��]_U(u�N(u6b�z�^�z�:O
ghVKN���v SMB 1.0 #��}�\gVf� SMB =|r0

���e�Hr,g0OS Hr,g0�jHh'Y\0U�thVxS	��R����a(uz_ IO L��p��[�SMB \S=|rgO SMB He��'YE^M�NO0dk-��[�Si�(u�e SMB 1.0 #��}0

�Y�s�0}nj
��ˊ�S��: https://go.microsoft.com/fwlink/?LinkID=7871360



PAMicrosoft �}�:O
ghV: vu{veQBfxe0RgBf�-N�e(u6b�z#��}



dk�[hQ'`-��[zl�[/f&T��(W���QO(u�3^6b�v	gHe{veQBfxeBf�\#��}0R,g_j��f��vO(u�-N�e#��}0dk-��[gq_��0R:O
ghV
�o`@S (SMB) CQ�N0



_U(udk�SGRBf��Og(W(u6b�z�v{veQBfxe0RgKN�_�7_�\-dM� SMB 
g�R�v(u6b�z�]\O���k-N�e#��}0



�Y�g\P(udk�SGR��OAQ1�(W(u6b�z�v{veQBfxe0RgKN�_�|~�~�}c�^�z�v(u6b�z�]\O���k0



Windows Vista �S�f�eHr,g
N�v�-�<P: _U(u0

Windows XP 
N�v�-�<P: \P(u



O�}�X[�S: AQ1�?S
T SID/
T1zI�o�



dk�SGR-��[zl�[?S
TO(u�/f&T�S�N��BlvQ�NO(u��v�[hQ'`X�%R�x (SID) l\'`0



�Y�g_U(udk�SGR�?S
TO(u��S�N��BlvQ�NO(u��v SID l\'`0�wS��|q}�{t�T SID �v?S
TO(u��S�N#�a}�]_U(udk�SGR�v��f��N��O(ur� SID �O�S�_�|q}�{t�T�v
T1z0dk-��[gq_�� SID I�o��p
T1z�N�S
T1zI�o��p SID0



�Y�g�]\P(udk�SGR-��[�?S
TO(u�\!q�l�pvQ�NO(u���Bl SID l\'`0



�]\O�z�b�T:O
ghV�v�-�<P: �]\P(u0

�WL� Windows Server 2008 b�f�eHr,g�v�}�W�c6R�z�-�<P: �]\P(u0

�WL� Windows Server 2003 R2 b�f
�Hr,g�v�}�W�c6R�z�-�<P: �]_U(u0E�}�X[�S: 
NAQ1� SAM 3^6b�v?S
TR	�



dk�[hQ'`-��[zl�[\�c���f�?S
T#��}�T�NvQ�N
kP�0



Windows AQ1�?S
TO(u��WL�yr�[;m�R��O�YR	��}�W3^6b�T�}�qQ(u�v
T1z0vu�|q}�{t�T�`���c�O(u�(W�S�O�N�}�W
N�vX[�S
kP���r��}�W
Ng�Oc�N�N�O�NBf�dk�R���vvu�e�O0



dk�[hQ'`x��AQ1�(W?S
T#��}-N-��[vQ�NP�6R��YN:



�]_U(u: 
NAQ1�R	� SAM 3^6b0dkx��g\nj�nKN�[hQ'`
kP�-N�v Everyone �S�N�p Authenticated Users0

�]\P(u: �l	gvQ�NP�6R0���-�
kP���[0



(W�]\O�z
N�v�-�<P: �]_U(u0

(W:O
ghV
N�v�-�<P: �]_U(u0



͑��



dk�SGR
\�}�W�c6R�z�l	gq_��0



��}�X[�S: 
NAQ1� SAM 3^6b�TqQ(u�v?S
TR	�



dk�[hQ'`-��[zl�[/f&TAQ1� SAM 3^6b�TqQ(u�v?S
TR	�0



Windows AQ1�?S
TO(u��WL�yr�[;m�R��O�YR	��}�W3^6b�T�}�qQ(u�v
T1z0vu�|q}�{t�T�`���c�O(u�(W�S�O�N�}�W
N�vX[�S
k��r��}�W
Ng�Oc�N�N�O�NBf�dk�R���vvu�e�O0�Y�g
N�`��AQ1� SAM 3^6b�TqQ(u�v?S
TR	��ˊ_U(udk�SGR0



�-�<P: �]\P(u0



��}�X[�S: 
NAQ1�X[>e�}�W�I��v�[�x���I�



dk�[hQ'`-��[zl�[��I��{t�T�S�_�}�WW�I�Bf�/f&T2QX[�[�x���I���N�O
z�_O(u0



�Y�g_U(udk-��[���I��{t�T
Ng(W��f�
N2QX[�[�x���I�0

�Y�g�`\P(ub*g-��[dk�SGR-��[���I��{t�T\g(Wdk��f�
NX[>e�[�x���I���N�O
z�_(u�e�}�WW�I�0



�la: -��[dk�[hQ'`-��[Bf��`�_�͑�e_U�R Windows����fMbguHe0



�-�<P: �]\P(u0



W�}�X[�S: �� Everyone 
kP�WY(u0R?S
TO(u�



dk�[hQ'`-��[zl�[\�c���f�?S
T#��}�T�NvQ�N
kP�0



Windows AQ1�?S
TO(u��WL�yr�[;m�R��O�YR	��}�W3^6b�T�}�qQ(u�v
T1z0vu�|q}�{t�T�`���c�O(u�(W�S�O�N�}�W
N�vX[�S
kP���r��}�W
Ng�Oc�N�N�O�NBf�dk�R���vvu�e�O09h�d�-�<P�g�_�p?S
T#��}�^�z�v
kVg-N�yd� Everyone �[hQ'`X�%R�x (SID)0�Vdk��c� Everyone �D}�v
kP�
NgWY(u�?S
TO(u�0�-��[dkx���?S
TO(u��S��X[�S�NP�]f�x�S�_
kP��vnj�n0



�_U(udk�SGR�Everyone SID g�e�X�p?S
T#��}�^�z�v
kVg0(Wdk�`�lN�?S
TO(u��SX[�S Everyone �D}�]�S�_
kP��v�NUOnj�n0



�-�<P: �]\P(u0



J�}�X[�S: �S�N?S
TX[�S�vwQ
T�{S�



dk�[hQ'`-��[zl�[�TP�
��]\O���k (�{S�) \�d	gAQ1�?S
TX[�S�vl\'`�T
kP�0



�-�<P: !q0



l�}�X[�S: �S`��zX[�S�v{v�_



dk�[hQ'`-��[zl�[�T�N{v�_j�x�S�}1u�}�X[�S (
N�{ winreg {v�_j�x-NX[�S�c6Rn�U (ACL) @bR�vO(u�b�D}�pUO)0



�-�<P:



System\CurrentControlSet\Control\ProductOptions

System\CurrentControlSet\Control\Server Applications

Software\Microsoft\Windows NT\CurrentVersion



f�JT




Nck�x0W�}/�{v�\g
\�|q} �b�V͑�v
d�[0(W���f{v�MR��`�aHQ�P�N��f�
N�NUO	g�P<P�vnj�e0

�la: dk�[hQ'`-��[!q�l(W
�Hr Windows -NO(u0�WL� Windows XP �v��f�-N�Q�s�v�[hQ'`-��[0�}�X[�S: �S`��zX[�S�v{v�_
0
\�a0R Windows Server 2003 �|Rb�T-N�v0�}�X[�S: �S`��zX[�S�v{v�_�SP[_
0�[hQ'`x��0�Y�s�0}nj
��ˊ�S��0�}�X[�S: �S`��zX[�S�v{v�_�SP[_
00

�-�<P:



System\CurrentControlSet\Control\ProductOptions

System\CurrentControlSet\Control\Server Applications

Software\Microsoft\Windows NT\CurrentVersion��}�X[�S: �S`��zX[�S�v{v�_�SP[_



dk�[hQ'`-��[zl�[�T�N{v�_�SP[_�S�}1u�}�X[�S (
N�{ winreg {v�_j�x-NX[�S�c6Rn�U (ACL) @bR�vO(u�b�D}�pUO)0



�-�<P:



System\CurrentControlSet\Control\Print\Printers

System\CurrentControlSet\Services\Eventlog

Software\Microsoft\OLAP Server

Software\Microsoft\Windows NT\CurrentVersion\Print

Software\Microsoft\Windows NT\CurrentVersion\Windows

System\CurrentControlSet\Control\ContentIndex

System\CurrentControlSet\Control\Terminal Server

System\CurrentControlSet\Control\Terminal Server\UserConfig

System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration

Software\Microsoft\Windows NT\CurrentVersion\Perflib

System\CurrentControlSet\Services\SysmonLog

System\CurrentControlSet\Services\CertSvc

System\CurrentControlSet\Services\Wins



f�JT




Nck�x0W�}/�{v�\g
\�|q} �b�V͑�v
d�[0(W���f{v�MR��`�aHQ�P�N��f�
N�NUO	g�P<P�vnj�e0



�la: (W Windows XP -N�dk�[hQ'`-��[1z�p0�}�X[�S: �S`��zX[�S�v{v�_
00�Y�g�`(W�ReQ�}�W�v Windows Server 2003 �|Rb�T-N-��[dk-��[�GR�WL�Windows XP �v��f�g|~bdk-��[�FO\�N0�}�X[�S: �S`��zX[�S�v{v�_
0�[hQ'`x��o�:y0�Y�s�0}nj
��ˊ�S��0�}�X[�S: �S`��zX[�S�v{v�_�SP[_0
0

j�}�X[�S: P�6R?S
TX[�SwQ
T�{S��TqQ(u



_U(uBf�dk�[hQ'`-��[g\qQ(u�T�{S��v?S
TX[�SP�6R�p�NN-��[:



�}�X[�S: �S�N?S
TX[�S�vwQ
T�{S�

�}�X[�S: �S�N?S
TX[�S�vqQ(u

�-�<P: �]_U(u0



=�}�X[�S: �S�N?S
TX[�S�vqQ(u



dk�[hQ'`-��[zl�[?S
TO(u��� YX[�S�TP�}�qQ(u0



�-�<P: �l	gc�[0



��}�X[�S: ,g_j3^6b�vqQ(u�T�[hQ'`!j�W



dk�[hQ'`-��[zl�[�YUOW�I�O(u,g_j3^6b�v�}�{veQ0�dk-��[-��p0�Pq}
0�GRO(u,g_j3^6b��I��v�}�{veQgO(u���N��I�2�L�W�I�00�Pq}
0!j_�S	gHe�c6R
\nj�n�vX[�S0O(u0�Pq}
0!j_��`�Sݑ
\�vTnj�n�c�
NT^��W�vX[�S
kP�f}
NT�vO(u�0

�dk-��[-��p0�Pi�(u�e�Oӌ
0�GRO(u,g_j3^6b�v�}�{veQg��R
\�a0R Guest 3^6b0O(u0�Pi�(u�e�Oӌ
0!j_��S�NI{T�e_
\�_@b	gO(u�0@b	gO(u�GWW�I��p Guest�N6e0R�vyr�[nj�nX[�S
kP�I{}�vT�sS�S��/f0/U��
0b0�O9e
00



(W�}�W��f�
N�v�-�<P: �Pq}0

(Whs�z��f�
N�v�-�<P: �Pi�(u�e�Oӌ



͑��



O(u0�Pi�(u�e�Oӌ
0!j_��S�}1u�}�X[�S�`��f��v@b	gO(u� (S�b?S
T�}���}�O(u�) ����X[�S�`�vqQ(unj�n0�`�_�O(u Windows 2�kpFrbvQ�N^�<O݈n�O�Ow��`�v��f�MQ�e*g�}�c
kX[�S�v�O�[0T#j�v�O(u0�Pq}
0!j_��_�O(u�[�x�Ow�,g_j3^6b�&TGR�NUO�N���SO(u���NO(u�3^6bX[�SqQ(u�|q}nj�n0



�la:



dk-��[
Nq_��O(u�Y Telnet 
g�Rb`��zLhb�
g�R�_`��z�WL��v�N�R_{veQ



`��zLhb�
g�R(W
�Hr�v Windows Server -N1z�p0B}�z_j
g�R
00



dk�SGR
Nq_���WL� Windows 2000 �v��f�0

vu��f�*g�ReQ�}�WBf�dk-��[_Ng�O9e�jHh=~�{-N�v [qQ(u] �T [�[hQ'`] "}_jd|��N�Tck(WO(u�vqQ(u�T�[hQ'`!j�W
\�a0



��}[hQ'`: N!k�[�x���fBf
N2QX[ LAN Manager ܖJnxe<P



dk�[hQ'`-��[zl�[(WN!k�[�x���fBf�/f&T��2QX[�e�[�x�v LAN Manager ܖJnxe<P0�T�[�x�}o��7_�v Windows NT ܖJn�v�k�LM ܖJn�v
\�
N�[hQ�&NN�[fm�0R;e�d0�V�p LM ܖJn2QX[�e,g_j��f��v�[hQ'`nj�e�^-N�傉[hQ'`nj�e�^m�0R;e�d��[�x�S��1\g��4x�0





Windows Vista �S�f�eHr,g
N�v�-�<P: _U(u

Windows XP 
N�v�-�<P: \P(u0



͑��



Windows 2000 Service Pack 2 (SP2) �S�f�eHr,g�c�O�
�Hr Windows (�Y Microsoft Windows NT 4.0) W�I��v�v�['`0

dk-��[gq_���WL� Windows 2000 Server0Windows 2000 Professional0Windows XP �S Windows Server 2003 �|R�v��f���WL� Windows 95 �T Windows 98 �v��f��
��v���R0



��}[hQ'`: 7_6RP�6R{veQBfxe



dk�[hQ'`-��[zl�[O(u�#��}�,g_j��f�傅�N�vQO(u�3^6b	gHe�v{veQBfxeBf�/f&T��-N�e#��}0dk-��[gq_��:O
ghV
�o`@S (SMB) CQ�N0



_U(udk�SGRBf��(u6b�z{veQBfxe0Rg�g7_6R-N�e(u6b�z�]\O���k� SMB :O
ghV�v#��}0



�\P(udk�SGR�vu(u6b�z{v�Bfxe0RgKN�_��S�NAQ1��OYu�]�^�z�v(u6b�z�]\O���k0



�-�<P: �]_U(u0



�la: dk�[hQ'`-��[\O(u�T3^6b�SGR�vT0
\�e�}�W3^6b��S��	gNP3^6b�SGR03^6b�SGR�_��[�(W0�-��}�W�SGR
0-N�&N1uD}b�}�W�v�}�W�c6R�z7_6R�WL�0sSOS+T�}�W�c6R�z�vD}T~�UMOWY(u�N
NT�v3^6b�SGR��}�W�c6R�z�YB}g�_0�-��}�W�SGR�D}�SGR
0ir�N (GPO) �c�S3^6b�SGR09h�d�-�<P��ReQ�}�W�v�]\O�z�T:O
ghV (�Yb�T��f�) _Ng6e0RvQ,g_j3^6b�vT�v3^6b�SGR0
NN��傺pS+Tb�T��f��vD}T~�UMO�[�3^6b�SGR�b�T��f��v,g_j3^6b�SGR1\g�T�}�W3^6b�SGR
NT0Kerberos -��[
NgWY(u0Rb�T��f�0



��}[hQ'`: LAN Manager W�I�I{}



dk�[hQ'`-��[zl�[O(u�T.z Challenge/Response W�I��
�TS�[{veQ�}�0dkx��dgq_��(u6b�zO(u�vW�I��
�TS�[d\}0�N�m�v�]\O���k�[hQ'`d\}��N�S:O
ghV�c�S�vW�I�I{}��YN:



�P� LM �T NTLM �V�a: (u6b�zO(u LM �T NTLM W�I��U}
NO(u NTLMv2 �]\O���k�[hQ'`; �}�W�c6R�z�c�S LM0NTLM �S NTLMv2 W�I�0



�P� LM �T NTLM - �Y	g�N�m�O(u NTLMv2 �]\O���k�[hQ'`: (u6b�zO(u LM �T NTLM W�I���N�:O
ghV/e�c�GRgO(u NTLMv2 �]\O���k�[hQ'`; �}�W�c6R�z�c�S LM0NTLM �N�S NTLMv2 W�I�0



�S�P� NTLM �V�a: (u6b�z�SO(u NTLM W�I���N�:O
ghV/e�c�GRgO(u NTLMv2 �]\O���k�[hQ'`; �}�W�c6R�z�c�S LM0NTLM �S NTLMv2 W�I�0



�S�P� NTLMv2 �V�a: (u6b�z�SO(u NTLMv2 W�I���N�:O
ghV/e�c�GRgO(u NTLMv2 �]\O���k�[hQ'`; �}�W�c6R�z�c�S LM0NTLM �S NTLMv2 W�I�0



�S�P� NTLMv2 �V�a\�bU} LM: (u6b�z�SO(u NTLMv2 W�I���N�:O
ghV/e�c�GRgO(u NTLMv2 �]\O���k�[hQ'`; �}�W�c6R�z�bU} LM (�S�c�S NTLM � NTLMv2 W�I�)0



�S�P� NTLMv2 �V�a\�bU} LM �T NTLM: (u6b�z�SO(u NTLMv2 W�I���N�:O
ghV/e�c�GRgO(u NTLMv2 �]\O���k�[hQ'`; �}�W�c6R�z�bU} LM �T NTLM (�S�c�S NTLMv2 W�I�)0



͑��



dk-��[gq_���WL� Windows 2000 Server0Windows 2000 Professional0Windows XP Professional �S Windows Server 2003 �|RKN��f��T�WL� Windows NT 4.0 b�f
�Hr,g�v��f��}1u�}��
��v���R0�O�Y��vMR�WL� Windows NT 4.0 SP4 b�f
�Hr,g�v��f�&N
N/e�c NTLMv20�WL� Windows 95 �T Windows 98 �v��f�
N/e�c NTLM0



�-�<P:



Windows 2000 � windows XP: �P� LM �T NTLM �V�a



Windows Server 2003: �S�P� NTLM �V�a



Windows Vista0Windows Server 20080Windows 7 �T Windows Server 2008 R2: �S�P� NTLMv2 �V�a



(�}[hQ'`: LDAP (u6b�z=|�z��Bl



dk�[hQ'`-��[zl�[�Nh�|v�Q LDAP BIND ��BlKN(u6b�z@b��Bl�vnj�e=|�zd\}��YN:



!q: LDAP BIND ��Bl��|T�S�c�[�vx��|v�Q0

�N�m=|�z: �*g_U�R�P8�d\�[hQ'`/�[hQ�
��zd\ (TLS\SSL)�g��|T�S�c�[�vx���NY�v LDAP nj�e=|�zx��R�YS LDAP BIND ��Bl0��]_U�R TLS\SSL�g��|T�S�c�[�vx��R�YS LDAP BIND ��Bl0

��Bl=|�z: ��T�N�m=|�z�vT0
NN��� LDAP :O
ghV�v-N|~ saslBindInProgress �V�a*gc:y LDAP Amϑ=|�z�p�_���v�GRgJT�w|T�S� LDAP BIND }T�N��Bl1YWe0



f�JT



�Y�g�`\:O
ghV-��[�p [��Bl=|�z]������`_N�_�-��[(u6b�z0�Y�g*g-��[(u6b�z�g �b�:O
ghV�v#��}-N�e0



�la: dk-��[
\�e ldap_simple_bind b ldap_simple_bind_s �l	g�NUOq_��0Windows XP Professional ��D��v@b	g Microsoft LDAP (u6b�zGW
NO(u ldap_simple_bind b ldap_simple_bind_s ��}�W�c6R�z�
�0



�-�<P: �N�m=|�z0



PAx�}[hQ'`: NTLM SSP �p;N�v (S+T�[hQ RPC) (u6b�z�vg\�]\O���k�[hQ'`



dk�[hQ'`-��[AQ1�(u6b�z��Bl 128 MOCQ�R�[�T/b NTLMv2 �]\O���k�[hQ'`�v�N�m0��N<P�OX[�e LAN Manager W�I�I{}�[hQ'`-��[<P0x���YN:



��Bl NTLMv2 �]\O���k�[hQ'`: �*g�N�m NTLMv2 �
�TS�[�#��}\g1YWe0

��Bl 128 MOCQ�R�[: �*g�N�m�X7__�R�[ (128 MOCQ)�#��}\g1YWe0



�-�<P: 



Windows XP0Windows Vista0Windows Server 20000Windows Server 2003 �T Windows Server 2008: �l	g��Bl0



Windows 7 � Windows Server 2008 R2: ��Bl 128 MOCQ�R�[



p�}[hQ'`: NTLM SSP �p;N�v (S+T�[hQ RPC) :O
ghV�vg\�]\O���k�[hQ'`



dk�[hQ'`-��[AQ1�:O
ghV��Bl 128 MOCQ�R�[�T/b NTLMv2 �]\O���k�[hQ'`�v�N�m0��N<P�OX[�e LAN Manager W�I�I{}�[hQ'`-��[<P0x���YN:



��Bl NTLMv2 �]\O���k�[hQ'`: �*g�N�m
�o`�[te'`�#��}\g1YWe0

��Bl 128 MOCQ�R�[0�*g�N�m�X7__�R�[ (128 MOCQ)�#��}\g1YWe0



�-�<P: 



Windows XP0Windows Vista0Windows Server 20000Windows Server 2003 �T Windows Server 2008: �l	g��Bl0



Windows 7 � Windows Server 2008 R2: ��Bl 128 MOCQ�R�[



��O�_;N�c�S: AQ1���R�|q}�{t{veQ



dk�[hQ'`-��[zl�[/f&T�_�(W�c��|q}X[�S
kKNMR�c�O Administrator 3^6b�v�[�x0�Y�g_U(udkx����O�_;N�c�S
N����`�c�O�[�x�N\g��R{veQ�|q}0



�-�<P: *g�[�dk�SGR�N\
NgAQ1���R�|q}�{t{veQ0



�O�_;N�c�S: AQ1�ߎ�x����N�SX[�S@b	g�x�x�T@b	gnj�e>Y



_U(udk�[hQ'`x���O�S�NO(u�O�_;N�c�S SET }T�N�dk}T�N�S���`-��[NR�O�_;N�c�S�t�X��xe: 



AllowWildCards: 
\�g�N}T�N_U(u,�(uW[CQ/e�c (�O�Y DEL }T�N)0

AllowAllPaths: AQ1�X[�S��f�
N�v@b	g�jHh�Tnj�e>Y0

AllowRemovableMedia: AQ1�\�jHh���0R�b�S_�ZԚ��O�Y�xGr0

NoCopyPrompt: 
N���c:yck(W���[�s	g�v�jHh0



�-�<P: *g�[�dk�SGR�N�O�_;N�c�S SET }T�N!q�lO(u0



�ܕ_j: AQ1�
N{veQ1\\�|q}ܕ_j



dk�[hQ'`-��[zl�[/f&T!q�{veQ Windows �O�� Y\��f�ܕ_j0



_U(udk�SGRBf�Windows {veQkub�
N�S�NO(u [ܕ_j] }T�N0



\P(udk�SGRBf�Windows {veQkub�
N
Ngo�:y\��f�ܕ_j�vx��0(W�.z�`�lN�O(u��_������)R{veQ��f���S�_ܕ���|q}O(u�
kP�KN�_�Mb���WL��|q}ܕ_j�d\O0



(W�]\O�z
N�v�-�<P: _U(u0

(W:O
ghV
N�v�-�<P: \P(u0



ܕ_j: nd�[��d��aԚR��j



dk�[hQ'`-��[zl�[�|q}ܕ_jBf/f&Tnd�[��d��aԚR��j0



[��d��aԚ/e�cO(u�|q}R��j�N�c
NO(u�v��aԚR��x�x0(W�WL��v�|q}
N�dkR��j1u\Omi�|q}hsTO��_U�&NN�S0R�Ow�0
NN��*g-��[AQ1��NvQ�N\Omi�|q}��_j�v�|q}��S���_��x�[�|q}R��j(Wdk�|q}ܕ_jBf�]*Rd��[bu0�#j�S�x�O�S��2�eQR��j�vU�tz�^��aԚ-N�vOeanj�e�
Ng���v�cX[�SR��j�v*g�}�c
kO(u�O(u0



vu_U(udk�SGRBf�(Wck8^ܕ_jBfgnd��|q}R��j0储`_U(udk�[hQ'`x���vu\P(uO wBf�_Ngnd�O w�jHh (hiberfil.sys)0



�-�<P: �]\P(u0



��|q}�[�x�}o�: 
\O(u�2QX[(W��f�
N�vёp�7_6RO(u�X7__ёp��Ow�



dk�[hQ'`-��[zl�[/f&T����[�xMb��O(uO(u��v�y�[ёp�0



x���YN:



vu�eёp���2QX[�SO(uBf�
N��BlO(u��v8�eQ

ёp�,{N!kO(uBf�c:yO(u�8�eQ

O(u��_�(W�k!kO(uёp�Bf8�eQ�[�x

�Y�s�0}nj
��ˊ�S��0lQ��ёp��WyP}�i
00



�-�<P: �P�SGR\*g�[�0



��|q}�[�x�}o�: O(u FIPS 140 �v�[�[�x�}o�o�{�l�S�b�R�[0ܖJn�=|ro�{�l




\�e Schannel Security Service Provider (SSP)�dk�[hQ'`-��[g\P(u7_�^�NO�v�[hQ�
��zd\ (SSL) �
�TS�[��N�S/e�c�P8�d\�[hQ'` (TLS) �
�TS�[ZP�p(u6b�z�:O
ghV (�Y�gi�(u)0�Y�g_U(udk-��[��P8�d\�[hQ'`/�[hQ�
��zd\ (TLS/SSL) �[hQ'`�c�O��SgO(u FIPS 140 8h�Q�v�[�x�}o�o�{�l: 3DES � AES (u�e�R�[0RSA b ECC lQ��ёp��[�x�}o�(u�e TLS ёp��N�c�W�I���N�S	g�[hQܖJno�{�l (SHA10SHA2560SHA384 � SHA512) (u�e TLS ܖJn�Bl0




\�e�R�[�jHh�|q}
g�R (EFS)��[/e�cO(u	N͑nj�e�R�[j�n (DES) �2����R�[j�n (AES) �R�[o�{�l�O�R�[ NTFS �jHh�|q}/e�c�v�jHhnj�e09h�d�-�<P�EFS (W Windows Server 2003 � Windows Vista �|R"u�T-NO(u2����R�[j�n (AES) o�{�l-dM� 256 MOCQёp��O�R�[�jHhnj�e��(W Windows XP -NO(u DESX o�{�l�O�R�[�jHhnj�e0�Y� EFS �v�vܕnj
��ˊ�S����R�[�jHh�|q}�0




\�e`��zLhb�
g�R��[�S/e�cO(u	N͑ DES �R�[o�{�l�O�R�[`��zLhb�
g�R�}��
�0



 �la: `��zLhb�
g�R(W
�Hr�v Windows Server -N1z�p0B}�z_j
g�R
00




\�e BitLocker�(W"uu�NUO�R�[ёp�KNMR��_�HQ_U(udk�SGR0_U(udk�SGRBf�^�z�v�O�_�[�x� Windows 80Windows Server 2012 ��
�KN\Omi�|q}
N�v BitLocker 
N�v�[0�\dk�SGRWY(u0R�WL� Windows 8.1 � Windows Server 2012 R2 KNMRKN\Omi�|q}�v��f��BitLocker gO�_�`�^�zbO(u�O�_�[�x; �`�ar�9e�p�p���N��f�O(u�O�_ёp�0



�-�<P: �]\P(u0



�la: �Wo���nj
�U�tj�n (FIPS) 140 /fݑ
\��I��[�x�}o�ߎԚ@b-���v�[hQ'`�[\O0FIPS 140 W�I��vߎԚ/f�W?e�^�TvQ�NW�
T_j�i@b��Bl�v0



��|q}ir�N: Administrators �D}b�T@b�^�zir�N�v�-��d	g�

�c�

dk�[hQ'`-��[zl�[vu Administrators �D}�vb�T�^�zir�NBf�g\ir�N�v�d	g�c>mf}�T�N�[hQ'`;NԚ (SID)0

�-�<P:

Windows XP: O(u� SID

Windows 2003 :  Administrators �D}��|q}ir�N: ��Bl
N@SR'Y\�[(u�e^� Windows P[�|q}



dk�[hQ'`-��[zl�[/f&T��7_6R@b	gP[�|q}@SR'Y\�[0Win32 P[�|q}
Ng@SR'Y\�[0FO/f�Y POSIX I{vQ�NP[�|q}�v8h�_/e�c@SR'Y\�[0



�Y�g_U(udk-��[��Og7_6R@b	g�v�ir�N0&{_�#�P}�S IO ir�N (S�b�jHhir�N(WgQ) @SR'Y\�[0\P(udk-��[1\
NAQ1� Win32 P[�|q}@SR'Y\�[0



�-�<P: �]_U(u0




�|q}ir�N: �R7_gQ�|q}ir�N�v�-�
kP� (�O�Y: &{_�#�P})



dk�[hQ'`-��[zl�[ir�N�v�-�$R%RX[�S�c6Rn�U (DACL) �v7_�^0



Active Directory �}w�qQ(u�|q}nj�n (�O�Y DOS ݈n
T1z0Mutex �S�O_�) �vhQ�Wn�U0�Ydk��O�S(Wz�^KN��~b0R�TqQ(uir�N0�k.z^��W�vir�N��g�^�zNP�-��v DACL��[c�[���S�NX[�Sir�N�T@b�c��v
kP��pUO0



�_U(udk�SGR��-��v DACL �7_�AQ1�^��|q}�{t�T�vO(u����SqQ(uir�N�FO
NAQ1���NO(u��O9e
N/f�NP�^�z�vqQ(uir�N0



�-�<P: �]_U(u0



f�|q}-��[: x��d'`�vP[�|q}



dk�[hQ'`-��[zl�[�Sx��d'`_U�R�T�NP[�|q}�N/e�c�`�v�a(uz_0O(udk�[hQ'`-��[��S�O�`�v�t�X�Blc�[�Naxe�v�vP[�|q}�N/e�c�`�v�a(uz_0



�-�<P: POSIX0



^�|q}-��[: �eߎԚP�6R�SGR
\ Windows �S�WL��jO(u�aI���GR



dk-��[zl�[vuO(u�bU�tz�^Vf��WL�oR�j
T�p .exe �vߎԚBf�/f&T��U�txeMO�aI�0dk�[hQ'`-��[�S(u�O_U(ub\P(u�aI���GR (N.zߎԚP�6R�SGR��GR)0O(uߎԚP�6R�SGR��`�S�N�^�z�aI���GR��NAQ1�b�ybk1u Authenticode =|r�vߎԚ�Nr�ߎԚܕo��vxeMO�aI��p�Wy�O�WL�0�pO�aI���GRuHe��`�_�_U(udk�[hQ'`-��[0



vu_U(u�aI���GRBf�ߎԚP�6R�SGRg�j�g�aI��d��n�U (CRL)��N�x��ߎԚ�v�aI��T=|rck�x0�(W=|r�vz__U�RBfgM�NOHe��0�`�S�N\P(udk�R��0(W [�S�O�N�v|vL��gQ�[] -N�nd� [|vL��] �T [Bf��3b�] 8h�S�eJX0�Y�s�0}nj
��ˊ�S���-��[�S�O�N�v|vL��x���0



�-�<P: �]\P(u0



v�a(uz_���j'Y\g'Y<P



dk�[hQ'`-��[c�[�a(uz_�N�N���j�v'Y\
NP��t֊
Ng'Y<P�p 4 GB0�[��
NP�6R�fNO (~300MB)0



�la



���j'Y\�_�/f 64 KB �v
Pxe0储`8�eQ�v<P
N/f 64 KB �v
Pxe��N�N�j��hVg\���j'Y\hceQ�p 64 KB �v
Pxe0

dk-��[
Ngo�:y(W,g_j��f��SGRir�N-N0

(W-���`Omi�v�[hQ'`��RBf��N�N���j'Y\�T���j�cL��a�[��p&{T�`@bzl�[�vFU�R�S�[hQ'`�Bl0�p)R(u0�D}�SGR
0-��[�ˊ�na(W�z�S0�}�WbD}T~�UMOd\}�[\O��N�N�N���j-��[0

�-�<P: Windows Server 2003 �|R�p 16 MB; Windows XP Professional Service Pack 1 �p 8 MB; Windows XP Professional �p 512 KB0



t�[hQ'`���j'Y\g'Y<P



dk�[hQ'`-��[c�[�[hQ'`�N�N���j�v'Y\
NP��t֊
Ng'Y<P�p 4 GB0�[��
NP�6R�fNO (~300MB)0



�la



���j'Y\�_�/f 64 KB �v
Pxe0储`8�eQ�v<P
N/f 64 KB �v
Pxe��N�N�j��hVg\���j'Y\hceQ�p 64 KB �v
Pxe0

dk-��[
Ngo�:y(W,g_j��f��SGRir�N-N0

(W-���`Omi�v�[hQ'`��RBf��N�N���j'Y\�T���j�cL��a�[��p&{T�`@bzl�[�vFU�R�S�[hQ'`�Bl0�p)R(u0�D}�SGR
0-��[�ˊ�na(W�z�S0�}�WbD}T~�UMOd\}�[\O��N�N�N���j-��[0

�-�<P: Windows Server 2003 �|R�p 16 MB; Windows XP Professional Service Pack 1 �p 8 MB; Windows XP Professional �p 512 KB0



r�|q}���j'Y\g'Y<P



dk�[hQ'`-��[c�[�|q}�N�N���j�v'Y\
NP��t֊
Ng'Y<P�p 4 GB0�[��
NP�6R�fNO (~300MB)0



�la



���j'Y\�_�/f 64 KB �v
Pxe0储`8�eQ�v<P
N/f 64 KB �v
Pxe��N�N�j��hVg\���j'Y\hceQ�p 64 KB �v
Pxe0

dk-��[
Ngo�:y(W,g_j��f��SGRir�N-N0

(W-���`Omi�v�[hQ'`��RBf��N�N���j'Y\�T���j�cL��a�[��p&{T�`@bzl�[�vFU�R�S�[hQ'`�Bl0�p)R(u0�D}�SGR
0-��[�ˊ�na(W�z�S0�}�WbD}T~�UMOd\}�[\O��N�N�N���j-��[0

�-�<P: Windows Server 2003 �|R�p 16 MB; Windows XP Professional Service Pack 1 �p 8 MB; Windows XP Professional �p 512 KB0



��ybk,g_j�Oӌ�D}�?S
T{veQO(u�X[�S�a(uz_���j



dk�[hQ'`-��[zl�[/f&T;�bk�OӌX[�S�a(uz_�N�N���j0



�la



dk-��[
Ngo�:y(W,g_j��f��SGRir�N-N0



dk�[hQ'`-��[�Sgq_���WL� Windows 2000 �S Windows XP �v��f�0



�-�<P: Windows XP �p [�]_U(u]�Windows 2000 �p [�]\P(u]0��ybk,g_j�Oӌ�D}�?S
T{veQO(u�X[�S�[hQ'`���j



dk�[hQ'`-��[zl�[/f&T�ybk�OӌX[�S�a(uz_�N�N���j0



�la



dk-��[
Ngo�:y(W,g_j��f��SGRir�N-N0



dk�[hQ'`-��[�Sgq_���WL� Windows 2000 �S Windows XP �v��f�0



�-�<P: Windows XP �p [�]_U(u]�Windows 2000 �p [�]\P(u]0

��ybk,g_j�Oӌ�D}�?S
T{veQO(u�X[�S�|q}���j



dk�[hQ'`-��[zl�[/f&T�ybk�OӌX[�S�a(uz_�N�N���j0



�la



dk-��[
Ngo�:y(W,g_j��f��SGRir�N-N0



dk�[hQ'`-��[�Sgq_���WL� Windows 2000 �S Windows XP �v��f�0



�-�<P: Windows XP �p [�]_U(u]�Windows 2000 �p [�]\P(u]0

��Oc�a(uz_���j



dk�[hQ'`-��[zl�[�a(uz_���j���OYu�N�N�v)Yxe��Y�g�a(uz_���Oc�e�l/f0�O�eg
00



�S	gvu�`g�N�c�[�v����\X[���j�&N�x�[�a(uz_���j'Y\g'Y<P���N�n��dk����Bf�Mb-��[�P<P0



�la: dk-��[
Ngo�:y(W,g_j��f��SGRir�N-N0

�-�<P: !q0



��Oc�[hQ'`���j



dk�[hQ'`-��[�S�Nzl�[�[hQ'`���j���OYu�N�N�v)Yxe��Y�g�[hQ'`���j�Oc�e�l/f0�O�eg
00



�S	gvu�`g�N�c�[�v����\X[���j�&N�x�[�[hQ'`���j'Y\g'Y<P���N�n��dk����Bf�Mb-��[�P<P0



�la

dk-��[
Ngo�:y(W,g_j��f��SGRir�N-N0

O(u��_��d	g�{t=z8h�S�[hQ'`���jO(u�
kP�Mb��X[�S�[hQ'`���j0

�-�<P: !q0



��Oc�|q}���j



dk�[hQ'`-��[zl�[�|q}���j���OYu�N�N�v)Yxe��Y�g�|q}���Oc�e�l/f0�O�eg
00



�S	gvu�`g�N�c�[�v����\X[���j�&N�x�[�|q}���j'Y\g'Y<P���N�n��dk����Bf�Mb-��[�P<P0



�la: ,g_j��f��SGRir�N-N
Ngo�:ydk-��[0

�-�<P: !q0



��a(uz_���j�Oc�e�l



dk�[hQ'`-��[zl�[�a(uz_���j�v0\X[
0�e�l0



�Y�g�`
N��\X[�a(uz_���j�ˊ(Wdk�SGR�v [gQ�[] 
\q��eJXx��S [�[��P�SGR-��[] 8h�S�eJX�6q�_	cNN [��������[�N�N]0



�Y�g�`(W�c�[�v����\X[���j�ˊ(Wdk�SGR�v [gQ�[] 
\q��eJXx��S [�[��P�SGR-��[] 8h�S�eJX�6q�_	cNN [�O�eg���[�N�N]�&N(W [�a(uz_���OYu)Yxe] -��[-Nc�[i�vu�v)Yxe0ˊ�x���a(uz_���j'Y\g'Y<P���N�n��dk����0



�Y�g�`�_��OYu���j-N�v@b	g�N�N�ˊ(Wdk�SGR�v [gQ�[] 
\q��eJXx��S [�[��P�SGR-��[] 8h�S�eJX�6q�_	cNN [
N�����[�N�N (�NKb�R�e_nd���)]0dkx�����Kb�Rnd����j0(W�P�r�lN�vuT�0R���j'Y\g'Y<PBf�1\ghc�h�e�N�N0



�la: dk-��[
Ngo�:y(W,g_j��f��SGRir�N-N0



�-�<P: !q0



��[hQ'`���j�Oc�e�l



dk�[hQ'`-��[zl�[�[hQ'`���j�v0\X[
0�e�l0



�Y�g�`
N��\X[�[hQ'`���j�ˊ(Wdk�SGR�v [gQ�[] 
\q��eJXx��S [�[��P�SGR-��[] 8h�S�eJX�6q�_	cNN [��������[�N�N]0



�Y�g�`(W�c�[�v����\X[���j�ˊ(Wdk�SGR�v [gQ�[] 
\q��eJXx��S [�[��P�SGR-��[] 8h�S�eJX�6q�_	cNN [�O�eg���[�N�N]�&N(W [�[hQ'`���j�OYu)Yxe] -��[-Nc�[i�vu�v)Yxe0ˊ�x���[hQ'`���j'Y\g'Y<P���N�n��dk����0



�Y�g�`�_��OYu���j-N�v@b	g�N�N�ˊ(Wdk�SGR�v [gQ�[] 
\q��eJXx��S [�[��P�SGR-��[] 8h�S�eJX�6q�_	cNN [
N�����[�N�N (�NKb�R�e_nd���)]0dkx�����Kb�Rnd����j0(W�P�r�lN�vuT�0R���j'Y\g'Y<PBf�1\ghc�h�e�N�N0



�la



dk-��[
Ngo�:y(W,g_j��f��SGRir�N-N0



O(u��_��d	g�{t=z8h�S�[hQ'`���jO(u�
kP�Mb��X[�S�[hQ'`���j0



�-�<P: !q0{�|q}���j�Oc�e�l



dk�[hQ'`-��[zl�[�|q}���j�v0\X[
0�e�l0



�Y�g�`
N��\X[�|q}���j�ˊ(Wdk�SGR�v [gQ�[] 
\q��eJXx��S [�[��P�SGR-��[] 8h�S�eJX�6q�_	cNN [��������[�N�N]0



�Y�g�`(W�c�[�v����\X[���j�ˊ(Wdk�SGR�v [gQ�[] 
\q��eJXx��S [�[��P�SGR-��[] 8h�S�eJX�6q�_	cNN [�O�eg���[�N�N]�&N(W [�|q}���OYu)Yxe] -��[-Nc�[i�vu�v)Yxe0ˊ�x���|q}���j'Y\g'Y<P���N�n��dk����0



�Y�g�`�_��OYu���j-N�v@b	g�N�N�ˊ(Wdk�SGR�v [gQ�[] 
\q��eJXx��S [�[��P�SGR-��[] 8h�S�eJX�6q�_	cNN [
N�����[�N�N (�NKb�R�e_nd���)]0dkx�����Kb�Rnd����j0(W�P�r�lN�vuT�0R���j'Y\g'Y<PBf�1\ghc�h�e�N�N0



�la: dk-��[
Ngo�:y(W,g_j��f��SGRir�N-N0



�-�<P: !q0�SP��D}



dk�[hQ'`-��[AQ1��|q}�{t�T�[��[hQ'`�D} (�SP��D}) �viQ.zgQ�[0



�iQ.zgQ�[�p0b�T
0�T0b�T��l\
00[b�T] n�U�[�l\�e�SP��D}�v�N�T0[b�T��l\] n�Uc�[�SP��D}��l\�evQ�N�T�N�D}0



vu7_6R�WL��SP��D}�SGRBf�g�yd�
N(W [b�T] n�U-N�v�SP��D}�v�vMRb�T�&N�e�X [b�T] n�U-N�vMR
N/f�SP��D}b�T�v@b	gO(u�0



�`�S�NO(u�SP��D}�SGR�O�c6R�D}b�Tnj<h0O(udk�SGR��`�S�Nc�[�D}�vb�T0�SGR-N*gc�[�v@b	gb�T�(W-��[b͑�etetg��g���yd�0dkY�[�STb�Tnj<h-��[] x���S�x�O�kP�SP��D}�Pl\�e [b�T��l\] kMOc�[KN�D}�vb�T0



�O�Y��`�S�N�^�z�SP��D}�SGR��SAQ1�c�[O(u� (�Y Alice �T John) l\�e Administrators �D}�vb�T0vu͑�etet�SGRBf��S	g Alice �T John �N6q/f Administrators �D}�vb�T0



	giQ.z�e�l�S�NWY(u�SP��D}�SGR:



(W�[hQ'`�{,g-N�[��SGR��#j\(W-��[g��WY(u�`�v,g_j��f�0

�v�c(W�D}�SGRir�N (GPO) 
N�[�-��[��h�:y�k!k͑�etet�SGRBf1\guHe0(W�]\O�zb:O
ghV
N��[hQ'`-��[�k 90 R�g͑�etetN!k; (W�}�W�c6R�zGR/f�k 5 R�N!k0
N֊/f&T	g@b���f��k�� 16 P\Bf_Ng͑�etetN!k-��[0

�-�<P: �l	gc�[0



f�JT



�Y�g�]�[��SP��D}�SGR�&N�]͑�etet�D}�SGR�1\g�yd��vMR
N(W�SP��D}�SGRb�Tn�U-N�v@b	gb�T0��S��S�b�-�b�T��O�Y�|q}�{t�T0



�la



�SP��D};N���ar�(u�O-��[�]\O�zbb�T:O
ghV
N,g_j�D}�vb�Tnj<h0

zz�v [b�T] n�Uh�:y�SP��D}�l	gb�T; zz�v [b�T��l\] n�Uh�:y*gc�[�SP��D}@bl\KN�D}0



��|q}
g�R�[hQ'`-��[<P



AQ1��|q}�{t�T�[�@b	g�|q}
g�R�v_U�R!j_ (Kb�R0��Rb�]\P(u) �N�SX[�S
kP� (_U�R0\Pbkb�f\P)0



�-�<P: *g�[�0



�la



,g_j��f��SGRir�N-N
Ngo�:ydk-��[0

�Y�gx��d\�|q}
g�R_U�R-��[�p [��R]�ˊ�WL�i�vu,nf��N�x�[
g�R
N���O(u��d\O�O�� Y_U�R0

�p�N��gsOSHe���ˊ\
N���b
NO(u�v
g�R-��[�p [Kb�R]0



�{v��[hQ'`-��[<P



AQ1��|q}�{t�TO(u�[hQ'`-��[�{t�T��O�[�{v�_j�x�vX[�S
kP� ((W$R%RX[�S�c6Rn�U (DACL) 
N) �T=z8h-��[ ((W�|q}X[�S�c6Rn�U (SACL) 
N)0



�-�<P: *g�[�0



�la: ,g_j��f��SGRir�N-N
Ngo�:ydk-��[0



��jHh�|q}�[hQ'`-��[<P



AQ1��|q}�{t�TO(u�[hQ'`-��[�{t�T��O�[��jHh�|q}ir�N�vX[�S
kP� ((W$R%RX[�S�c6Rn�U (DACL) 
N) �T=z8h-��[ ((W�|q}X[�S�c6Rn�U (SACL) 
N)0



�-�<P: *g�[�0



�la: ,g_j��f��SGRir�N-N
Ngo�:ydk-��[0

�=z8h: 7_6R�WL�=z8h�SGRP[^�%R-��[ (Windows Vista b�f�eHr,g) �N���[=z8h�SGR^�%R-��[0



Windows Vista �S�f�eHr,g�v Windows AQ1�O(u=z8h�SGRP[^�%R��N�f�|�x�v�e_�O�{t=z8h�SGR0(W^�%Rd\}-��[=z8h�SGR�\g���[�e�vP[^�%R=z8h�SGR�R��0�D}�SGR�SAQ1�=z8h�SGR�S�N(W^�%Rd\}-��[��N�V�p�e_jhVg�ReQ�}�Wb�GS}� Windows Vista b�f�e�vHr,g�@b�N�s	g�v�D}�SGR�S�N���[�e_jhV�vP[^�%R-��[0�p�N��=z8h�SGR
N����f�D}�SGRsS�SO(uP[^�%R�O�{t�(W Windows Vista ��f�eHr,g-N	g�e�v{v�<P SCENoApplyLegacyAuditPolicy��S2�bk\^�%Rd\}=z8h�SGRWY(u0R�D}�SGR�S [,g_j�[hQ'`�SGR] �|q}�{t�]wQ0



�Y�g(W��-��[�v^�%Rd\}=z8h�SGR��vMR"uu�v�N�N
NN��vQ�S�V�S��/f�]-��[dk{v�_j�x0



�-�<P: _U(u�O(u�3^6b�c6R: O(ugQ�^�v Administrator 3^6b�v�{t�T8h�Q!j_



dk�SGR-��[g�c6RgQ�^�v Administrator 3^6b�v�{t�T8h�Q!j_L��p0



x���YN:



"  �]_U(u: gQ�^�v Administrator 3^6bO(u�{t�T8h�Q!j_09h�d�-���NUO����cGS
kP��v�d\O��g�c:yO(u�8h�Q�d\O0



"  �]\P(u: (�-�<P) gQ�^�v Administrator 3^6b\�N�[te�v�|q}�{t
kP��WL�@b	g�a(uz_0

�DCOM: �N Security Descriptor Definition Language (SDDL) ���lh�:y�v��f�X[�SP�6R



dk�SGR-��[gzl�[�T�NO(u�b�D}�S�N�_`��zb,g_jX[�S DCOM �a(uz_0dk-��[/f(u�O�c6R��f� DCOM �a(uz_�v;e�db�0



�`�S�NO(udk�SGR-��[�Oc�[yr�[O(u�
\�eOmi-N@b	g��f�KN DCOM �a(uz_�vX[�S
kP�0vu�`c�[���c�
kP��vO(u�b�D}Bf�gO(u���N�D}�T
kP��v Security Descriptor Definition Language h�:y�l�OkX�[�[hQ'`�c�CQkMO0�Y�g�[hQ'`�c�CQ�N�pzz}v��SGR-��[g(W�{,g-N�[��FO
Ng7_6R�WL�0�`�S�N\ [,g_jX[�S] �T [`��zX[�S] �v [AQ1�] b [�bU}] 
kP�f�x0W�c�O(u��T�D}0



1u�e_U(u [DCOM: �N Security Descriptor Definition Language (SDDL) ���lh�:y�v��f�X[�SP�6R] ��^�zKN{v�-��[�v*QHQ��^gؚ�edk@S�W-NHQMR�v{v�-��[0`��zz�^|T�S
g�R (RpcSs) g�j�g�e{v�_j�xKN [Policies] @S�k�v��f�P�6R��N��N{v���v�v*QHQ��^ؚ�e OLE N�v�s	g{v�_j�x0�h�:yHQMR�v{v�-��[�]
N�Q	gHe��N�Y�g�`���f�s	g�v-��[�\
Ng���fO(u��v��f�X[�S
kP�0-��[vQO(u��T�D}n�UBfˊyr%R\�_0



dk�SGR-��[�v�S��<P�YN:



 zz}v: ��Nh�*Rd��SGR7_6R_j�x�v,g_j�[hQ'`�SGR�e_0dk<Pg*Rd��SGR�6q�_\�[-��[�p [*g�[�] �rKa0傁�-��[ [zz}v] <P��`�S�NO(u ACL �}/�hV&Nnzzr�n�U�6q�_	cNN [�x�[]0



 SDDL: �/fvu�`_U(udk�SGRBf��`c�[KN�D}�
kP��v Security Descriptor Definition Language h�:y�l0



 *g�[�: �/f�-�<P0



�la:

�|q}�{t�T1u�e Windows -N�v DCOM ���f��*g���c�X[�S DCOM �a(uz_�v
kP���|q}�{t�T�S�NO(u [DCOM: �N Security Descriptor Definition Language (SDDL) ���lh�:y�v��f�X[�SP�6R] �SGR-��[�O�{t��f��v DCOM X[�S
k0�|q}�{t�T�S�NO(udk-��[�c�[�T�NO(u��T�D}�S�N�_`��zb,g_jX[�S��f�
N�v DCOM �a(uz_0�#j�S���S�|q}�{t�T�TO(u�
\�e DCOM �a(uz_�v�c6R0傁��WL�dk�R\O�ˊ��_U [DCOM: �N Security Descriptor Definition Language (SDDL) ���lh�:y�v��f�X[�SP�6R] -��[�6q�_	cNN [�}/��[hQ'`]0c�[�`��S+T�v�D}��N�S��N�D}�v��f�X[�S
kP�0�#j�S�[�-��[�&N-��[i�vu�v SDDL <P0







PA7DCOM: �N Security Descriptor Definition Language (SDDL) ���lh�:y�v��f�_U�RP�6R



dk�SGR-��[gzl�[�T�NO(u�b�D}�S�_`��zb,g_j_U�Rb_U(u DCOM �a(uz_0dk-��[/f(u�O�c6R��f� DCOM �a(uz_�v;e�db�0



�`�S�NO(udk-��[�O�c�O(u�
\�e@b	g��f�-N DCOM �a(uz_�vX[�S
k0vu�`�[�dk-��[&Nc�[���c�
kP��vO(u�b�D}Bf�gO(u���N�D}�T
kP��v Security Descriptor Definition Language h�:y�l�OkX�[�[hQ'`�c�CQkMO0�Y�g�[hQ'`�c�CQ�N�pzz}v��SGR-��[g(W�{,g-N�[��FO
Ng7_6R�WL�0�`�S�N\ [,g_j_U�R]0[`��z_U�R]0[,g_j_U(u] �T [`��z_U(u] �v [AQ1�] b [�bU}] 
kP�f�x0W�c�O(u��T�D}0



�V��^�zKN{v�-��[�v*QHQ��^gؚ�edk@S�W-NHQMR�v{v�-��[0`��zz�^|T�S
g�R (RpcSs) g�j�g�e{v�_j�xKN [Policies] @S�k�v��f�P�6R; ��N{v���v�v*QHQ��^ؚ�e OLE N�v�s	g{v�_j�x0



dk�D}�SGR-��[�v�S��<P�YN:



 zz}v: ��Nh�*Rd��SGR7_6R_j�x�v,g_j�[hQ'`�SGR�e_0dk<Pg*Rd��SGR�6q�_\�[-��[�p [*g�[�] �rKa0傁�-��[ [zz}v] <P��`�S�NO(u ACL �}/�hV&Nnzzr�n�U�6q�_	cNN [�x�[]0



 SDDL: �/fvu�`_U(udk�SGRBf��`c�[KN�D}�
kP��v Security Descriptor Definition Language h�:y�l0



 *g�[�: �/f�-�<P0



�la:

�|q}�{t�T1u�edkHr,g Windows KN DCOM �v���f��*g���c�_U�R�T_U(u DCOM �a(uz_�v
kP���|q}�{t�T�S�NO(udk�SGR-��[�O�c6R��f��v DCOM _U�R�T_U(u0�|q}�{t�T�S�NO(u [DCOM: �N Security Descriptor Definition Language (SDDL) ���lh�:y�v��f�_U�RP�6R] �SGR-��[�c�[�T�NO(u��T�D}�S�N�_,g_j�T`��z_U�R�T_U(u��f�
N�v DCOM �a(uz_0�#j�S���S�|q}�{t�T�Tc�[KNO(u�
\�e DCOM �a(uz_�v�c6R0傁��WL�dk�R\O�ˊ��_U [DCOM: �N Security Descriptor Definition Language (SDDL) ���lh�:y�v��f�_U�RP�6R] -��[�6q�_	cNN [�}/��[hQ'`]0c�[�`��S+T�v�D}��N�S��N�D}�v��f�_U�R
kP�0�#j�S�[�-��[�&N-��[i�vu�v SDDL <P0





FO(u�3^6b�c6R: (W�{t�T8h�Q!j_��|q}�{t�TKN�cGS
kP��c:y�vL��p



dk�SGR-��[g�c6R�|q}�{t�TKN�cGS
kP��c:y�vL��p



x���YN:



"  �cGS
kP��
N�c:y: AQ1�wQ	gyr�k
kP��v3^6b�WL�����cGS
kP��v�d\O��
N�Tab/f��I�0�la: ˊ�S(Wg�V9��v�t�X-NO(udkx��0



"  (W�[hQLhb��c:y8�eQ��I�: vu�d\O����cGS
kP�Bf�g(W�[hQLhb��c:yO(u�8�eQwQ	gyr�k
kP��vO(u�
T1z��[�x0�Y�gO(u�8�eQ	gHe�v��I���d\Og�NO(u��vgؚ�S(u
kP�|~�~0



"  (W�[hQLhb��c:y��BlTa: vu�d\O����cGS
kP�Bf�g(W�[hQLhb��c:yO(u�x��S [AQ1�] b/f [�bU}]0�Y�gO(u�x��S [AQ1�]��d\Og�NO(u��vgؚ�S(u
kP�|~�~0



"  ��I��c:y: vu�d\O����cGS
kP�Bf�g�c:yO(u�8�eQ�|q}�{tO(u�
T1z��[�x0�Y�gO(u�8�eQ	gHe�v��I���d\Og�Ni�(u�v
kP�|~�~0



"  Ta�c:y:  vu�d\O����cGS
kP�Bf�g�c:yO(u�x��S [AQ1�] b/f [�bU}]0�Y�gO(u�x��S [AQ1�]��d\Og�NO(u��vgؚ�S(u
kP�|~�~0



"  ^� Windows �N2�MO�jHh�vTa�c:y: (�-�<P) vu^� Microsoft �a(uz_�v�d\O����cGS
kP�Bf�g(W�[hQLhb��c:yO(u�x��S [AQ1�] b/f [�bU}]0�Y�gO(u�x��S [AQ1�]��d\Og�NO(u��vgؚ�S(u
kP�|~�~0



4O(u�3^6b�c6R: j�nO(u�KN�cؚ
kP��c:y�vL��p

dk�SGR-��[g�c6Rj�nO(u�KN�cؚ
kP��c:y�vL��p



x���YN:



"  �c:y8�eQ��I�: (�-�<P) vu�d\O����cGS
kP�Bf�g�c:yO(u�8�eQ�|q}�{tO(u�
T1z��[�x0�O(u�8�eQ	gHe�v��I��r��d\Og�Ni�(u�v
kP�|~�~�WL�0



"  ��R�bU}�cGS
kP���Bl: vu�d\O����cGS
kP�Bf�go�:y�bU}X[�S/���
�o`0�Nj�nO(u���R�WL�Lh
N�W��f��vOmi�S��gx��ddk-��[��NM�NO���\Bl/e�c萀�TS�R�v_jg0



"  (W�[hQLhb��c:y8�eQ��I�: vu�d\O����cGS
kP�Bf�g(W�[hQLhb��c:yO(u�8�eQ
NT�vO(u�
T1z��[�x0�Y�gO(u�8�eQ	gHe�v��I���d\Og�Ni�(u�v
kP�|~�~�WL�0



O(u�3^6b�c6R: uP,n�a(uz_�[݈�&N�c:y�cGS
kP�



dk�SGR-��[g�c6R��f��v�a(uz_�[݈uP,nL��p0



x���YN:



"  �]_U(u: (�-�<P)�vuuP,n0R�a(uz_�[݈\݈����cGS
kP�Bf�g�c:yO(u�8�eQ�|q}�{tO(u�
T1z��[�x0�Y�gO(u�8�eQ	gHe�v��I���d\Og�Ni�(u�v
kP�|~�~0



"  �]\P(u: *guP,n0R�a(uz_�[݈\݈�_N*g�c:y�cGS
kP�0�WL�j�nO(u�Lhb�&N)R(u�Y>m�[݈�bS� (�O�Y��D}�SGRߎԚ�[݈b Systems Management Server (SMS)) �vOmi��ar�\P(udk�SGR-��[0(Wdk�`�lN�
N���2�L��[݈z_uP,n0



�O(u�3^6b�c6R: �Pݑ
\�]=|r�W�I�N��v�S�WL��j��cGSvQ
kP�



dk�SGR-��[g7_6RlQ��ёp��WyP}�i (PKI) =|�z�j�g�NUO��Bl�cGS
kP��v�N�R_�a(uz_0Omi�v�|q}�{t�T�S�N�\�aI��e�X�,g_j��f��v�S�O�N�v|vL���aI�X[>e@S��O�c6RAQ1��WL��T�N�a(uz_0



x���YN:



"  �]_U(u: AQ1�c�[�v�S�WL��j�WL�KNMR�7_6R�WL� PKI �aI�_W�I�0



"  �]\P(u: (�-�<P) AQ1�c�[�v�S�WL��j�WL�KNMR�
N7_6R�WL� PKI �aI�_W�I�0



�O(u�3^6b�c6R: �Pݑ
\(W�[hQMOn�[݈�v UIAccess �a(uz_��cGSvQ
kP�



dk�SGR-��[g�c6R��Bl�NO(u��Nb�TS�R�]wQ (UIAccess) �[te'`d\}�WL��v�a(uz_�_�MO�e�jHh�|q}-N�v�[hQMOn0�[hQMOn�PP��eNR�v�:



- & \Program Files\�S+TP[�v�

- & \Windows\system32\

- & \Program Files (x86)\�S+T 64 MOCQ Windows Hr,g�vP[�v�



�la: 
N֊dk�[hQ'`-��[�v�rKa�pUO�Windows ��gݑ
\�NUO��Bl�N UIAccess teTd\}�WL��v�N�R_�a(uz_�7_6R�WL�lQ��ёp��WyP}�i (PKI) =|�z�j�g0



x���YN:



"  �]_U(u: (�-�<P) �Y�g�a(uz_MO�e�jHh�|q}�v�[hQMOn��Sg�N UIAccess teT�WL�0



"  �]\P(u: sSO�a(uz_
N/fMO�e�jHh�|q}�v�[hQMOn�_Ng�N UIAccess teT�WL�0



#O(u�3^6b�c6R: ��_U�{t�T8h�Q!j_



dk�SGR-��[g�c6R��f��v@b	gO(u�3^6b�c6R (UAC) �SGR-��[L��p0�Y�g���fdk�SGR-��[��_�͑�e_U�R��f�0



x���YN:



"  �]_U(u: (�-�<P) _U(u�{t�T8h�Q!j_0�_�_U(udk�SGR��N�_��Ni�vu�v�e_-��[�vܕ�v UAC �SGR-��[�Mb��AQ1�gQ�^�v Administrator 3^6b�N�S@b	gvQ�Nl\�e Administrators �D}b�T�vO(u�(W�{t�T8h�Q!j_-N�WL�0



"  �]\P(u: g\P(u�{t�T8h�Q!j_�S@b	g�vܕ�v UAC �SGR-��[0�la: �Y�g\P(udk�SGR-��[�nj
��[hQ-N�_g��w�`\Omi�|q}�vteԚ�[hQ'`�]M�NO0



�O(u�3^6b�c6R: �c:y�cGS
kP�BfR�c0R�[hQLhb�



dk�SGR-��[g�c6R�cGS
kP���Bl�c:y/fo�:y(W�N�R_O(u�Lhb�b/f�[hQLhb�0



x���YN:



"  �]_U(u: (�-�<P) 
N֊�|q}�{t�T�j�nO(u��v�c:yL��p�SGR-��[�pUO�@b	g�cGS
kP���Bl��go�:y(W�[hQLhb�
N



"  �]\P(u: @b	g�cGS
kP���Bl��go�:y(W�N�R_O(u�Lhb�0gO(u�|q}�{t�T�j�nO(u��v�c:yL��p�SGR-��[0



O(u�3^6b�c6R: \�jHh�S{v��[eQ1YWe[��dS&N2QX[��kNO(u�MOn



dk�SGR-��[g�c6R/f&T\�a(uz_�[eQ1YWe͑�e\T0R�]�[��v{v��T�jHh�|q}MOn0dk�SGR-��[�Sn\���N�N�|q}�{t�T��R�WL��&N\�WL����k�a(uz_nj�e�[eQ� %ProgramFiles%0%Windir%0%Windir%\system32 b HKLM\Software �v�a(uz_0



x���YN:



"  �]_U(u: (�-�<P) (W�WL����k\�a(uz_�[eQ1YWe͑�e\T0R�jHh�|q}�{v�-N�]�[��vO(u�MOn0



"  �]\P(u: \nj�e�[eQ��S�Ow�MOn�v�a(uz_1YWe0



�^�z&{_�#�P}



dkyr�k
kP�gzl�[O(u�/f&T�S�N�_{veQ�v��f��^�z&{_�#�P}0



�-�<P: Administrator



f�JT: dkyr�k
kP��P���c��O�N�vO(u�0(W&N^�-���OU�t&{_�#�P}�v�a(uz_-N�&{_�#�P}g\�[hQ'`����0



�la:

dk-��[�S-dM� symlink filesystem -��[O(u��N�O(u}T�NRlQ(uz_�O�c6R��f�
NAQ1��v symlinks ^��W��S�d1~
N�-��[0�Y�	gܕ fsutil �T&{_�#�P}�vs�0}nj
��ˊ(W}T�NR8�eQ 'fsutil behavior set symlinkevaluation /?'0s�O9eir�Njd|



dkyr�k
kP��Szl�[�T�NO(u�3^6b�S�O9eir�N (�O�Y��jHh0{v�_j�xb1uvQ�NO(u��d	g�vU�tz�^) �v�[te'`jd|0(WO(u�3^6bN�WL��vU�tz�^
N���dkyr�k
kP��sS�S�O9er�O(u��d	gKNir�N�vjd|0



�-�<P: !q;O(u�3^6b�c6R: AQ1� UIAccess �a(uz_
NO(u�[hQLhb��O�c:y�cGS
kP�0



dk�SGR-��[�c6RO(u��Nb�TS�R�]wQ (UIAccess b UIA) z_(Wj�nO(u�O(u�cGS
kP��c:yBf�/f&T��R\P(u�[hQLhb�0



"  �]_U(u: UIA z_�S�b Windows `��zTS�R(WgQ�v UIA z_��S��R\P(u�cGS
kP��c:y�v�[hQLhb�0�Y�g�`*g\P(u [O(u�3^6b�c6R: �c:y�cGS
kP�BfR�c0R�[hQLhb�] �SGR-��[��c:yg�Q�s(W�N�R_O(u��vLhb�
N��^��[hQLhb�0



"  �]\P(u: (�-�<P) �S	g�N�R_Lhb��vO(u�Mb��\P(u�[hQLhb��b/f\P(u [O(u�3^6b�c6R: �c:y�cGS
kP�BfR�c0R�[hQLhb�] �SGR-��[Mb��\P(u�[hQLhb�0



O(W�P�N/���SBf���I��{t�TgO(udk-��[03^6b
N�ar��d	gdk
kP���V�p�[�Sg��c>mf} Winlogon0�Y�gdk
kP�c�[f}vQ�N�[Ԛ�GRO(u�2QX[�v��I��S��g��)m2�0����fBf@S



dkO(u�
kP�zl�[�T�NO(u���D}�S�N���f��f�o�:y,g0WBf��BfO(u�vBf@S�_N1\/fc��f��v�|q}Bf���RBf�]0�|q}Bf��,g��/fU}
\�v��N
N�SBf@S���f�vq_��0



dkO(u�
kP�/f�[�(W�]\O�z�:O
ghV�v�-��}�W�c6R�z�D}�SGRir�N (GPO) �N�S,g_j�[hQ'`�SGR-N0 



�-�<P: Administrators0Users��X�RU�tz�^�]\OD}



dk
kP�zl�[�T�NO(u�3^6b�S�N�X�Rbn\U�tz�^�v�]\OD}'Y\0



�-�<P: Users



U�tz�^�v�]\OD}/f�[Ԛ RAM ��aԚ-N�vU�tz�^�vMR�S���v��aԚ�b�D}0��N�b�/f8^Й�v�N�S���a(uz_O(u�
Ng��|vR�/���0�]\OD}�v'Y\NP��
NP��S�Nq_��U�tz�^�v[��d��aԚR�L��p0



f�JT: �X�RU�tz�^�v�]\OD}'Y\gn\�|q}vQ�N�R�S(u�v�[Ԛ��aԚ=~xe0�}[hQ'`: P�6R NTLM: ��_`��z:O
ghV�v#��Q NTLM Amϑ



dk�SGR-��[AQ1��`�bU}b=z8h�_dk Windows 7 bdk Windows Server 2008 R2 ��f�0R�NUO Windows `��z:O
ghV�v#��Q NTLM Amϑ0



�Y�g�`x��S [hQ�AQ1�] b/f*g-��[dk�SGR-��[�(u6b�z��f��S�NO(u NTLM W�I�
\`��z:O
ghVW�I���RX�%R0



�Y�g�`x��S [hQ�=z8h]�(u6b�z��f�g���kP NTLM W�I���Bl0R`��z:O
ghV�v�N�N���S���`X�%R�_(u6b�z��f�6e0R NTLM W�I���Bl�v:O
ghV0



�Y�g�`x��S [hQ��bU}]�(u6b�z��f�!q�lO(u NTLM W�I��OW�I�
\`��z:O
ghV�v��RX�%R0�`�S�NO(u [�}[hQ'`: P�6R NTLM: �e�X NTLM W�I��v`��z:O
ghV�OY] �SGR-��[�O�[�AQ1�(u6b�zO(u NTLM W�I��v`��z:O
ghVn�U0 



�_��\/f Windows 7 b Windows Server 2008 R2 Mb/e�cdk�SGR0



�la: =z8h�\���N�Ng��(Wdk��f�
N�v "Operational" ��-N�dk��MO�e Applications and Services Log/Microsoft/Windows/NTLM0



�}[hQ'`: P�6R NTLM: #�eQ NTLM Amϑ



dk�SGR-��[AQ1��`�bU}bAQ1�#�eQ NTLM Amϑ0



�Y�g�`x��S [hQ�AQ1�]�b/f
N-��[dk�SGR-��[�:O
ghV\AQ1�@b	g�v NTLM W�I���Bl0



�Y�gx��S [�bU}@b	g�}�W3^6b]�GR:O
ghVg�bU}�}�W{veQ�v NTLM W�I���Bl�&No�:y NTLM \���v/����FO/fAQ1�,g_j3^6b{veQ0



�Y�gx��S [�bU}@b	g3^6b]�:O
ghV\g�bU}#�eQAmϑ�v NTLM W�I���Bl�&No�:y NTLM \���v/���0 



�_��\/f Windows 7 b Windows Server 2008 R2 Mb/e�cdk�SGR0



�la: \���N�Ng��(Wdk��f�
N�v "Operational" ��-N�dk��MO�e Applications and Services Log/Microsoft/Windows/NTLM0



�}[hQ'`: P�6R NTLM: �P�}�W�v NTLM W�I�



�P�SGR-��[AQ1��`�bU}bAQ1��P�}�W�c6R�z@bl\�}�W-N�v NTLM W�I�0�P�SGR
Ngq_��0R�P�}�W�c6R�z�v�N�R_{veQ0



�Y�gx��S [�]\P(u] b
N-��[dk�SGR-��[��}�W�c6R�z\AQ1��}�W-N@b	g�v NTLM �P^�W�I���Bl0



�Y�gx��S [�bU}�}�W:O
ghV�v�}�W3^6b]�GR�}�W�c6R�zg�bU}
\�}�W-N@b	g:O
ghVKNO(u�}�W3^6b�v@b	g NTLM W�I�{veQVf��&N�P�V NTLM ��\���v/����d�^�:O
ghV
T1zMO�e0�}[hQ'`: P�6R NTLM: �e�X�P�}�W�v:O
ghV�OY
0�SGR-��[�v�OYn�U-N0



�Y�gx��S [�bU}�}�W3^6b]�GR�}�W�c6R�zg�bU}�Oꁲ}�W3^6b�v@b	g NTLM W�I�{veQVf��&N�P�V NTLM ��\���v/����d�^�:O
ghV
T1zMO�e0�}[hQ'`: P�6R NTLM: �e�X�P�}�W-N NTLM W�I��v:O
ghV�OY
0�SGR-��[�v�OYn�U-N0



�Y�gx��S [�bU}�}�W:O
ghV]�GR�}�W�c6R�zg�bU}�}�W-N@b	g:O
ghV�v NTLM W�I���Bl�&N�P�V NTLM ��\���v/����d�^�:O
ghV
T1zMO�e0�}[hQ'`: P�6R NTLM: �e�X�P�}�W-N NTLM W�I��v:O
ghV�OY
0�SGR-��[�v�OYn�U-N0



�Y�gx��S [hQ��bU}]�GR�}�W�c6R�z\�bU}�O�vQ:O
ghV�v@b	g NTLM �P^�W�I���Bl�&N�P�V NTLM ��\���v/����d�^�:O
ghV
T1zMO�e0�}[hQ'`: P�6R NTLM: �e�X�P�}�W-N NTLM W�I��v:O
ghV�OY
0�SGR-��[�v�OYn�U-N0 



�_��\/f Windows Server 2008 R2 Mb/e�cdk�SGR0



�la: \���N�N/f��(Wdk��f�
N�v "Operational" ��-N�dk��/fMO�e Applications and Services Log/Microsoft/Windows/NTLM0



Y�}[hQ'`: P�6R NTLM: �e�X NTLM W�I��v`��z:O
ghV�OY



�Y�g-��[�N0�}[hQ'`: P�6R NTLM: ��_`��z:O
ghV�v#��Q NTLM Amϑ
0�SGR-��[�GR�P�SGR-��[�S���`�^�zAQ1�(u6b�zO(u NTLM W�I��v`��z:O
ghV�OYn�U0



�Y�g-��[�P�SGR-��[�GR�`�S�N�[�AQ1�(u6b�zO(u NTLM W�I��v`��z:O
ghVn�U0



�Y�g*g-��[�P�SGR-��[�GR
NgWY(u�NUO�OY0



�P�OYn�U�v:O
ghV}T
T<h_�p�[te�}�W
T1z (FQDN) b�a(uz_O(u�v NetBIOS :O
ghV
T1z�NL��S��R�QNP
T1z0傁��x�O@b	g�a(uz_O(u�v�OY
T1zMO�en�U-N�&N�x�O�OYck�x�:O
ghV
T1z�ar�TBf�NiQP
T1z<h_R�Q0(WW[2N�v�NUOMOn-N���S�NO(u�UPf_� (*) �NZP�p,�(uW[CQ0



.�}[hQ'`: P�6R NTLM: �e�X�P�}�W�v:O
ghV�OY



�Y�g-��[�N0�}[hQ'`: P�6R NTLM: �bU}�P�}�W�v NTLM W�I�
0�GR�P�SGR-��[gAQ1��`�^�z�P�}�W�v:O
ghV�OYn�U��NAQ1�(u6b�z�Sݑ
\n�U-N�v:O
ghVO(u NTLM �P^�W�I�0



�Y�g-��[�P�SGR-��[�GR�`�S�N�[��P�}�W-NAQ1�(u6b�z�SO(u NTLM W�I��v:O
ghVn�U0



�Y�g*g-��[�P�SGR-��[�GR
NgWY(u�NUO�OY0



dk�OYn�U�v:O
ghV}T
T<h_�p�[te�}�W
T1z (FQDN) b|T�S�v�a(uz_O(u�v NetBIOS :O
ghV
T1z�NL��S��R�QNP
T1z0W[2N�v��-�bP}>\�SO(u�UPf_� (*) �NZP�p,�(uW[CQ0



��}[hQ'`: AQ1� LocalSystem NULL �]\O���k�V�_



O(u LocalSystem Bf�AQ1� NTLM �V�_ NULL �]\O���k0



Windows Vista (+T) �NMRHr,g�v�-�<P/f TRUE�Windows 7 �p FALSE0



��}[hQ'`: -��[ Kerberos AQ1��v�R�[^��W



�P�SGRAQ1��`-��[AQ1� Kerberos O(u�v�R�[^��W0



�Y�g*gx��S�GR
NAQ1��R�[^��W0�P-��[�S��gq_���(u6b�z��f�b�
g�R�T�a(uz_�v�v�['`0AQ1�YPx��S��v0



�_��\/f Windows 7 b Windows Server 2008 R2 Mb/e�cdk�SGR0



��}[hQ'`: AQ1� PKU2U W�I���Bldk��f�O(u�}
N��RX�%R0



dk�SGR(W Windows Server ��f�
N�-��p\P(u�N(W�}�W�c6RhV
NN�_\P(u0\P(udk�SGRg�ybk�}
N��RX�%R
\��N��f�2�L�W�I�0



(W Windows 10 1607 HrKNMR�dk�SGR(W�]�ReQ�}�W�v��f�
N�-��p\P(u0(W Windows 10 1607 �_�v Windows Hr,g
N�dk�SGR�-��p_U(u0



��}[hQ'`: P�6R NTLM: =z8h#�eQ NTLM Amϑ



�P�SGR-��[AQ1��`=z8h#�eQ NTLM Amϑ0



�Y�gx��S [\P(u]�b/f*g-��[dk�SGR-��[�:O
ghV\
Ng��#�eQ NTLM Amϑ�v�N�N0



�Y�gx��S [_U(u�}�W3^6b�v=z8h]�GRvu0�}[hQ'`: P�6R NTLM: #�eQ NTLM Amϑ
0�SGR-��[/f-��[�p [�bU}@b	g�}�W3^6b] x��Bf�:O
ghVgݑ
\��\���v NTLM �P^�W�I���Bl���N�N0



�Y�gx��S [_U(u@b	g3^6b�v=z8h]�GRvu0�}[hQ'`: P�6R NTLM: #�eQ NTLM Amϑ
0�SGR-��[/f-��[�p [�bU}@b	g3^6b] x��Bf�:O
ghVgݑ
\��\���v@b	g NTLM W�I���Bl���N�N0 



�_��\/f Windows 7 b Windows Server 2008 R2 Mb/e�cdk�SGR0



�la: =z8h�N�Ng��(Wdk��f�
N�v "Operational" ��-N�dk��MO�e Applications and Services Log/Microsoft/Windows/NTLM0



��}[hQ'`: P�6R NTLM: =z8h�P�}�W�v NTLM W�I�



�P�SGR-��[AQ1��`(W�P�}�W�c6R�z-N�v�}�W=z8h NTLM W�I�0



�Y�gx��S [\P(u] b*g-��[�P�SGR-��[�GR�}�W�c6R�z\
Ng���P�}�W-N NTLM W�I��v�N�N0



�Y�gx��S [_U(u�}�W:O
ghV�v�}�W3^6b]�GRvu NTLM W�I����b/f�V�p0�}[hQ'`: P�6R NTLM: (W�P�}�W-N�v NTLM W�I�
0�SGR-��[-Nx��S [�bU}�}�W:O
ghV�v�}�W3^6b] Bf��}�W�c6R�z\gݑ
\�}�W:O
ghVKN�}�W3^6b�v NTLM W�I�{veQVf����N�N0



�Y�gx��S [_U(u�}�W3^6b]�GRvu NTLM W�I����b/f�V�p0�}[hQ'`: P�6R NTLM: �P�}�W�v NTLM W�I�
0�SGR-��[-Nx��S [�bU}�}�W3^6b] Bf��}�W�c6R�zgݑ
\O(u�}�W3^6b�v NTLM W�I�{veQVf��O���N�N0



�Y�gx��S [_U(u�}�W:O
ghV]�GRvu NTLM W�I����b/f�V�p0�}[hQ'`: P�6R NTLM: �P�}�W�v NTLM W�I�
0�SGR-��[-Nx��S [�bU}�}�W:O
ghV] Bf��}�W�c6R�zgݑ
\�}�W-N
\@b	g:O
ghV�v NTLM W�I���Bl�O���N�N0



�Y�gx��S [hQ�_U(u]��}�W�c6R�z\gݑ
\�O�vQ:O
ghV�v NTLM �P^�W�I���Bl���N�N��N�Sݑ
\vQ3^6b���b/f�V�p0�}[hQ'`: P�6R NTLM: �P�}�W�v NTLM W�I�
0�SGR-��[-Nx��S [hQ��bU}] �O���N�N0 



�_��\/f Windows Server 2008 R2 Mb/e�cdk�SGR0



�la: =z8h�N�Ng��(Wdk��f�
N�v "Operational" ��-N�dk��MO�e Applications and Services Log/Microsoft/Windows/NTLM0



��}[hQ'`: AQ1� Local System 
\ NTLM O(u��f���RX�%R



�P�SGR-��[AQ1�O(u�N�m�v Local System 
g�R(W���SO(u NTLM W�I�Bf�O(u��f���RX�%R0



�Y�g_U(u�P�SGR-��[��N Local System �WL�NO(u�N�m�v
g�RgO(u��f���RX�%R0��S��g �b Windows \Omi�|q}KN���v�g�NW�I���Bl1YWe&N��/���0



�\P(udk�SGR-��[��N Local System �WL�NO(u�N�m�v
g�R(W���SO(u NTLM W�I�Bf\g?S
TW�I�0



9h�d�-�<P�Windows 7 ��f�eHr,g�v\Omi�|q}
Ng_U(udk�SGR0



9h�d�-�<P�Windows Vista 
Ng\P(udk�SGR0



Windows Vista b Windows Server 2008 b�f�e�v\Omi�|q}Mb/e�cdk�SGR0



�la: Windows Vista b Windows Server 2008 *g(W�D}�SGR-NlQ��dk-��[0



_Microsoft �}�:O
ghV: :O
ghV SPN �vj
T1zW�I�d\}



dk�SGR-��[�c6RwQ	gqQ(unj�e>Y�v��f�bpSh�_j (:O
ghV) (W
g�R;NԚ
T1z (SPN) 
N�WL��vW�I�d\}�SPN /f(u6b�z��f�(WO(u:O
ghV
�o`@S (SMB) �
�TS�[�O�^�z�]\O���kBf@b�c�O0



:O
ghV
�o`@S (SMB) �
�TS�[/f�jHh�SRpSqQ(u�TvQ�N�}�\Omi (�O�Y`��z Windows �|q}�{t) �v�Wy0SMB �
�TS�[/e�cW�I� SMB (u6b�z�c�O�vW�I� blob -N�v SMB :O
ghV
g�R;NԚ
T1z (SPN)��N2�bkݑ
\ SMB :O
ghV�v^�%R;e�d (1z�p SMB I��;e�d)0dk-��[\TBfq_�� SMB1 � SMB20



dk�[hQ'`-��[�Szl�[ SMB :O
ghV(W
g�R;NԚ
T1z (SPN) 
N�WL��vW�I�d\}�SPN /f SMB (u6b�zVf��^�z� SMB :O
ghV�v�]\O���kBf@b�c�O0



x���YN:



ܕ��   SMB :O
ghV
N���b
NgW�I� SMB (u6b�z�v SPN0



�Y�g/f(u6b�z@b�c�OGR�c�S   SMB :O
ghV\g�c�S�TW�I� SMB (u6b�z�c�O�v SPN�&NAQ1�vur� SPN &{T SMB :O
ghV,g���v SPN n�UBf��^�z�]\O���k0�Y�g SPN 
N�v&{�\g�bU}r� SMB (u6b�z�v�]\O���k��Bl0



(u6b�z�v��Bl - SMB (u6b�z0�_�
0(W�]\O���k-��[-N�P� SPN 
T1z��N�c�O�v SPN 
T1z0�_�
0&{T����Bl�^�z#��}�v SMB :O
ghV0�Y�g(u6b�z*g�c�O�NUO SPN�b/f�c�O�v SPN 
N�v&{�GRg�bU}r��]\O���k0



�-�<P: ܕ��



@b	g�v Windows \Omi�|q}��/e�c(u6b�z SMB CQ�N�:O
ghV�z SMB CQ�N0�P-��[gq_��:O
ghV SMB L��p��N�ar�\�_U�0O�T,nf�vQ�WL���N2�bk�jHh�RpS
g�R�R���v-N�e0�Y��WL��TO(udk-��[�O�Ow� SMB :O
ghV�[hQ�vvQ�Nnj
��ˊ�S�� Microsoft �}�z (https://go.microsoft.com/fwlink/?LinkId=144505)0qMicrosoft �}�:O
ghV: Vf� S4U2Self �N�S�_�[JTnj
�



dk�[hQ'`-��[/f�p�N/e�c�WL� Windows 8 KNMR�v Windows Hr,gNVf�X[�S���O(u��[JTKN�jHhqQ(u�v(u6b�z0dk-��[gzl�[,g_j�jHh:O
ghV/f&T\Vf�O(u Kerberos Service-For-User-To-Self (S4U2Self) �R����N�_(u6b�z�v3^6b�}�W�S�_�}�(u6b�z;NԚ�v�[JT0�S	g(W�jHh:O
ghV)R(uO(u��[JT�O�c6R�jHhX[�S��N�S�jHh:O
ghV\/e�cKN(u6b�z;NԚ�v3^6b@b(W�}�W-N+T	g�WL� Windows 8 �NMRKN Windows Hr,g�v(u6b�z��f��S�}�W�c6R�zBf�Mb�a\dk-��[-��p_U(u0



dk-��[�a-��p��R (�-�<P)��jHh:O
ghVMbg��RU�0OO(u�/f&T����[JT0�S	g(W,g_j�jHhX[�S�SGRS+TO(u��[JTBf��|q}�{t�TMb�\dk-��[f�x-��p0_U(u
00



_U(udk�[hQ'`-��[Bf�Windows �jHh:O
ghVg�j�gW�I��v�}�(u6b�z;NԚ�vX[�S
kVg�&N$R�e�[JTnj
�/f&TX[(W0�Y�g�[JT
NX[(W��jHh:O
ghV\gO(u Kerberos S4U2Self �R���NVf�#�a}(u6b�z3^6b�}�W-N�v Windows Server 2012 �}�W�c6R�z�&N�p(u6b�z;NԚ�S�_/e�c�[JT�vX[�S
kVg0�S�����/e�c�[JT�v
kVg�Mb��X[�S�]WY(u�[JT�WX[�S�c6R�SGR�v�jHhbnj�e>Y0



�Y�g\P(udk-��[�Windows �jHh:O
ghV\
NgVf��p(u6b�z;NԚ�S�_/e�c�[JT�vX[�S
kVg0



�-�<P: ��R03^6b�\�� Microsoft 3^6b



dk-��[�S2�bk�N� [-��[] �a(uz_�p Microsoft 
g�R�T�g�Ǹof
g�R�v�UN{veQ (SSO) ���NW�I��e�X Microsoft 3^6b�b�O(u Microsoft 3^6b
\vQ�N�a(uz_b
g�R2�L��UN{veQ0



�Y�g_U(udk-��[�\	giQPx���



"  O(u�!q�l�e�X Microsoft 3^6b�Nh��s	g�v�]#��}3^6b�N�S�N{veQdk݈n (&N�Q�s(W{veQ��U^
N)0
NN�O(u�!q�lO(u [-��[] �a(uz_�e�X�e�v#��}3^6b (b\,g0W3^6b#��}� Microsoft 3^6b)0



"  O(u�!q�l�e�X3^6bb(u Microsoft 3^6b{veQ��Nh�O(u�!q�l�e�X�e�v#��}3^6b (b\,g0W3^6b#��}� Microsoft 3^6b)�b/f�N�-��[O(u�s	g�v#��}3^6b0



dk-��[&N
Nq_���p�a(uz_W�I��e�X Microsoft 3^6b0�O�Y��Y�gdk-��[_U(u�O(u��N6q�S�N�c�ONP Microsoft 3^6b��N� Mail I{�a(uz_2�L�W�I��FOO(u�!q�lO(u Microsoft 3^6b�pvQ�N�a(uz_b
g�R2�L��UN{veQW�I� (b�Sq����O(u�\g6e0RvQ�N�a(uz_b
g�R�vW�I��c:y0) 



(W�-��r�lN�dk-��[*g���[�0�N�R_{veQ: ��f�3^6b��<P0



dk�[hQ'`-��[zl�[\�f�͑�e��_j�v1YWe{veQVf�!kxe0_U(u Bitlocker �N�Ow� OS �x�x@S�v��f�\�����[��S	g(W;N�c�S�c�O�O�_ёp�Mb���O�_0ˊ�x�[�]_U(ui�vu�v�O�_�SGR0



�`�S�N-��[�N�e 1 0R 999 KN���v1YWe{veQVf�<P0�Y�g\<P-��[�p 0���f�\8l`�
Ng���[01 0R 3 �v<P\���o��p 40



(W�]\O�zbb�T:O
ghV
N�(W	cN CTRL+ALT+DELETE ��{veQb���d����[�S�Ow��v��U^�Ow�݈nBf�8�eQ/����v�[�x����{/f1YWe�v{veQVf�0



�-�<P: 00^�N�R_{veQ: ��f�*gO(uBf��P�6R0



Windows g�v�c{veQ�]\O���k�v*gO(uBf����Ng(W*gO(uBf����N�*gO(uBf��P�6RBf�WL���U^�Ow�݈n&N���[r��]\O���k0



�-�<P: 
N7_6R0��p�vT�]\O���k-N�v�SNPO(u��S�_!j�d
kVg0



\dk
kP�c>mf}O(u��sS�SAQ1��Nh�r�O(u��WL��vz_�S�_(W�vT�]\O���k-N�N�N�R�e_{veQKNvQ�NO(u��v!j�d
kVg��`|T�S��_�	gr��]\O���kO(u��v!j�d
kVg0
Ni�(u�e��f� Windows (u6b�z/:O
ghV��V�pvQ-N�vO(u�g�S�_P%R�v�]\O���k0|�}�X[�S: P�6RAQ1�
\ SAM |v�Q`��z|T�S�v(u6b�z3



dk�SGR-��[�S���`P�6R
\ SAM �v`��z RPC #��}0



�*gx��S�\gO(u�-��[hQ'`�c�CQ0



Windows Server 2016 �N
N�v\Omi�|q}Hr,gMb/e�cdk�SGR0



��N�R_{veQ: 
N��(W{veQg��o�:yO(u�
T1z

dk�[hQ'`-��[�Szl�[�e Windows {veQBf08�eQW�I��_��N�So�:y��f�Lhb�MR�/f&To�:y{veQdk��f�KN�N�T�vO(u�
T1z0

�_U(udk�SGR�GR
Ngo�:yO(u�
T1z0



�\P(udk�SGR�GRgo�:yO(u�
T1z0



�-�: \P(u0





��N�R_{veQ: vu�]\O���k���[Bf�o�:yO(u�nj
�



dk-��[�c6R(W{veQkub�
N�/f&T����W�O(u�
T1zo�:y��P[���NMO@Wb�}�W\O(u�
T1zI{s�0}nj�e0
\�eO(u Windows 10 1511 �T 1507 Hr (RTM) �v(u6b�dk-��[�KNMRHr,g�v Windows ^�<O01u�e Windows 10 Hr 1607 -N�e�v���y
k-��[�dk-��[g
\��N(u6b"uu
NT�vq_��0



Windows 10 1607 Hr-N�v���f

�_ 1607 Hr,g���Y� Windows 10 -N�m�R�N�e�R����� Y(W�-�N��υO(u�
T1zs�0}nj�e (�O�Y��P[���NMO@W)�&N�����f�-�<P�No�:ys�0}nj�e0dk�R��1u [-��[] > [3^6b] > [{veQx��] -N�v�e���y
k-��[�c6R0���y
k�[�-�gܕ����\��υs�0}nj�e0

dk�D}�SGR-��[�c6RW��vT�v�R��0



dk-��[wQ	g�NN�S���v<P: 

- O(u�o�:y
T1z0�}�W�TO(u�
T1z: ,g_j{v�Bf\o�:yO(u��vhQ
T0�Y�gO(u�(u Microsoft 3^6b{veQ�\go�:yO(u��v��P[���NMO@W0�}�W{v�Bf\o�:y�}�W\O(u�
T1z0



- �PO(u�o�:y
T1z: o�:y���[�]\O���k�vO(u��vhQ
T0



- �S	g�}�W�TO(u�
T1z: �P(u�}�W{v�Bf�\o�:y�}�W\O(u�
T1z0[-��[] > [3^6b] > [{veQx��] -N�v���y
k-��[\��R��_U&N��pp0



- 
No�:yO(u�nj
�: 
No�:y
T1z�FO
\ Windows 10 KNMR�v@b	gHr,g�v Windows�O(u��vhQ
T\o�:y(W [R�cO(u�] Lhb�
N0�_ Windows 10 1607 Hr���Y��]
N�Q/e�cdkx��0�Y�gx��ddkx���\o�:y���[�]\O���k�vO(u��vhQ
T0dk���f\Odk-��[��e���y
k-��[�v�R��N�0�
N�`o�:yO(u�nj
��ˊ_U(u�D}�SGR-��[ [�N�R_{veQ: 
N��o�:y
N!k{veQ]0



- zz}v: �-�-��[0�\I�o��p0*g�[�
0�FO\g�N�x�� [�PO(u�o�:y
T1z] �vT�v�e_o�:yO(u��vhQ
T0



Windows 10 1607 Hr�v Hotfix

�WL� Windows 10 1607 Hr�v(u6bsS�Ox��d�NO(u�o�:y
T1z0�}�W�TO(u�
T1zI{x����N
Ng(W{veQ��U^
No�:ys�0}nj�e��V�p���y-��[�]ܕ��0�Y�g���y-��[�]��_U�\o�:ys�0}nj�e0

!q�l�p�[6b2�L����y
k-��[�v'Yϑ���f0�S��NKN�v/f���WL� Windows 10 1607 Hr�v(u6bWY(u KB 4013429����NP���c�S�KNMRHr,g�v Windows ^�<O�vL��R0



� [2�bkO(u�(W{veQBfo�:y3^6bs�0}nj�e] �N�R

ݑ
\@b	gHr,g�v Windows 10��-��Sgo�:yO(u�o�:y
T1z0

�Y�g�]-��[ [2�bkO(u�(W{veQBfo�:y3^6bs�0}nj�e]��O�Sgo�:yO(u�o�:y
T1z�
N�navQ�N�NUO�D}�SGR-��[0O(u�\!q�lo�:ys�0}nj�e0

�Y�g*g-��[ [2�bkO(u�(W{veQBfo�:y3^6bs�0}nj�e]�GR�S�N\ [�N�R_{veQ: (W�]\O���k��\��Bfo�:yO(u�nj
�] -��[�p [O(u�o�:y
T1z0�}�W�TO(u�
T1z] �No�:y�}�W\O(u�
T1zI{vQ�Ns�0}nj�e0(W�.z�`�lN��WL� Windows 10 1607 Hr�v(u6b�_�WY(u KB 40134290O(u�\!q�l��υvQ�Ns�0}nj�e0



gsOZP�l

dk�SGR�v�[\O��Szl�`
\o�:y{veQnj
��v�[hQ��Bl0�Y�g�`�WL��v��f�2QX[�NOeanj�e���v��hV(W
N�[hQ�vMOno�:ygQ�[�b/f�`�v��f��d	g�S`��zX[�S�vOeanj�e�GRo�:y{veQO(u�hQ
Tb�}�W3^6b
T1z�S��g��`�vteԚ�[hQ'`�SGR�v�w�v0

���`�v�[hQ'`�SGR��[��`�S���`��_U(u [�N�R_{veQ: 
N��o�:y
N!k{veQ] �SGR0



�>e�[g\�[�xw��^
�HrP�6R



dk-��[�c6R/f&T�S�N\g\�[�xw��^-��[�X�R0R���Q 14 �v
�HrP�6R0



�Y�g*g-��[dk-��[�GRg\�[�xw��^�S��-��[�g'Y<P 140



�Y�g�]�[�&N\P(udk-�n�GRg\�[�xw��^gY�S-��p 14



�Y�g�[�&N_U(udk-��[�GRg\�[�xw��^�S-��p'Y�e140



�Y�s�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?LinkId=20971910



g\�[�xw��^=z8h



dk�[hQ'`-��[zl�[|v�Q�[�xw��^=z8hf�JT�N�N�vg\�[�xw��^0dk-��[�S-��p 1 0R 1280



�`�S�a(WVf��x�[�t�X-N�X�Rg\�[�xw��^-��[�v[o(Wq_��Bf�Mb_U(u�T-��[dk-��[0



�Y�g*g�[�dk-��[�GR
Ng|v�Q=z8h�N�N0



�Y�g�]�[�dk-��[�N<P\�ebI{�eg\�[�xw��^-��[�GR
Ng|v�Q=z8h�N�N0



�Y�g�]�[�dk-��[�N<P'Y�eg\�[�xw��^-��[�TBf�e3^6b�[�x�vw��^\�edk-��[�GRg|v�Q=z8h�N�N0



�Y�s�0}nj
��ˊ�S�� https://go.microsoft.com/fwlink/?LinkId=20971910



 }�}�W�c6R�z�LDAP :O
ghV�S�k~P}
kVg�Bl



dk�[hQ'`-��[zl�[ LDAP :O
ghV/f&T7_6R�WL�(W LDAP k~P}-N���Bl�N� LDAPS #��}�P�@b�c6e�v�S�k~P}
kVgW�I���YN@b:y�



8l
N�
N�WL��NUO�S�k~P}W�I�0�/f@b	g\*g�f�eKN:O
ghV�vL��p0



/e�cBf��N�TLS / SSL#��}2�L�W�I�Bf��[JT/e�c�S�k~P}
kVg�v(u6b�z�_��c�Ock�x�v
kVg

�*g�[JT�^�/e�c�S/b*gO(u TLS/SSL #��}�v(u6b�z
Ng�S0Rq_��0�/fAQ1��a(uz_�v�['`�v-N��x��0



N�_�@b	g(u6b�z���_��c�O	gܕ LDAPS �v�S�k~P}nj
�0:O
ghV�bU}�O�
N�WL�dk�R\OKN(u6b�z�v LDAPS W�I���Bl0



�-�<P�*g�[�dk�SGR�GRvQHe�g� [/e�cBf] �vT0



�Y�dk-��[�vs�0}nj
���vܕnj
��ˊ�S�� https://go.microsoft.com/fwlink/?linkid=21024050



�la�[/e�cBf] x���P�Ow����N/e�cW�I��dEQ�Ow��v(u6b�z�*g/e�cW�I��dEQ�Ow��v(u6b�z�N�S��gm�0R;e�d��v0R�NP�O܈�S/b-��[dk�SGR0vudk�SGR-��[�p [N�_] Bf�XP/2k3/Vista/Server 2008 �|q}\!q�l(W�-��`�lN�N� TLS/SSL #��}2�L�W�I��d�^�W�I��dEQ�Ow��]_U(u�YN�https://docs.microsoft.com/en-us/security-updates/securityadvisories/2009/973811 



f�}�W�c6R�z: AQ1�f�S;e�d�v Netlogon �[hQ�S�#��}



dk�[hQ'`-��[zl�[�}�W�c6R�z/f&Tݑ
\yr�[��f�3^_�euN� Netlogon �[hQ�S�#��}�v�[hQ RPC0



�a�N�_U(u�}�W�c6R�z OU 
N�v�SGR�\dk�SGRWY(u0R9j�|-N@b	g�v�}�W�c6R�z0



��]-��[ [�^�zf�S;e�d#��}n�U](AQ1�n�U):



    -  �c�AQ1�
kP���}�W�c6R�zgAQ1�3^6bO(u�l	g�[hQ RPC �v Netlogon �[hQ�S�0

    -  �c�N�bU}
kP���}�W�c6R�zg��Bl3^6bO(u�[hQ RPC �v Netlogon �[hQ�S��dk��-�<P�vT (
N/f�_���c�e)0



f�JT! _U(udk�SGRg�f2��]�ReQ�}�W�v݈n�NO�`�v Active Directory 9j�|�f2��e����KN-N0dk�SGR�a(W�r�f�eBf\O�p,{	N�e݈n�v�Bf�c�e0N�e,{	N�e݈n�f�e�p/e�c\�[hQ RPC (u�e Netlogon �[hQ�S��3^6b�a�_ [�^�zf�S;e�d#��}n�U] -N�yd�0傁��fsO�N�AQ1�O(uf�S;e�d�v Netlogon �[hQ�S�#��}-��[3^6b�v�����ˊ �*� https://go.microsoft.com/fwlink/?linkid=2133485.



0�-�: *g-��[dk�SGR0�l	g�NUO��f�b�O�N3^6b�S�Nf�xA�MQ\�[hQ RPC (u�e Netlogon �[hQ�S�#��}�v7_6R�WL�0



dk�SGR/e�c�vHr,g�\�p Windows Server 2008 R20



6AQ1��|q}�{t�T3^6b���[



dk�[hQ'`-��[zl�[gQ�^ Administrator 3^6b/f&T�S3^6b���[�SGRP�6R0��}�W�c6R�z: AQ1�(W�ReQ�}�Wg��͑�O(u��f�3^6b



dk�[hQ'`-��[zl�[�}�W�c6R�z/f&TAQ1�(u6b�z��RX�%R(W�ReQ�}�Wg���Vf�͑�O(u1u
NT��RX�%R@b�d	g�v�s	g��f�3^6b0



9h�d�-��NR�d	g�/f�S�O�N�v: �|q}�{t�T�T�WL��}�W�ReQ�vO(u�0

vu�P�SGR-��[b�O�N�vO(u�b�D}n�UBf��}�W�c6R�z\AQ1�(u6b�z(W�ReQ�}�WBf�͑�O(uc�[�D}b�T@b�d	gbc�[��RX�%R�v��f�3^6b0



�P�SGR�ar��N�_U(u�}�W�c6R�z OU 
N�v�SGR�WY(u0R�}�W-N�v@b	g�}�W�c6R�z0



PAC�`sS\���fdk
g�R�v�[hQ'`-��[0���f
g�R�v�-��[hQ'`��S��g�V�pdk
g�R�T�v�O�er�
g�R�vvQ�N
g�RKN���v-��[
NN�� �bOUL�0

��|~�~�U?PA�[hQ'`�{,g0�`ck�n�P��\�e�v�{,gnj
�/SeQ��S��f��v,g_j��f��SGR0�\g���f�`��f��v�[hQ'`-��[<P0�`��|~�~�U?	ck(W-��[��f��[hQ'`�vMR�v�[hQ'`-��[nj�e�^: ,g_j�SGRnj�e�^ %s�vMR�v�[hQ'`-��[nj�e�^: �y�Nnj�e�^ %sck(W"uuR�gnj
�/SeQ1YWe�[��vP[��v!q�lO(u�e�X
g�Rck(W-��[:�e�X�jHh(&F)...
\�e�jHhbnj�e>Y�R0R�P�{,g�e�X�P�jHhbnj�e>Y0R�{,g:PA�e�X�jHhbnj�e>YMicrosoft Corporation10.0&�[hQ'`�{,g/fNP MMC L]eQ_�{t�UCQ��[���p�[hQ'`�{,g�jHh�c�O�}/��R��0;�[hQ'`-��[�SR�g/f MMC L]eQ_�{t�UCQ��[��O(u�[hQ'`�{,g�jHh��p Windows ��f��c�O�[hQ'`-��[�SR�g�R��0.�[hQ'`-��[<P�^8OL]eQ_�{t�UCQ���dEQ�D}�SGRL]eQ_�{t�UCQ��p�`�[��}�W-N��f��v�[hQ'`�SGR0/SeQ�SGR(&I)...
\�{,g�jHh/SeQ0R�P�SGRir�N0/S�Q�SGR(&X)...
�_�P�SGR/S�Q�{,g0R�jHh0�jHh %s �]�}X[(W0
�`�����[�[�U?b�R1YWe�l	g=z8hWindows !q�l�f�e�SGR0Windows !q�l���@S�kx��S���e�X�v�jHh��_Unj�e�^PA�^�znj�e�^/S�Q�SGR0R/SeQ�SGR�/SeQ�{,g/S�Q�{,g0R�[hQ'`-��[Windows !q�l��_U,g_j�SGRnj�e�^0,g_j�SGRnj�e�^9!q�l�_�[hQ'`-��[�SR�gL]eQ_�{t�UCQ�}/�,g_j�[hQ'`-��[nj�e�^0ˊO(u�D}�SGRL]eQ_�{t�UCQ�O�}/�,g_j�[hQ'`-��[<P0.\help\75393cf0-f17a-453d-98a9-592b009289c2.chm.\help\1da6be45-e97d-4584-bbf9-356d319f20c2.chm.\help\941b4573-563f-45fd-8a2f-0b8a197a5d2c.chm@\help\sceconcepts.chm::/75393cf0-f17a-453d-98a9-592b009289c2.htm@\help\scmconcepts.chm::/1da6be45-e97d-4584-bbf9-356d319f20c2.htmPAC\help\secsetconcepts.chm::/941b4573-563f-45fd-8a2f-0b8a197a5d2c.htm�`��f�
N	g�e�v�SGR-��[<P0�`���f�e	gHe�SGR�v�j���U?	%s 
N�v��f�-��[!q�l�^�z�Pnj�e�^��V�p�l	gx��S�NUO�{,g�jHh0
<H4>��_U�sX[�vnj�e�^</H4><OL><LI ALIGN="LEFT" ID="NO_TEMPLATE_GIVEN_1">(W <I>[�[hQ'`-��[�SR�g]</I> ��W��v
N	cNN�n ��Su�0<LI ALIGN="LEFT" ID="NO_TEMPLATE_GIVEN_2">x��d <B>[��_Unj�e�^]</B> <LI ALIGN="LEFT" ID="NO_TEMPLATE_GIVEN_3"> x��dnj�e�^�&N	cN [��_U]</OL> <H4>�^�z�e�vnj�e�^</H4><OL> <LI ALIGN="LEFT" ID="NO_TEMPLATE_GIVEN_4">(W <I>[�[hQ'`-��[�SR�g]</I> ��W��v
N	cNN�n ��Su�0<LI ALIGN="LEFT" ID="NO_TEMPLATE_GIVEN_5"> x��d <B>[��_Unj�e�^]</B>0<LI ALIGN="LEFT" ID="NO_TEMPLATE_GIVEN_6"> 8�eQ�e�vnj�e�^
T1z�&N	cN [��_U]0<LI ALIGN="LEFT" ID="NO_TEMPLATE_GIVEN_7">x��d��/SeQ�v�[hQ'`-��[�j�&N	cN [��_U]0</OL>�N�S|~b�v
kP��S�N@b	gP[_j�x�v�s	g
kP�(&R)\�S|~b�v
kP��P�d0R@b	gP[_j�x(&P)
NAQ1��S�N�P_j�x�v
kP�(&D)-��[ %s �vb�Tnj<hhyI�	gHegP�:hyI�
Ng0Rg0	hyI��f�e	gHegP�:	�]�}\P(uhyI��f�e0�[/�g'Y<P:�[/�g'Y<P:
Ni�(uPA<�P�D}
Nr�S+Tb�T><�P�D}@bl\�v�D}
Nr����O9e>O(u��T�D}
T1z�e�XO(u�b�D}	
N-N�e(u6b�z#��}:��nBf����N��NNP�6RBf�\-N�e#��}:
N���_�S{veQ:�_�S:�[�x0RgMR���Y)Y����Y���c:y:�[�x0RgMR���Y)Y����Y���c:y:-��[�P_j�x6q�_(&C)
!q�l2QX[,�(uMOn�c�!q�l2QX[MOn�c�͑�e	�eQ
͑�e	�eQ�[hQ'`�SGR�`��(W͑�e	�eQMR�HQ\���f2QX[0R %1 �U?,g_j�[hQ'`-��[WSecEdit �[hQ'`-��[^�%RWSecEdit ,g_j�[hQ'`-��[^�%RC\help\secsetconcepts.chm::/941b4573-563f-45fd-8a2f-0b8a197a5d2c.htmC\help\secsetconcepts.chm::/941b4573-563f-45fd-8a2f-0b8a197a5d2c.htm [,g_j�[hQ'`-��[] L]eQ_�{t�UCQgTS�R�`�[�,g_j�|q}�v�[hQ'`0C\help\secsetconcepts.chm::/941b4573-563f-45fd-8a2f-0b8a197a5d2c.htmWSecEdit RSOP �[hQ'`-��[^�%R;[RSOP �[hQ'`-��[�^8O] L]eQ_�{t�UCQg�dEQ RSOP L]eQ_�{t�UCQ�&NTS�R�`�j��(W�`�}�W
N�v��f��[hQ'`�SGR0WY(u(&A)�!q�l$R�[WY(u0R��S_jhV�v�D}�SGR�[hQ'`-��[0
Vf��_,g_j�[hQ'`�SGRnj�e�^(%%windir%%\security\database\secedit.sdb) �b�S��N-��[Bf�P�V/���:%s
\go�:y@b	g�v,g_j�[hQ'`-��[�FO
Ngc�Q�[�[hQ'`-��[/f&T�]�[�(W�D}�SGR-N
�NUO�N��PO(u��Nb��O9e�v,g_j�[hQ'`-��[�S��g���}�WI{}�v�SGR@b���[0�!q�l$R�[WY(u0R��S_jhV�v�D}�SGR�[hQ'`-��[0
Vf��_,g_j�[hQ'`�SGRnj�e�^(%%windir%%\security\database\secedit.sdb) �b�S��N-��[Bf6e0R/���:%s
\go�:y@b	g�v,g_j�[hQ'`-��[�FO
Ngc�Q�[�[hQ'`-��[/f&T�]�[�(W�D}�SGR-N
�NUO�N��PO(u��Nb��O9e�v,g_j�[hQ'`-��[�S��g���}�WI{}�v�SGR@b���[0���j: �SGR
T1z-��[�SGR %1 �]ck�xWY(u0Z(W-��[�Pir�N�vP[�|Bf|vu/���0(b/f�SGR_�dVf�-��[c�[�SGR-��[�vP[�|Bf|vu1YWe0) ˊ�S�� %windir%\security\logs\winlogon.log �S�_vQ�Nnj
�G�SGR %1 \�NR/��� %20ˊ�Sw(W�vj��f�
N�v %windir%\security\logs\winlogon.log �O�S�_vQ�Nnj
�0O�SGR %1 \�
Nck�x�v�rKa��N�]����0ˊ�Sw(W�vj��f�
N�v %%windir%%\security\logs\winlogon.log �O�S�_vQ�Nnj
�0B�SGR_�d&N*gVf�-��[0ˊ�Sw(W�vj��f�
N�v %windir%\security\logs\winlogon.log �O�S�_vQ�Nnj
�0�j���[hQ'`(&V)...!q�l\�{,g/S�Q0R %10
�P�V/���: %2�`��\���f2QX[0R�[hQ'`nj�e�^�U?�bU}�N�`��zLhb�
g�R{veQAQ1��N�`��zLhb�
g�R{veQ
!q�l�e�X�{,gd\_\Security\Logs�P�D}�SGR�v�[hQ'`�R�S��(W PDC !j�dhV-N�}/�0P�P-��[��WL� Windows 2000 Service Pack 1 �NMRHr,g�v��f�
N�v�[0��f��_��WL���eHr,g\Omi�|q}�Mb��WY(u+T	g�P-��[�v�D}�SGRir�N0(W*Rd� %1 KNMR�ˊ\gQ�[�hQ�ܕ��xe<P�_��N�e %d �S %d KN���}�X[�S: AQ1�?S
T SID/
T1zI�o��|q}�{t�T�_�	g,g_j{veQ
k0�`
N���bU}@b	gO(u�b/f�|q}�{t�T�v,g_j{veQ
k0		g�N3^6b!q�lI�o�0�Y�g��WY(u�`�v���fbܕ���PgQ�[h��ˊܕ��@b	g!k���v���zz_0!q�l��_U���z0Windows !q�l�^�zgQ�[h��v UI �WL��}0@\help\lpeconcepts.chm::/29a1325e-50b4-4963-a36e-979caa9ea094.htm�/f�N��?sct.\help\29a1325e-50b4-4963-a36e-979caa9ea094.chmxe<P�_��N�e %d �S %d KN��b/f 0$dk-��[�Sgq_�� Windows Server 2003 KNMR�v\Omi�|q}0�O9e�P-��[�S��q_���(u6b�z0
g�R�S�a(uz_���v�v�['`0
%1�Y�vQ�Nnj
��ˊ�S��<A>%1</A>0(Q%2!lu!)PA4�`sS\���f�P-��[0RNP�S��q_���(u6b�z0
g�R�S�a(uz_���v�['`�vxe<P0

%1

/f&T��|~�~�P���f?0\W�I�yr�k
kP��c�N Administrators �S SERVICE KN�_��_��Q�c�N!j�d(u6b�z$�Y�g�]-��[vQ�N�SGR�N���[^�%Rd\}=z8h�SGR��S��
Ng7_6R�WL�dk-��[0
%1 �Y�s�0}nj
��ˊ�S���[hQ'`�SGR�bS��S�-N�v <A>%1</A>0
�l	gdk�R\O�v㉪��eW[\(WNRBf��KN�_���[��f��{tƖ-NX[�S�SGR...
�e�X/�yd�dk�{,g�vƖ-NX[�S�SGRdkX[�S�SGRS+TNR�SGR��GR:�rKa ck(W�_ Active Directory N	�Ɩ-NX[�S�SGR.../���: !q�lN	�Ɩ-NX[�S�SGR�]1\�}...PA
!!
Nf�v�SGR!!:`~b
N0RdkƖ-NX[�S�SGR0�[�S���]� Active Directory *Rd��b+T	g!qHe�v-��[0ˊ(W Active Directory �{t-N�_ (AD AC) ���Sdk�SGR�b�_-��[-N�yd�dk�SGR03^6b: P�6RO(uzz}v�[�x�v,g_j3^6b�P��{veQ0R;N�c�S=z8h: =z8h�(u�|q}ir�N�vX[�S=z8h: =z8h�P�N����S
kP��vO(u=z8h: vu!q�l���[hQ'`=z8hBf��|q}�zsSܕ_j݈n: 2�bkO(u��[݈pSh�_jE��Rz_
݈n: AQ1�xSd��
N�{veQ�}�W�c6R�z: AQ1�:O
ghV�d\O��cz�]\O�}�W�c6R�z: �bU}��f�3^6b�[�x���f�}�W�c6R�z: LDAP :O
ghV=|�z��Bl!q��Bl=|�z�}�Wb�T: \P(u��f�3^6b�[�x���f�}�Wb�T: gw���f�3^6b�[�x	gHeg�}�Wb�T: �[hQ�S�nj�e�R�NxeMO�R�[b=|�z (��R)�}�Wb�T: �[hQ�S�nj�e�R�NxeMO�R�[ (�S���vq�)�}�Wb�T: �[hQ�S�nj�e�R�NxeMO=|�z (��R)%�}�Wb�T: ��Bl�X7__ (Windows 2000 b�f�e) �]\O���kёp��N�R_{veQ: 
N��Bl	c CTRL+ALT+DEL u��N�R_{veQ: 
N��o�:y
N!k{veQ�N�R_{veQ: (W�]\O���k��\��Bfo�:yO(u�nj
�O(u�o�:y
T1z0�}�W�TO(u�
T1z�PO(u�o�:y
T1z	
N��o�:yO(u�nj
��N�R_{veQ: f}{veQO(u��v
�o`,g�e�N�R_{veQ: f}{veQO(u��v
�o`jL��N�R_{veQ: �}�W�c6R�z!q�lO(uBf����_�S�vHQMR{veQ!kxe�N�R_{veQ: (W�[�x0RgMR�c:yO(u����f�[�x�N�R_{veQ: ��Bl�}�W�c6R�zW�I��N�d����[�]\O�z#�N�R_{veQ: ��Bl�_�O(u Windows Hello OmiHrbzfgaaS�N�R_{veQ: zfgaaS�yd��d\O�l	g�R\O���[�]\O�z7_6R{v�Q�Y�g/f`��zLhb�
g�R�]\O���kGR-N�e#��} Microsoft �}�(u6b�z: xeMO=|�z(u6b�z�v�
� (��R)%Microsoft �}�(u6b�z: xeMO=|�z(u6b�z�v�
� (�Y�g:O
ghVTa)'Microsoft �}�(u6b�z: �P�*g�R�[�v�[�x0RvQ�N�^FU�v SMB :O
ghV Microsoft �}�:O
ghV: �f\P�]\O���kMR���Bl�v��nBf�� Microsoft �}�:O
ghV: xeMO=|�z:O
ghV�v�
� (��R)%Microsoft �}�:O
ghV: xeMO=|�z:O
ghV�v�
� (�Y�g(u6b�zTa)!Microsoft �}�:O
ghV: vu{veQBfxe0RgBf�-N�e(u6b�z#��}�}�X[�S: 
NAQ1�X[>e�}�W�I��v�[�x���I��}�X[�S: 
NAQ1� SAM 3^6b�v?S
TR	��}�X[�S: 
NAQ1� SAM 3^6b�TqQ(u�v?S
TR	��}�X[�S: �� Everyone 
kP�WY(u0R?S
TO(u��}�X[�S: P�6R?S
TX[�SwQ
T�{S��TqQ(u�}�X[�S: �S�N?S
TX[�S�vwQ
T�{S��}�X[�S: �S�N?S
TX[�S�vqQ(u�}�X[�S: �S`��zX[�S�v{v�_�SP[_�}�X[�S: �S`��zX[�S�v{v�_�}�X[�S: qQ(u�T�[hQ'`!j_(u�e,g_j3^6b�Pq} - ,g_jO(u��Nꁫ���RW�I��Pi�(u�e�Oӌ - ,g_jO(u��N Guest W�I�"�}[hQ'`: N!k�[�x���fBf
N2QX[ LAN Manager ܖJnxe<P�}[hQ'`: LAN Manager W�I�I{}�P� LM �T NTLM �V�a%�P� LM �T NTLM - �Y	g�N�m�O(u NTLMv2 �]\O���k�[hQ'`�S�P� NTLM �V�a
�S�P� NTLMv2 �V�a�S�P� NTLMv2 �V�a0�bU} LM�S�P� NTLMv2 �V�a0�bU} LM �T NTLM,�}[hQ'`: NTLM SSP �p;N�v (S+T�[hQ RPC) (u6b�z�vg\�]\O���k�[hQ'`,�}[hQ'`: NTLM SSP �p;N�v (S+T�[hQ RPC) :O
ghV�vg\�]\O���k�[hQ'`��Bl NTLMv2 �]\O���k�[hQ'`��Bl 128 MOCQ�R�[PA�}[hQ'`: LDAP (u6b�z=|�z��Bl!q�N�m=|�z��Bl=|�z�O�_;N�c�S: AQ1���R�|q}�{t{veQ�O�_;N�c�S: AQ1�ߎ�x����N�SX[�S@b	g�x�x�T@b	gnj�e>Yܕ_j: AQ1�
N{veQ1\\�|q}ܕ_jܕ_j: nd�[��d��aԚR��j�|q}ir�N: �R7_gQ�|q}ir�N�v�-�
kP� (�O�Y:&{_�#�P})�|q}ir�N: �|q}�{t�T�D}b�T@b�^�zir�N�v�-��d	g��|q}�{t�T�D}ir�N�^�z��|q}ir�N: ��Bl
N@SR'Y\�[(u�e^� Windows P[�|q} �|q}�[�x�}o�: O(u FIPS �v�[o�{�l�e�R�[�ܖJn��N�S=|�z �|q}�[�x�}o�: 
\O(u�2QX[(W��f�
N�vёp�7_6RO(u�X7__ёp��Ow�vu�eёp���2QX[�SO(uBf�
N��BlO(u��v8�eQёp�,{N!kO(uBf�c:yO(u�8�eQO(u��_�(W�k!kO(uёp�Bf8�eQ�[�x!�|q}-��[: �eߎԚP�6R�SGR
\ Windows �S�WL��jO(u�aI���GR
�|q}-��[: x��d'`�vP[�|q}{veQ)YR��yBDCOM: �N Security Descriptor Definition Language (SDDL) ���lh�:y�v��f�_U�RP�6RBDCOM: �N Security Descriptor Definition Language (SDDL) ���lh�:y�v��f�X[�SP�6R݈n: CD-ROM X[�S�SP��e{veQ,g_j�vO(u�݈n: AQ1�<h_S�N�S��Q�b�S_�ZԚAdministratorsAdministrators �N�S Power Users#Administrators �N�S Interactive Users݈n: ߎ�x_jX[�S�SP��e{veQ,g_j�vO(u�4=z8h: 7_6R�WL�=z8h�SGRP[^�%R-��[ (Windows Vista b�f�e�vHr,g) �N���[=z8h�SGR^�%R-��["�}[hQ'`: P�6R NTLM: ��_`��z:O
ghV�v#��Q NTLM AmϑhQ�AQ1�hQ��bU}�}[hQ'`: P�6R NTLM: #�eQ NTLM AmϑhQ�AQ1��bU}@b	g�}�W3^6b�bU}@b	g3^6b�}[hQ'`: P�6R NTLM: �P�}�W-N�v NTLM W�I�\P(u�bU}�}�W:O
ghV�v�}�W3^6b�bU}�}�W3^6b�bU}�}�W:O
ghVhQ��bU}"�}[hQ'`: P�6R NTLM: �e�X NTLM W�I��v`��z:O
ghV�OY�}[hQ'`: P�6R NTLM: �e�X�P�}�W�v:O
ghV�OYPA!�}[hQ'`: AQ1� LocalSystem NULL �]\O���k�V�_�}[hQ'`: -��[ Kerberos AQ1��v�R�[^��WDES_CBC_CRCDES_CBC_MD5RC4_HMAC_MD5AES128_HMAC_SHA1AES256_HMAC_SHA1*g�O�v�R�[^��W&�}[hQ'`: AQ1�
\dk��f��v PKU2U W�I���BlO(u�}
N��RX�%R0



hQ�=z8h�}[hQ'`: P�6R NTLM: =z8h#�eQ NTLM Amϑ�}[hQ'`: P�6R NTLM: =z8h�P�}�W�v NTLM W�I�&�}[hQ'`: AQ1� Local System 
\ NTLM O(u��f���RX�%R\P(u	_U(u�}�W3^6b�v=z8h	_U(u@b	g3^6b�v=z8h\P(u_U(u�}�W:O
ghV�v�}�W3^6b_U(u�}�W3^6b_U(u�}�W:O
ghVhQ�_U(u!Microsoft �}�:O
ghV: :O
ghV SPN �vj
T1zW�I�d\}ܕ���Y�g/f(u6b�z@b�c�OGR�c�S(u6b�z�v��Bl$Microsoft �}�:O
ghV: Vf� S4U2Self �N�S�_�[JTnj
��-��]_U(u�]\P(u3^6b: \�� Microsoft 3^6bdk�SGR�]\P(uO(u�!q�l�e�X Microsoft 3^6b%O(u�!q�l�e�X Microsoft 3^6bb�N Microsoft 3^6b{veQ�N�R_{veQ: ��f�3^6b���[��<P�N�R_{veQ: ��f�*gO(uBf��P�6R!qHe�v{veQVf��}�X[�S: P�6RAQ1�
\ SAM |v�Q`��z|T�S�v(u6b�z�N�R_{veQ: 
N��(W{veQg��o�:yO(u�
T1z
�PP��}�W�TO(u�
T1zW[CQ�}�W�c6R�z�LDAP :O
ghV�S�k~P}
kVg��Bl8l
N/e�cBfN�_�}�W�c6R�z: AQ1�f�S;e�d�v Netlogon �[hQ�S�#��}�}�W�c6R�z: AQ1�(W�ReQ�}�Wg��͑�O(u��f�3^6bPA�4VS_VERSION_INFO��
4aJ
4aJ?�StringFileInfo�040404B0LCompanyNameMicrosoft Corporation@FileDescription�[hQ'`-��[ UI !jD}n'FileVersion10.0.19041.3636 (WinBuild.160101.0800)2	InternalNameWSECEDIT�.LegalCopyright� Microsoft Corporation. All rights reserved.JOriginalFilenameWSecEdit.dll.muij%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.19041.3636DVarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD