NOTE The ACL settings for the WINNT directory described in

120 Pages·1998·0.43 MB·English

by  Steve Sutton

DEIFISSALCNU
NOTE :
el b sa deleeni rbianail virey eacdrsh s iogteerutn hdoGciTLeTfetNChrtNAtieIdsW
"y r n a,t oerspeeebtih l ri prtSpnrSfLsric LmieLaerSeCapCpchAxuAustCESCS"
ddsseaemtoces:lituenvsrgwryTaoeSPDS
mth.pungiS_mf/moc.smetsySdetsurT.www//:ptth )evitis ne ese s amtcas nal(
.c n,IS S8T9 9©1 DEIFISSALCNU

DEIFISSALCNU
WiSnedNcoTuw rGsiu tiyd elines
snoitaredisnoC & senilediuG rof yleruceSgnirugifnoC
Windows NT in Multiple Environments
A study for
hcraes eAR SN
yb
TrustSeyds teSmesr vices

@ediugtn trustedsystems.com
moc.smetsysdetsurt.www//:ptth
217-344-0996
8h 9c89r11aM
Author: SteSvuet ton secivre Ssmetsy SdetsurT
rosnopS : ScotCto threll yc nyetgiAr ulcaenSoitaN
8991© detsurT smetsyS ,secivreS .cnI llA sthgir .devreser ehT .S.U tnemnrevoGsah
detimilnu egasu esnecil rednu 5991 S R.A3F1D07-722. 2s5i2hT tnemucod sawderaperp
yllohw rednu tcartnoc ot eht lanoitaN ytiruceS ycnegA )6330-C-79-409ADM( dnasah
.esae lceirl brduoepfvor pnpeaeb
.c n,IS S8T9 9©1 DEIFISSALCNU
DEIFISSALCNU
8r1a8M9 ii seniledi uyGtiruc e TSsNwodn iAWSN
DEIFISSALCNU .c n,IS S8T9 9©1
DEIFISSALCNU
stnet nefoloCbaT
1. noitcudortnI ................................ ................................ ................................ .............. 1
t nee pt&oncIS ................................ ................................ ................................ ......................... 1
l2e vl 1ee&LveL ................................ ................................ ................................ .................... 2
erutcurtS ................................ ................................ ................................ ................................ .. 2
ygolonim r se&eTtoN ................................ ................................ ................................ ............... 3
erawt froeSkcehC ................................ ................................ ................................ ..................... 3
stnemgdelwonkcA ................................ ................................ ................................ .................... 5
2. seniled iwefuehoGitvrevO ................................ ................................ ....................... 7
3. noitallatsnI ................................ ................................ ................................ ............... 11
senilediuG ................................ ................................ ................................ .............................. 11
erawd rdaeHs uenlUbasiD ................................ ................................ .............................. 11
noitc eltaocriPsyhP ................................ ................................ ................................ ......... 11
sTwNod nlilWat ssonmtIet sgynSitar erpeO hgtnOisU ................................ .................. 11
ai deevMitanre tm logArnfitooB ................................ ................................ ..................... 11
smet sgynSitar eepvOitanre tglnAillatsnI ................................ ................................ ........ 11
tam rmoeFt sey lSSiFFTN ................................ ................................ .............................. 12
smetsysb u2S/ Sd OnXaIS Oe PhgtnivomeR ................................ ................................ ... 12
”llat synpI o tCoo“DN ................................ ................................ ................................ .... 12
setoN ................................ ................................ ................................ ................................ ..... 13
smet sgynSitar eepvOitanre tglnAitooB ................................ ................................ .......... 13
noitc eltaocriPsyhP ................................ ................................ ................................ ......... 13
retup m eosTnnCwNoOod nsfieoWi peolCpitluM ................................ ........................ 14
4. snoitcirt ssesRe cc cisA sn&aiBamoD ................................ ................................ ..... 15
senilediuG ................................ ................................ ................................ .............................. 15
setoN ................................ ................................ ................................ ................................ ..... 16
stnuoc c fAeopo ce S hs&ttsu r,TsniamoD ................................ ................................ ...... 16
noitacitneh tkurA osw tt&neuNoccA ................................ ................................ .............. 17
sle dnoiMamoD ................................ ................................ ................................ .............. 18
stnemnori vnniEamodi t slntuihM gnioRgoL ................................ ................................ ... 18
5. erutc uervtiStartsinimdA ................................ ................................ ......................... 21
senilediuG ................................ ................................ ................................ .............................. 21
tnuo c”crAotartsinim deAh“T ................................ ................................ ......................... 21
srotartsin ilmlduAF ................................ ................................ ................................ ........ 22
sre srUe w so&rPotare pnOiamoD ................................ ................................ .................. 23
secit ceavriPtartsinimdA ................................ ................................ ................................ . 24
setoN ................................ ................................ ................................ ................................ ..... 25
stnuo cecvAitartsini mddeArahS ................................ ................................ ..................... 25
ytili tPUORPSS AePhT ................................ ................................ ................................ .. 25
tnuoc crAotartsinim deA hgtnimaneR ................................ ................................ ............. 25
6. seici lloaPreneG ................................ ................................ ................................ ....... 27
s es te&onNilediuG ................................ ................................ ................................ ................ 27
sL CeAmul oSVFTN- n so&eNciv ewDaR ................................ ................................ ..... 27
sMO R dDsnCeaipp osolstFe cgcnAitcirtseR ................................ ................................ . 27
sse cycrAtsi geetRo mgenRillor td ne&otCacitnehtu agnnUitneverP ................................ 28
sroti dyErtsig eeR hgtnilbanE ................................ ................................ ......................... 29
seniledi uyGtiruc e TSsNwodn iAWSN iii 8r1a8M9
.c n,IS S8T9 9©1 DEIFISSALCNU
DEIFISSALCNU
edoMnoitcetorP ................................ ................................ ................................ ............... 29
gniw egtion VLedveEtacitnehtuanU ................................ ................................ ............... 30
noitallatsn Irevir DtnirP ................................ ................................ ................................ ... 30
gni krc eonvLeaeSrcS ................................ ................................ ................................ ...... 31
YE Ks Sd&YrSows sdaePh sganHitcetorP ................................ ................................ ....... 31
erut aneoFitacifi tdorNowssaP ................................ ................................ ......................... 32
sr edseUtacitnehtu aeonltUbali asveA mea rNr ae&hsSU ................................ ................ 33
no gro eLts sU eaghLntidiH ................................ ................................ ............................. 33
metsy Seh tnwo DgnittuhS ................................ ................................ .............................. 34
sexiF- tsouHoenallecsiM ................................ ................................ ................................ .34
lo oGTIFNOC 2eChT ................................ ................................ ................................ ...... 35
7. sgnit t LeyCSrAts im ge&et RseylSiF ................................ ................................ ..... 37
senilediuG ................................ ................................ ................................ ............................. 38
setoN ................................ ................................ ................................ ................................ ..... 38
sgnit t LemCSeAt seylSiF ................................ ................................ ............................... 38
sgnit tLyeCrSAtsigeR ................................ ................................ ................................ ..... 45
snoitacilp pw AegNnit s ge&nTillatsnI ................................ ................................ ............ 49
8. seirotce re imnrD ooe&HistUacilppA ................................ ................................ .... 51
senilediuG ................................ ................................ ................................ ............................. 51
seirotce rnioDitacilppA ................................ ................................ ................................ ... 51
seirotce re imrDoeHsU ................................ ................................ ................................ .... 52
9. sp us ot&rnGuo crceAsU ................................ ................................ ........................ 55
senilediuG ................................ ................................ ................................ ............................. 55
stnu orcecsAU ................................ ................................ ................................ ................. 55
spu orreGsU ................................ ................................ ................................ .................... 56
setoN ................................ ................................ ................................ ................................ ..... 56
10. P sdrowssa ................................ ................................ ................................ ................ 59
senilediuG ................................ ................................ ................................ ............................. 59
emite fdyintLaixelp mdorCowssaP ................................ ................................ ................. 59
gni kdcrooLwssaP ................................ ................................ ................................ ........... 59
sdrows s narwPio eehnti f oeshDrw e rssoUefnilediuG ................................ ..................... 59
sdrows sdaePni fyelDevitartsinimdA ................................ ................................ ............... 60
gni rdertolwisFsaP ................................ ................................ ................................ .......... 60
e mginTin rdarWowssaP ................................ ................................ ................................ .60
setoN ................................ ................................ ................................ ................................ ..... 61
skca tttpAme tntoAgoL ................................ ................................ ................................ ... 61
skca tdtrAows sdaePrutpaC ................................ ................................ ............................. 62
yAcil oePlpmaxE ................................ ................................ ................................ ........... 64
yBcil oePlpmaxE ................................ ................................ ................................ ............ 64
erusop xdErowss akProwt e nNtoaev aAC ................................ ................................ ....... 64
stnuo cgcnAihc t,alMa c rosoLdfrowssaP ................................ ................................ ........ 65
gni rdertolwisFsaP ................................ ................................ ................................ .......... 65
yrammuS ................................ ................................ ................................ ........................ 65
11. s eylc iimFleotPsyS ................................ ................................ ................................ .. 67
senilediuG ................................ ................................ ................................ ............................. 67
setoN ................................ ................................ ................................ ................................ ..... 68
sre seUvitartsinimdA-n or nosfeicil orPe stUluaf edDednemmoceR ................................ .68
seicilo Pretupmo Ctluafe DdednemmoceR ................................ ................................ ....... 69
se lyicF i elgfsonoUPillepmoC ................................ ................................ ....................... 69
e deotMa dlpaUu nsauMs rceivtamotuA ................................ ................................ .......... 70
8r1a8M9 vi seniledi uyGtiruc e TSsNwodn iAWSN
DEIFISSALCNU .c n,IS S8T9 9©1
DEIFISSALCNU
snoitcir tnsoeiRtaci lrpepsAU ................................ ................................ ......................... 70
seici lr oedPseUtcetorP ................................ ................................ ................................ ... 71
seici lmooPtsuC ................................ ................................ ................................ .............. 71
12. sth grieRsU ................................ ................................ ................................ ............... 73
senilediuG ................................ ................................ ................................ .............................. 73
setoN ................................ ................................ ................................ ................................ ..... 74
sth gnioRmmoC ................................ ................................ ................................ ............. 74
13. y gtyoicL ri g&ulencohiePttSiduA ................................ ................................ ........ 77
senilediuG ................................ ................................ ................................ .............................. 77
setoN ................................ ................................ ................................ ................................ ..... 78
stcej bM OAsSdroc esRyaw lgAnitid utAcejbO ................................ .............................. 78
detidu Ato nsthgiR ................................ ................................ ................................ ......... 78
”stce jebsO agBn“itiduA ................................ ................................ ................................ . 79
sl l giyoFtLiru c eenhS etghnwihsarC ................................ ................................ .............. 79
g oyLtiruc ee Shr tosfnoitac oeLvitanretlA ................................ ................................ ...... 79
lia rtTid ue Ahetgan aotMthgiR ................................ ................................ ..................... 79
gn ittciedjubAO ................................ ................................ ................................ .............. 80
14. seciv rmeeStsyS ................................ ................................ ................................ ........ 81
senilediuG ................................ ................................ ................................ .............................. 81
seitilibap arCi e sh&eTci vgr neiSziminiM ................................ ................................ ...... 81
secivr e fSloortn orCotare pgOnitcirtseR ................................ ................................ ......... 82
setoN ................................ ................................ ................................ ................................ ..... 83
tnuo ceccAiv rdeeSgelivirpnU ................................ ................................ ........................ 83
15. gnir akhrSowteN ................................ ................................ ................................ ...... 85
senilediuG ................................ ................................ ................................ .............................. 85
seirotce reir DakhrSowteN ................................ ................................ .............................. 85
ssec crAetnirP ................................ ................................ ................................ ................ 85
setoN ................................ ................................ ................................ ................................ ..... 86
smsinah cgenMir ayfhroSammuS ................................ ................................ ................... 86
ser aehvSitartsini m,dnAeddiH ................................ ................................ ....................... 86
16. gnikrowteN ................................ ................................ ................................ ............... 89
senilediuG ................................ ................................ ................................ .............................. 89
setoN ................................ ................................ ................................ ................................ ..... 91
krow t eesnhNdotrows sdaePtpyrcnenU ................................ ................................ ......... 91
gni nBgMiSS ................................ ................................ ................................ ................. 91
sdrows sNaAPMNAL ................................ ................................ ................................ ..... 92
skc aetctiAvreS ................................ ................................ ................................ .............. 92
noitpec rge nt&inpIpordse vkarEowteN ................................ ................................ .......... 93
ciffa rkTrowt elN l oAythpargotpy ryClppA ................................ ................................ .... 94
tenar tmnn oaIercfiv rsTewNSod neivWi tganNitalosI ................................ ................... 94
gnif oPoIpS ................................ ................................ ................................ .................... 95
snoitati mt irPLoIP/PCT ................................ ................................ ................................ . 95
slocoto rsP’ TsNwodn ifyWotiruc eeShT ................................ ................................ ....... 95
17. )S AeRc(iv rsesSe cectAomeR ................................ ................................ .................. 97
senilediuG ................................ ................................ ................................ .............................. 97
setoN ................................ ................................ ................................ ................................ ..... 98
noissu clsairDeneG ................................ ................................ ................................ ......... 98
sdrows sr aegPsnUortS ................................ ................................ ................................ ... 99
yrtn eSSAR ................................ ................................ ................................ .................... 99
seniledi uyGtiruc e TSsNwodn iAWSN v 8r1a8M9
.c n,IS S8T9 9©1 DEIFISSALCNU
DEIFISSALCNU
18. gnifoopS ................................ ................................ ................................ ................. 101
s es te&onNilediuG ................................ ................................ ................................ .............. 101
noitar anpoegSoL ................................ ................................ ................................ .......... 101
)”ecneu qneoSitne tetrAuc e”S,“wod nyitWiruce Sh“ t(daePtsurT ................................ .. 101
selbai rtanVemnori vrneE h dt”nOHaT AePd“iW-metsyS ................................ .............. 102
eu s ”se.Ih“T ................................ ................................ ................................ ................. 103
smarg onrePd ddi lHto aHshet laitFaD ................................ ................................ ........... 103
smarg onruPr-o tMuOARDC ................................ ................................ ......................... 104
gnif otoupcStrohS ................................ ................................ ................................ ......... 104
snoisn edtrxaEd ngantiStcetorP ................................ ................................ ..................... 104
snoisnetx Edradnat SgninifeD ................................ ................................ ........................ 105
se lmiaFrg omr oP ”rgRfn“ivomeR ................................ ................................ ................ 105
sresw otreBnretnI ................................ ................................ ................................ .......... 105
gnif oLoLpDS ................................ ................................ ................................ ............... 105
19. sec iste ci&atriPlibisno prseesRU ................................ ................................ ......... 109
20. secnerefeR ................................ ................................ ................................ ............. 111
8r1a8M9 iv seniledi uyGtiruc e TSsNwodn iAWSN
DEIFISSALCNU .c n,IS S8T9 9©1
DEIFISSALCNU
1. Introduction
detcu dmsneao twcgsnyista rs™ewTpoNo dsn’itWfoso rgecnhiitMr u ochtecnsria essiehrT
yc nyetgiAr ulcaenS ot icoetathartN trn eo,dc .n,cusneIci vsrmeeS tdseytS syubrT
gnirugi fynloec ret uhrnctaie-sfo-e teearht ut s ls t.eaaop)howta6Tgc330-C-79-409ADM(
d,nsak rdoewhsi l wbfeuoi pveevrisn e dtne xos0nea.ob4itatsk rdrone Wav srTweNoSdniW
edhetdul con sitlcaart nso ic.hsTr elsauicrem m dotncnaemnre vho tg roeobcfnad irueg fofto
ecr o kdf” cnnroeaeethkcc edheCm“an- e ldeoorocatw teflobsam mt anfreo gmaopropleved
.seic iyltoipr ucciefsiceps 1 s nifohoittpirc sdeedl irwa oo tafl”ee,dberawt froeSkce heCe“S
.epyt oetroarwptfos
ScopI&en tent
s wTso Nkdncn oain tWw,tonano kmrmeot c ntsuaeohcctit ceabripr csseendile deisueghT
l .eas eyhoioklTgtasmuoic i al rtayeam fsde iusrd ooo tpmsaxnheotitalla tksrnoiwten
nestaraicu csTsewNasodniW yllac iy tldcbnaaarnposaer t aehvt e.id leeerWbugif neobc
tne rervuicss es r k otgl yhsets genrttihoaavoaiirtmeprwl uecce ussdeenrile deisueght
e dhsnttanemnori vlnaeicrem m dolncaatnemnre vsnotigs isxteae rtfehe omt sea.hssTtroffe
t se olombtlaaci lseperpnaaile d,eiehu ctg.n ee meemHgerhanhatsitnia tsrneooufcqinhcet
tne r wrfeuoi cveevrisn e t tflesxou reesaaneirled ie.uhtgTnemnor i svTwnNoed nyinWa
t hs rtattoienawletsis neorcofer esedThwrnNtoaad nginWir u scnk eordsoewhsilbup
,]79r c,i]M6[9e y,a]M6[9t tyulSb [at,tssootnmr or fo,fjseaumoi vl eatrr npefavozeisngoc
denehinti fsetdnem u rcoeo tfdsetrekc a”r ] bs…nm[ ie“e th.iT](79yv ad,Nn][aMFT[
secnerefeR ).tnem u n decteofnhoahioetdtt ces
eru c t ens enseo,hivmrteeve w.oyHtiru csgetnsiineth grsioltfort n y osnsTcwaaNomhdniW
srlgolnfai tttseest hdegnhiettmm oycle dr y n,eotishdolstnbe rsdednaile dei su tegeahdhtotm
tssenubomitadnemm o tscgatenhiritdnats rs eesednihnitul et dineicihuitg l.psmlIortnoc
lanoita reed pesoplmoir te.nmlooacSci t scodtasnar laepnariha tttrsen cieavgiatc ehftfoeb
.r eyyfetfhiot r tueschne tisdaegcan ayllalb u rtf e yisedseteurnubihmaaltcibapac
er et yhashthiptosol ie.hnnpOonemo n sek snhnk iopiaailetwarte neevpi ttcsani aygtairuceS
.ni asm kersrei g rhr,caru le mnhse tkhyoswtiirr urc oetnssinm igangiatce tto nreiplo tpstiil
reg regahnltinet h lgye ibve temeylahlsth g suok otslsrilgran ie,rnybohposol is hirphetdnU
sec uydheproso lriehhp t.odneAgna h scr e nogneunnohiit mv,aseklsir all tsew orlie h otstks ir
e tvsaalhhotr tenboicrc sseernpile d,eishuetgme reot swxeetech ntg anolitatbpm e.tsteAulav
s krsei lrg lnfaiom sseeo vhl kdatcmsneeial trlslyas rgenvio ct ucnd eoecfriftea m taesrhodtm
, et rtntuieaos sy sed krnnesp eohitptrneedme lsuplomoyir tyenlhoetctam i.tllaUno istapo
.ta eerthat mriet tis a nglyfueoeiolrh cttr n onotnecnivememe ldp l mduuinooahys
tn reyi mbeeghldtbuajred iesrn iocsu rq eee,lhrditrhoawwrofth gs ieeanrriatls eedmiouSg
.devl oavinrie ttinr ecn iofeliohastssu ctfsn ei eaidr sreeeb twr,dretpsnoharaftletnemelpmi
l, asrt icoist riio yopnartooutttcudo r etsmneoidsu ltcnneim u schioghdutohtlA
seernaile de istuenghetme ltsparmhoittartsi n ei.em mlhuedat sWauesnvaaimtartsinimda
tnneiic is fwTdooNnr dapynniaWpm o tcsaclhaat uenvaimtartsin i hemrthdaitaiwlimaf
e.hsTerut ayetfiru c segtsniiganam secnerefeR lair ort eu ehtsmteoo dsnu oltedicah ntntecies
.sgnidaer

1 rekce h fCyotilibalia vea httuo bsatnemecnuon nra oeft ibs esWecivr esSmets ydSetsu reT hktcehC
( moc.smetsySdetsurT.www//:ptth ).
seniledi uyGtiruc e TSsNwodn iAWSN 1 noitcudor t.n1I
.c n,IS S8T9 9©1 DEIFISSALCNU r8a1M 98
DEIFISSALCNU
.S .e Uhrted n2sduCaet anre es baTshNwodniW noitau lsamve EtrseytSu pdmeotCsurT
airetirC naepo rruaEli m eirhset ddneu tyalrbarap m do)nc”ak oeogBna r,rOCo“ES CT(
ci ss a’sbTwNod nt iaeWhctnedif nd onsceglni teas re.hCTE SedTheItl leancilediug
aire te isyrelchettanutr o.fdneUtneme lyplmbiisno pss e eer d rru dnsutsnuitataoceiseftihcra
.yle rg u ntcgdiiennssiaurugi fsnsoec rotddodna
tra-eht-fo- ed tesatatnse sye.eeryrhacp T ieAltSouNpt ist esotnndoionlce dei su,egyhltlaniF
noitacif inddonoiamtater p ,rnd eyeenorltpataen oris uwTcoN edgsnniiWrug ie fcnnioovcda
tpt mat ennteat saseernpile dei su.eg ehrtTails us cefiio tcar iasdlptnoaap eotertihhftt
.yle rs uwTcoNe dsgnniiWrugi f”rneoocfcit claaripcre mtm sogecnbi“tnemucod
dnnoaissuc seimdoc lyelwid ad,entranemu ce ov sdi setnancaialed ieus gew heetiWv
hguo rdhetvo r nt peaasmbcha itey rnyaalmdetbuo deenrr uae.hsTred asm etokrircfabdeef
.moc.smetsysdetsurt@ed is utogntten m dm.nosecsSe csoirhpt
Level 1 & Level 2
l:e1 vte aLehrtu cle e er2s svoeiem r Ls edl,1hne2w av,eyLtiru csfelose v oeewlnti feeWd
le1veL lyllalaut r.inVoitalla t ssTwnNoid ndirWa dr n etaavntoesmecna ht nssee idaom
l e.tv1neeLm e t lynoplatm ewidk litulnoawtr oyptmiir u mc teesaesehdttis
le2veL h os oetiyhs wtwo–ihrt u tconetesmtim meolcbared ih s tsna ieo swtcoeitisl ppa
.sdr o sfTwfNoad nt ianWhotitcet oeerhzptimixam
tge s nhsouotemom cya,aslnpo isdtnnpoaoitadnem m l oh les,ctglvt2einaeirwiLtnemelpmI
se rli e u,v2qreeeLrv e.wyolHe rs uwTcoNe dsenriuWg is ftonrto ocefvfiessergga
ylbaredisnoc nekatr e tddeolnbn uu lod,eh n1vsna eanLhitatn idlanlmaa t tsornto ife freom
.ylthgil
+ d , esdrtaeoo“ tnyalt psle m erdirnvaeso eebfavliirgc sseercpitcarP debircserp ”r.ehtO
sec ietrcaarp“ dednemmocer ey ret ahatthitc i dl” tnp,siamii dednem myolchegrih ta
l.e2veL
ri et shioetutcsitc axripm rle e t1lv y rnletl,oiiLut2wbc i l relstbie s wtw,ieesfcitc anrIp
l .rasnuoioOgitautis ton gn i sk dlr 1eneo2 ravw.aeaLiret igrn cih tsaairlba toste
, tefui liomawpyoe mf.rawoxoFe tyslelba id c noe i t ennofsaetotfnhwnootiitangised
r ut oad yhn ,te et ttowsegnodehninrtitnemel peml iishnwoitc elt e o2vdreepLdnemmocer
”l.e2 vt e oeLsnna“oe mdyoebsle bmeaebltsys
Structure
e esrrnd ooolemonhiled ihucgaE enilediuG dednemmo cete hsrytilltcnic ct uasshntoit ces
. sAnoitca Notes e,drdnonamuorg k,cealbano isteadru lscwnoi lyllolf a tunasohuit tces
s erteo tnn poted haiahnfch tteoacececens e.rs eeAfueqri ns hnfcooeittpir cdseeldiated
.secner erf eesdhrentnaoile ddieutgaler
.ecnamro flnaorc edrneoewfge iyvlerra ld uleg ube yors tehesahsnihtitl et dinliciluiaglpmI
wei vceiRdoireP eedh it)stnnie seerr epsh ewt(on senilediuG deli a ltraeoidc ey plts nsoil
l e,v1sedLo iwree ipcviefri ceebpis re c le s.iwoteshdorwWnpe iev sesrernohoftitseggus
.sh tly2 n e r-,odv2e1smnevhaL e ty6n r-owe3mev ieyvlelrac idp lysuteotwis
noitcudortn I.1 2 seniledi uyGtiruc e TSsNwodn iAWSN
8r1a8M9 DEIFISSALCNU .c n,IS S8T9 9©1