We konden deze vermelding niet vinden. Er worden benaderende resultaten weergegeven. Controleer je spelling of stel voor deze term aan het woordenboek toe te voegen.
系统访问控制
Use special permissions and file system access control lists.
使用特别权限和文件系统访问控制列表。
Physical access is checked by biometric parameters, with system access control governed by two-level authentication to protect customer data.
亲身访问需通过生物识别参数检查,以及双级别身份验证系统访问控制,以保护客户 数据安全。
The local folder specified ({0}) already exists on the server ({1}). The file system access control lists (ACL) on the folder will not be changed, and any content currently in this folder will be visible in the namespace. We recommend that you create a new folder to host a namespace.
The second ACL, called system access control list (SACL), defines which interactions with the file or folder are to be audited and whether they should be logged when the activity is successful, failed or both.
Kernel Object This policy setting allows you to audit attempts to access the kernel, which include mutexes and semaphores. Only kernel objects with a matching system access control list (SACL) generate security audit events. Note: The Audit: Audit the access of global system objects policy setting controls the default SACL of kernel objects. Volume: High if auditing access of global system objects is enabled.
Audit: Audit the access of global system objects This security setting determines whether to audit the access of global system objects. If this policy is enabled, it causes system objects, such as mutexes (mutual exclusive), events, semaphores (locking mechanisms used inside resource managers or resource dispensers) and DOS devices, to be created with a default system access control list (SACL). If the Audit object access audit policy is also enabled, access to these system objects is audited. Note: When configuring this security setting, changes will not take effect until you restart Windows. Default: Disabled.
A security descriptor for an object also contains auditing auditing information is known as a system access control list (SACL). More specifically, a SACL specifies the following
Registry This policy setting allows you to audit attempts to access registry objects. A security audit event is generated only for objects that have system access control lists (SACLs) specified, and only if the type of access requested, such as Read, Write, or Modify, and the account making the request match the settings in the SACL. If you configure this policy setting, an audit event is generated each time an account accesses a registry object with a matching SACL. Success audits record successful attempts and Failure audits record you do not configure this policy setting, no audit event is generated when an account accesses a registry object with a matching SACL. Note: You can set a SACL on a registry object using the Permissions dialog box. Volume: Depends on how registry SACLs are configured.
Audit registry global object access\r \r This policy setting allows you to configure a global system access control list (SACL) on the registry for an entire computer. If both a registry SACL and a global SACL are configured on a computer, the effective SACL is derived from combining the registry SACL and the global SACL. This means that an audit event is generated if an activity matches either the registry key SACL or the global SACL.\r \r If you select the Configure security check box, you can add a user or group to the global SACL.\r \r Volume lists the number of events that will be recorded in the security log. This number depends on the effective SACL and the system activity.
Active Directory Domain Services Object Changes This policy setting allows you to audit events generated by changes to objects in Active Directory Domain Services (AD DS). Events are logged when an object is created, deleted, modified, moved, or undeleted. When possible, events logged in this subcategory indicate the old and new values of the object's properties. Events in this subcategory are logged only on domain controllers, and only objects in AD DS with a matching system access control list (SACL) are logged. Note: Actions on some objects and properties do not cause audit events to be generated due to settings on the object class in the schema. If you configure this policy setting, an audit event is generated when an attempt to change an object in AD DS is made. Success audits record successful attempts and Failure audits record you do not configure this policy setting, no audit event is generated when an attempt to change an object in AD DS object is made. Volume: High on domain controllers only. Default: No Auditing
Active Directory 域服务对象更改 此策略设置允许您审核由更改 Active Directory 域服务(AD DS)中的对象生成的事件。在创建、删除、修改、移动或撤消删除对象时会记录事件。 如果可能,在此子类别中记录的事件会指示对象属性的旧值和新值。 此子类别中的事件只在域控制器上记录,并且只记录 AD DS 中具备匹配的系统访问控制列表(SACL)的对象。 注意: 由于架构中的对象类别上的设置,针对某些对象和属性的操作不会引发审核事件。 如果配置此策略设置,则在尝试更改 AD DS 中的对象时会生成审核事件。成功审核记录成功的尝试,而失败审核记录不成功的尝试。 如果不配置此策略设置,则在尝试更改 AD DS 中的对象时不会生成审核事件。 数量: 只在域控制器上为高。 默认值: 无审核
Registry security settings Allows an administrator to define access permissions (on discretionary access control lists (DACLs)) and audit settings (on system access control lists (SACLs)) for registry keys using Security Configuration Manager. Default: Undefined. Note: This setting does not appear in the Local Computer Policy object.
Audit directory service access This security setting determines whether to audit the event of a user accessing an Active Directory object that has its own system access control list (SACL) specified. By default, this value is set to no auditing in the Default Domain Controller Group Policy object (GPO), and it remains undefined for workstations and servers where it has no meaning. If you define this policy setting, you can specify whether to audit successes, audit failures, or not audit the event type at all. Success audits generate an audit entry when a user successfully accesses an Active Directory object that has a SACL specified. Failure audits generate an audit entry when a user unsuccessfully attempts to access an Active Directory object that has a SACL specified. To set this value to No auditing, in the Properties dialog box for this policy setting, select the Define these policy settings check box and clear the Success and Failure check boxes. Note that you can set a SACL on an Active Directory object by using the Security tab in that object's Properties dialog box. This is the same as Audit object access, except that it applies only to Active Directory objects and not to file system and registry objects. Default: Success on domain controllers. Undefined for a member computer.
审核目录服务访问 此安全设置确定是否审核用户访问指定了它自己的系统访问控制列表(SACL)的 Active Directory 对象的事件。 默认情况下,此值在默认域控制器组策略对象(GPO)中设置为"无审核",并且对于其不具意义的工作站和服务器保持为"未定义"。 如果定义此策略设置,可以指定是否审核成功、审核失败或者根本不审核事件类型。成功审核在用户成功访问指定了 SACL 的 Active Directory 对象时生成审核项。失败审核在用户尝试访问指定了 SACL 的 Active Directory 对象失败时生成审核项。若要将该值设置为"无审核",请在此策略设置的"属性"对话框中,选择"定义这些策略设置"复选框,清除"成功"和"失败"复选框。 请注意,使用 Active Directory 对象"属性"对话框中"安全"选项卡,可以在该对象上设置一个 SACL。这与"审核"对象访问是相同的,只不过它只适用于 Active Directory 对象,对于文件系统和注册表对象不适用。 默认值: 在域控制器上为"成功"。 在成员计算机上为"未定义"。
Potentieel gevoelige of ongepaste informatie
Er worden alleen voorbeelden gegeven om u te helpen het woord of de woordcombinatie waarop u hebt gezocht, te vertalen. Deze worden niet door ons geselecteerd of gevalideerd en kunnen ongepaste taal bevatten. Wij vragen u melding te maken van voorbeelden die dienen te worden aangepast of verwijderd. Vertalingen met grof of informeel taalgebruik worden meestal rood of oranje gemarkeerd.