LinkBack URL
About LinkBacks
با سلام
من الان چند ساعتی با اکتیو دایرکتوری در ویندوز سرور 2008 این مشکل دارم که AD به کندی بالا میاد و به سختی میشه با هاش کار کرد و یا این پیغامها رو میده
Log Name: Directory Service
Source: Microsoft-Windows-ActiveDirectory_DomainService
Date: 01/01/2011 01:29:15 ب.ظ
Event ID: 2886
Task Category: LDAP Interface
Level: Warning
Keywords: Classic
User: ANONYMOUS LOGON
Computer: FFCCDC.ffccfactory.local
Description:
The security of this directory server can be significantly enhanced by configuring the server to reject SASL (Negotiate, Kerberos, NTLM, or Digest) LDAP binds that do not request signing (integrity verification) and LDAP simple binds that are performed on a cleartext (non-SSL/TLS-encrypted) connection. Even if no clients are using such binds, configuring the server to reject them will improve the security of this server.
Some clients may currently be relying on unsigned SASL binds or LDAP simple binds over a non-SSL/TLS connection, and will stop working if this configuration change is made. To assist in identifying these clients, if such binds occur this directory server will log a summary event once every 24 hours indicating how many such binds occurred. You are encouraged to configure those clients to not use such binds. Once no such events are observed for an extended period, it is recommended that you configure the server to reject such binds.
For more details and information on how to make this configuration change to the server, please see How to enable LDAP signing in Windows Server 2008.
You can enable additional logging to log an event each time a client makes such a bind, including information on which client made the bind. To do so, please raise the setting for the "LDAP Interface Events" event logging category to level 2 or higher.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-ActiveDirectory_DomainService" Guid="{0e8478c5-3605-4e8c-8497-1e730c959516}" EventSourceName="NTDS General" />
<EventID Qualifiers="32768">2886</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>16</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2011-01-01T09:59:15.969667500Z" />
<EventRecordID>1115</EventRecordID>
<Correlation />
<Execution ProcessID="680" ThreadID="884" />
<Channel>Directory Service</Channel>
<Computer>FFCCDC.ffccfactory.local</Computer>
<Security UserID="S-1-5-7" />
</System>
<EventData>
</EventData>
</Event>
موضوعات مشابه:
- وصل نشدن ویندوز 7 نگارش Ultimate به دامین روی ویندوز سرور 2008
- عدم دسترسی به فولدر های شیر شده در ویندوز 2003 از ویندوز سرور 2008 و 7
- مدیریت از راه دور ویندوز سرور 2008 از طریق کنسول server managment یه ویندوز سرور دیگه
- اموزش اتصال ویندوز 7 با ویندوز سرور 2008 در ؟vmware
- آیا میشه سرور Additinal Domain برای ویندوز سرور 2003 یه ویندوز سرور 2008 باشه
