6,211
社区成员
发帖
与我相关
我的任务
分享请发表友善的回复…
发表回复
icuc88 2004-09-20
- 打赏
- 举报
先让楼主说说要干什么吧。一句话“如何关闭SID filtering?”
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/fedffin2.mspx
Planning and Implementing Federated Forests in Windows Server2003
看里面的相关章节：SID Filtering
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/fedffin2.mspx
Planning and Implementing Federated Forests in Windows Server2003
看里面的相关章节：SID Filtering
yuecuidan8 2004-09-20
- 打赏
- 举报
我就说凤凰真是不同的鸟呀,一说出来都是鸟语第一行那些一句都看不到,真是好鸟好鸟(此话完全体现奉承之意决无贬低之想法呀!!!!!!!)
凤凰 2004-09-20
- 打赏
- 举报
上面一大堆是google搜索的
windows 的权限分配就是基于sid的,每个用户都有自己唯一的sid
windows 的权限分配就是基于sid的,每个用户都有自己唯一的sid
shixianyong 2004-09-20
- 打赏
- 举报
到Windows工作管理員強制結束啊
凤凰 2004-09-20
- 打赏
- 举报
Using SID Filtering When Migrating User AccountsSID filtering does not allow for the use of SIDs from outside the forest to enable access to any resource within the forest. You can enable the SID of a user in a different forest to access a resource within a forest that has SID filtering enabled by translating security on the resource to include the user SID in the permission list. Because SID filtering does not apply to authentication within a domain, it is also possible to allow access to resources by means of SID history if the resource and the account are in the same domain.
To allow users or groups to access a resource by using SID history, the forest in which the resource is located must trust the forest in which the account is located. SID filtering is applied by default when a cross-forest trust is established between two forest root domains. Also, SID filtering is enabled by default when external trusts
external trusts
A trust that is manually created between two Active Directory domains that are located in different forests or between an Active Directory domain and a Windows NT 4.0 or earlier domain. External trusts are nontransitive and one-way.are established between domain controllers running Windows Server 2003 or Windows 2000 SP4 or later. This prevents potential security attacks by an administrator in a different forest.
To allow users or groups to access a resource by using SID history, the forest in which the resource is located must trust the forest in which the account is located. SID filtering is applied by default when a cross-forest trust is established between two forest root domains. Also, SID filtering is enabled by default when external trusts
external trusts
A trust that is manually created between two Active Directory domains that are located in different forests or between an Active Directory domain and a Windows NT 4.0 or earlier domain. External trusts are nontransitive and one-way.are established between domain controllers running Windows Server 2003 or Windows 2000 SP4 or later. This prevents potential security attacks by an administrator in a different forest.
