Nghiên cứu về cơ chế bảo vệ trong windows server




o0o
BÁO CÁO BÀI TẬP LỚN MÔN HỌC
NGUYÊN LÝ HỆ ĐIỀU HÀNH
 !"#$%&'"#(')*'+, (".(
/01# /02345678489:
;<1#
'!=#6
!>?;'
!>? @!
A'";5*B
C,!>?D&
EF>GHAIHJ0GHIK




 
!"#$%!
&'()*+,) /012&,3',4.+5623'7.+8).9:;<=72=7
,>?',@/,)3.*,>?ABCD* EF
+GH)',@/,)3.*
(.+1I.)3D
+1JK.G.+(.+
+1JK.0/L1
)M2) ,GC.+9N.*
,;*+1JK.,O.,6)
(.P)Q.+(JR',M.+.S?RT
,GU.+*)C)',)312&,3',4.+5623'7.+:).9:;;=72=7V

 W/')-1/XO5623,3',4.+V
 O'7L.Y1J&.'71J/LDZ
U/,[,\']P.+/XO?O'7L.Y1J&.'71J/LDZ
RM/D,GU.+D,MD/()]^'Y1J&.'71J/LD?O'7L.F
M/_\)+.'7 :).9:;;=72=7RVT
+.*.'=7O/')2=T
R+.*=':7ET
V+.*..J?1;Z
M/,;`9W.+/M/+)O',0/aM/',@/Z
b623'LD')./,056.</XOO;;:79c
bU/,[D,d.Y1J&.1',7)eO').F
,GU.+V*,)['_LDY1J&.'71J/LD]4)2C)'LD').2(',G?W/R
R<U_Gf/2&g<R
<,O7=Bg_9=7R
[',fD+)hOY1J&.;,O7=2(g<R
R
Chương 1 : Giới thiệu về hệ thống bảo vệ trong windows server

8 AL(M'NOE,'('#$M0EL(MP6QR
/S&;TOLAL(M9A"&;T5'%E#$C#
O!U6&6A#FJP9V'QRQD(!>"OP%#Q
6A#AQR0W('#$OSJ;<OE@>C
8 7P9AF0X!YD%&'"##$ZQ$,1(!>@6%=[6Q#F
*X!>F\!>LO]^O$;['('#$,_*X
!>6`[6"5\!>O]YD#C
8 a&'"##$U6&!=60EbL"LQ;[OS\!&(]"#,_
*X!>F\!>LO]^O$;[O$;['('#$
O;[%&'"#"\!>O]AD'Ac[6(AO$;[>C
II. Miền bảo vệ


8 7E#$0A>c%D'd0@6[6AYSe,!%f.g,h"@6[6A
9ASe'%f.g,hCYS%D'd0AL0(M";<,_*XZ
9AS/S'QA!>YD0A>ce;%E5FiOjDF*^
Q#!kh
8 S/S9S0,'AO;[M(N,_*X!>('#$F#O!
l'6m6AYS(!>@65A9AS0//\!>,_
*X""'^<OS0ULe!>Qn *3'39'+ho0N
LAQRp&>(D*'(D=6!>C
8 7RYS('#$,q'NOE('0E0%&'"#e6('.'
*'0Dh'O/C7E0%&'"#,qpAO]A9AS0YS('
0O/O;[6m6(!>@6"1#AD'AC

8 A9&JD'A0YS/S1#(9ASO;[rQ
\!>(!>@6eD.,,(hC7R\!>(!>@6O;[O]jD%T0E
%ED6UsO$;[Ft\!>D'AuvC;"@>D/SM*!
0%&'"#Q0E@6[6A\!>(!>@6FpAO]AD'A0Y
S/S1#(A9ASCA0%&'"#9AD!/SD'
D!0E,$\!>(!>@6C
V
MIwc*X"0%&'"#
8 7EL(M'NOE"0%&'"/SdND0$Q9L
• !"#(',!$<DdNYDL(M('#$FL
(Ml'NOE('0E0%&'"#C('(;<[6L(M(&
\!DADO'Np_Qn9AD!FT0RDO'N//SD'A(
^@6!>9AD!C;"@>('Q9LjF0%&'"#
6&pAO]D>xOU!A\!>(!>@6'L(M('=&A
DO'Np_QnC!>9L'L(M,qO;[*;xD\!>('
0EDO'Np_Qc'O/""6N0!>Qn *8'89'+CSO&0
%&'O;[!>Qn>U6&/9&J@6@E*!0%&'
"#\!DADO'Np_Qn9AD!OSO&0%&'A\!>$S!YD

L(M('0%&'"#N0E<OS0C
• !"$%bL>'6m6L(M!>SOix0%&'"#
>,D0%&'"#9A(',!$<DdN('#$YD
/CS!yY!>Qn *3'39'+FD>"M6&,_DOiE*!
0%&'"##$/SN'(DA0%&'"#05"5E*!D>
Oi`>.'xDO'Np_QnYDL(M"!>SL(M,D
'NOENA0%&'"#6`[6"5x<OS0C
8 7E0%&'"#/SO;[py>*1'
• %&'()*('(;<[6>F@6AO$;[O;[6m6(!>
p!=6X!E"'O]*DYD;<,_*XF0%&'"#O;[!>S
9D>Oi;<,_*XC
• %"+('(;<[6>F@6AO$;[O;[6m6(!>p!=
6X!E"'O]*DYDL(MF0%&'"#O;[!>S9\!>
O!9SO;[!>S,DL(M9AC
• %('(;<[6>F@6AO$;[O;[6m6(!>p!=Q
A%LX%EO;[O]jD%('YXF0%&'"#O;[!>S
9YXO;[rC
T
,-..,/
0"1$%,-..,/
8
S%S!*?0%&'"#FA#O!,qOPA0D(@\!>(!>
@6('O/AYD0D(@%S!*?A0%&'"#FAE%S!*?
9ASCU_eFfhYD0D(@pAO]\!>(!>@6YDYS0
%&'"#z

F/SD'AO$"59AS
fC
8
7EA(x!;[F/S%S!*?0VM%&'"#(Oy>;0E0D(@

\!>(!>p!=eD.,,0D(phCA*ZYD0D(@%?!*?A0%&'
"#"AE;b "5AO$;[('#$CU_D.,,{Ff|YD
0D(@pAO]A\!>(!>p!=00EL(M'NOE('0
%&'"#z

/SD'A(O$;[
f
C
8 bL%&'"#O;[!=690D(@\!>(!>p!=O;[OPe"5OU>
OYA!Ec^jDO}0V&(Qn!>LhFQ~>;<,_*X/
SA6*XALQ;[%&'"#%oAOP&E*!A6U_;b
('0D(@pAO]A\!>(!>p!= "5x0%&'"#F"
!$`F#O!,q\!>LO]'6m6L(M'NOE('0
%&'"#c[6C
8 7D(@\!>(!>p!=•!=60EbLc[6OSO]jD"
1#0E,19S0,'A0P'&6;b Q9Lj"
OEAL(M"5A0%&'"#C
8 /S9S0,'A"#!>SOi^DA0%&'"#L!\!D#00
%&'"#•Q0EO$;[('#$F"%i,!AE0V&'/
('0D(@\!>(!>p!=C
8 O/L(MO;[6m6!>Sx0%&'"# ,D0%&'"#z
f
L!
6U_D.,,eFfh DO1\!>T!>S
f
e,+hC
Z
8 /S9S0,'A"#,_DOiE*!0D(@eD>OiA\!>(!>p!=
('0E0%&'"#hL!\!D#0%&y0D(@•Q0EO$;[C
8 AD'A,_DOiE*!0D(@O;[6m61#%D'd0,D'm6

\!>e'6>hF!>S\!>e(D,€.(hF\!>,T^!e'+.(hF"\!>9S0
,'Ae'('QhC
• /.L!0E\!>(!>p!=('D.,,{Ff|O;[OA*=!Q•M
/S,D'm6/,D0E6U_D.,,{9Ff|9Ae0T(E\!>(!>
p!=(`O$;[ ;('0%&'"# ).
• 2(34L!0E\!>(!>p!=('D.,,{Ff|O;[OA*=!Q‚
M/S!>S/,D0E6U_D.,,{9Ff|9Ae!>S\!>(!>
p!=‚(O$;[ ,D0%&'"# h
c
• 564L!D.,,{Ff| D\!>(!>p!='+.(ML(M'NOE
('0%&'"#z/S0'Pp/DA\!>(!>p!=('%=9ƒ
6U_'(Efe/\!>0D>%5A\!>(!>p!=(O$
;[
f
('^0%&'"#9AhC
A
• 7L!D.,,{Ff| D\!>(!>p!='('QML(M'NOE
('0%&'"# /Sp/D%=9ƒ\!>(!>p!='('A6U_
(*Zfe/\!>%„%5A\!>(!>p!=('0%&'"#z
f
hC
/&0//8$9-..,/,
8 :8;<77274=>;b6A6>Ob&=FOSOP0D
(@\!>(!>@6F#$,_*XI%&'X%D'd0A%E%D
6Us0%&'"#F9ASF\!>(!>@6ves*'0DF'%f.F(,vhC7R
91#\!>D'A7(9AS
f
('0%&'"#z
F
UM0

('%&'X0E%E%Dsz

F
f
F
9
v07!E
9
e(!>@6A\!>
(!>@6hCL!M0=>D'A7O;[6m6VF;[QN,qp&>
(DQRC!>6;b6A6%&'XeQ'%DQD%Q.h/9c;5(=Q5
9VS^('%E5C
8 ?(-..,/;@4((7 (35A4(B@ =/S
OP0RE('0D(@\!>(!>p!=;0E*D,A\!>(!>
p!=O$"50EO$;[C7RO$;[('#$,q/0E*D,A
%D'd0A6U_QA%ED 1s0%&'"#FA\!>(!>p!=vF
*D,A>,qpAO]A\!>(!>p!=O;[\!O]('x0
%&'"#/SAOE(O$;[C7R91#D'A7(O$
;[
f
('0%&'"#z

FUM0('*D,A\!>(!>p!=YDO$
;[
f
0E%EDsz

F
9
v07T

9
CL!M0=>FD'A7O;[6m6
FL!9VFp&>(DQR(!>p!=C
• Ví dụ :7E0%&'"#('#$…†O;[pAO];b "5
0E;<,_*Xe!*h('0E/0e*h'O/C&,_/K;<
F
*`FaFFz!EA/0;b Q,>,.0F,D€€F,!*.F,!*.C
O/A@6('#$/S/A4;,D!
 ‡Q.HeF•F)†h
 ‡Q.IeF,>,.0F)†h
 ‡Q.GeF•F)8hFeaF,D€€F88hFezF•F)8h
 ‡Q.ˆe•F,!*.F88h
 ‡Q.KeF•F888hFe•F,!*.F88h
1LF#$@6('…†O;[%&'"#%oA0R@6O;[
A;b ‰%%&'"#Fxˆ%,q0V&\!>(!>p!=eOrhF)eh
D>†ep_QnhYDAL(M(@6>.' 1L(M,Š^!A
L(M`/0"5L(M,Š^!FAL(M9ACy>Q0E*N
4;O;[m‰%C
8 ?(!C;/7. (3?=>7R*Z('0D(@
\!>(!>p!=;b "50E0%&'"#,qO;[i 0E
*D,A0JeD6D%Q.,Q,h
• 7E*D,A0JYD0E0%&'"#Q0E*D,AAO$
;["AD'AO;[\!>1#(O$;[9L(M
'NOE('0%&'"#>C
• 7E6U_YD84,O;[rQ0E0JeD6D%Q>hQ0EM %?!*S
O;[O]jD0EA/=!(~'0EO$;[('#$"A\!>(!>
p!=[6Q#(O$;[>C
• Ví dụ:
 L(Ml/S1#D'A7(O$;[
f

('0%&'
"#z

FL!('‹4,YDz

/ D0J;b YD
f
C
 zD,A0JO;[A;b "5x0%&'"#F1=
/•Q0EO$;[O;[%&'"#%T#$F"L(MYD;<
,_*Xl/S(!>p!=OL/0EAAL6OS(AQ0,DQN
‹4,C
 #O!!=6AYX'6m6N'Q@6FY>%„",_DOiA
0JYD0EO$;[F"lAL(MO/"D(Z,.(".(
e;<QL(M#O!h05/S,_DOiE*!‹4,C
8 0"!DB+;@ !B4.4(=>
• ;b6A6>1@Q,19L[6^D*D,A\!>(!>@6"
*D,A9&JC7R9AS,T;!0E*D,AA0}]6y
i
rQMDe9.>hC7EYS'NOE('0%&'"#,T^!0EMD
;b "50E9/D('*D,AYD9ASC
• •;6;b6A6*D,A9&JF6;b6A69/D"MDO;[
\!&Qn%T#O!F;<,_*X9VS(!>@6(1L6OS=>
O;[E*!YD/C
IV. Kiểm soát quyền truy cập (Access Control)
8 .,,'('Q/S,_*X(A€Q."50E@6#$C7R@6
";0XO;[lO]0EY,T^!(F0E/0'P0E*D
,AA;<*`F"'A*b"]F9S0,'A(!>@6VO;[D'C
7E J;b1/SO;[0"'A9cDN9AYD0E#
$0A>cC

• Ví dụ:^cJ9S0,'A(!>@6O;[c[6,Œ('-'QD(,IH
S#\!DAOP\!>('\!>O]"\!>'!,.(IC
Thu hồi quyền truy cập(Revocation of Accsess Rights)

 ('E*!%&'"##$FOV9"#!d0E,$\!>D'A(
A9ASYDAYS•O;[p.0Q0E%#6A6%&'"#C!
d\!>(!>@6U~n50E,$"=O,D!
8 !d 9•D>(M'}"L!(M'}M5%D'<Ž
8 L!Q'N%„0E\!>(!>@6YDYS50E9ASMQ'N%„=
&D>lA6*X"50E,$YOŽ
8 !d0E,$\!>D>'%E\!>(0E9ASŽ
8 !dN0<D>"j"?0E\!>(!>@6Ž
 $"5A#$,_*X*D,A\!>(!>@6F"#1#\!>
!d(!>@6/S1#0EA*?*%oAM0"Y>('
4C;"@>"#!d,q/#!Q1 <"/SA6*X'=&
AYS'P0E/0AYS!d0EA"j"?D>N0<
O!O;[C
 !>F('A#$,_*X*D,A9&JF"=O!d,q
P6!9/9J"MA9&JO;[6AA(A0%&'"#('
#$F*'O/U6&M0(DO~(;59Q'N%„CS&\!>L"=O>
/SL.'A6;b6A6
• 2.EQ'N%„A9&J(D9„0%&'"#,D!0R!9MCL!
0%&'"#"BZ9&J'M/,qA>!U!9&JO/C
• F)*G&Hw50R9AS,qdNA'(„F(„OL
A9&J;b YD9ASCU!d\!>(!>@6'
(9AS#$,q*1D"'A'(„OSM09L0A9&J
;b C
• F)*G"/('6;b6A6>'(„9V(„(1
L65A9&JYD9AS0(„50E%&'XO;[\!&
Qn%T#O!CU!d\!>(!>@6lUp/D6U_

;b ('%&>C
 ('A#V,_*XbL9/D"MDF9U!d\!>lU
D>Oi9/D"%•%!EYSD>OiMD9/D05C

Chương 2 :Các cơ chế bảo mật Password trên windows
I. Cơ chế xác thực

8 4\!A(MpA1O$;[/O~"5O]*D0#$O}%L
"/O~Q;</\!>(!>@6VD>9VŽ
8 •!A(MpAO]O$;[O/O;[rQ!.D'C
IJK6*6(
8 LM - LAN MANAGER
8 47847•
8 •a•-
8 -7z
8 4‘4-
8 z…-e-h
8 k
)z)--•w•GHHˆz7•a•-ew•-’h
= B @L@L@<MN
8 ;[6A(S%Ta7“7-‡C
8 z`6D,,+'(*Q0E9c1!W"5!*$ODQIK9c1C
8 7PO]6D,,+'(*9@6"'!>S9c1'DC
8 D,,+'(*O;[Q;!*;5*N47-
R
,1j)5O.
]k1
)[']l)'I'/6/M/Em'@',(.,Em'@,O
n'/,1j)',(.,R/,1j)AEm'@
op.+oq<E=J?r

,>O/,1j)5 '7M)
op.+oq<E=JR?r
,>O/,1j)5 D,6)
,sDR/,1j)E['Y167OE['Y16/14)
/p.+
8 M(0!&bL'NOEYD47-C
;[OS0
8 D,,+'(*Q0E@69c1!W"5!*lQIK9c1C
8 !@'A0}/Dz•- D!OS0>L!/S%](D9C
8 !@'A0}/Dz•-lO&0%&'c%&'0@ 9V/c'"”
*^Q#!C
!>47…•"BO;[,_*X(+*'+,,.(".(GHHˆOS
*?*;bc"5A6%&+*'+,(;5+*'+,,.(".(GHHˆC
b) NTLM - NT LAN MANAGER
S9•6XOS0>L!"%&'0@YD47…•7('-'€O}py>
*1Q)z)-"O;D(DD' ''05D' 47"I
…•C
8 !OS0
• -_*X@69c1Q06D,,+'(*/OU>OYA9c1…'*.ec1OP
%#F9c1'DF9c1;<kh
• -_*X!@'A%J07.,,D.z.,7zKC
!>    ,D!  0E  <  D  O;D  "'  ,_  *X  D'     47"I
…•O}QE(D(=!OS0>L!
• D,,+'(*,_*X\!A•O?%](D9C
• !@'A7zK;D$;!C
wM"y>7(','€O}O;D(DD' 47"G…•OSD>
LD' •C
8 !OS0YDD' 05>Q
• D,,+'(*O}O;[y=6Q*b",_*X!@'A057z’
 !@'A7z’Q!@'A0}/D0@9W!O;[@6"'"0E!R9c

1"O;[D>OiQXA 0}/DCc"MLOy>Q!@'A$
;!"O;[A6*X!=D>C
z;5Oy>QM&0!&\!>(MQ''xpDYDD' 47
V
c) Smart Card hoặc USB Tokens
8 40EL%]"@Qc DA'c6*`OSQ;!(^*DDe.(€D.F("D.
9.>F.pCCCh
8 !,.0!$pA1%o,0D(D(*6&O;D,0D(D(*"'#$OS
Q=>VpA1C
8 -0D(D(*!=6,1%&'0@$bQ;D(^…,.(D0."D,,+'(*(
0A>C
d) Kerberos và SSL
8 .(%.(',Q0ED' pA1'NOE(O;<(!>9VD'C
8 $QN"#.Qm"O&0%&''"”*^Q#!C
8 .(%.(',O;[,_*XY>L!OSpA1G!('A#$Q.8
(".('NOE(0V(;<9VD'C
e) INTERNET AUTHENTICATION SERVICE - IAS
8 -ZO;[S!Q1z…--•w•"†•FpA1F
Q'F6y\!>O$"5^…-•z4'PwFR([0E,$D' 
pA1•84-F7-8"I“GFF•87z’F-FC
71 6*6((44OOP
8 .(D".
8 .+'(9
8 '>0'!,
 >44
8 !=6AD'*#;bA@6VO]*D;!,.(D0.F
6D,,+'(*"O;[pA1D>NQ'DQC-_*!,0DD(*QQ'NLOGON
INTERACTIVE.
 >L46!
8 4\!A(M!,.(!=6VO]*DOS-•w•pA1(;59

,_*X*]"X"A!>YD-•w•(0NC
8 49S! *X4•3-•w•()z)-C
T
P >@.(
8 49S!Q''9VU!=6VO]*DF;<O;[,_*X
'A+.%O;[6!%Q''F/Sp.06;b pA1>
9V''Q0E6;b pA1C
8 -_*X9'&•7…-Q9'&…-•‹7…•7•
O;[0"'/0…•--C
()*IJK
>6. z`'>!U!
Kerberos 8 †A1!,.((0A>+*'+,,.(".(GHHˆO}f'5
0E+*'+,,.(".(GHHˆ*'0DC
8 †A1"#(!>@6!>x^!,.(F'06!.(
O}f'"'+*'+,,.(".(GHHˆ*'0DFL!9S!(!>@6
Q*`YD,.(".(OSO]*DC
LM, NTLM,
NTLMv2
 †A  1  !,.(  ('  +*'+,  ,.(".(  GHHˆ  e/  S  Q
*'0Dh;9Vf'"'0E*'0D'F0PO]
*`47
 †A1"#(!>@6!>5+*'+,,.(".(GHHˆ
*'0DF.'AN>Q#––]Dl–€Q.D,—
Q!VQ!V*`47
 7E0A>+*'+,KCHf'"'0E+*'+,,.(".(
GHHˆ*'0DF0PO]*`47
Basic, Windows
Integrated,
Digest,
Advanced

Digest,
Anonymous
Web Access, Net
Passport
 †A1(').%,.(".(F-•4,.(".(F"^ 
*XU,_*X
Secure Sockets
Layer/Transport
Layer Security
(SSL/TLS)
 †A1(').%,.(".(F-•4,.(".(F"^ 
*XU,_*XbLpA1>\!D0N
Z
Q:,/IR@FRS((6*
8 zD,A-D,,+'(*O;[Q;!(^('@6-7F)z)-O;D
(DA%&'"#@6-7C
8 ,_*X-•-••-•-••,_*X!@'AO;[0}/DO$p "5
9/D%c0@*IG:%C
8 =!M-•-••
• -D(‘!
• ˜Q#->,9.>F,q#(DE6'N;,D!
• .>O;[Q;!R'O/('iOjD
• …6*D./SrQ1D9S!Q;!(^.>
c
• D,,+'(*-D(!6N'.>"Q;!"'R'O/('.,(>C…,.(6&
OJ@6O~M+*'+,05M09/DOS&0}C
• -'(.-D(!6.>'‡Q'66>z,9N'.>"Q;!"'iOjD00C
• -'(.-D(!69.>4'DQQ>N'.>"Q;!"'R'O/('.,(>C
#$9TOEF)*'+,,q1M0RQ;!.>O}Q;!C
• LQ@606'Q>Do not allow anonymous enumeration of SAM accounts

e9V'6m6Q=>@6-7x9L$'>0'!,hC
A
Q0"/T-.B@U
8 S0,'A\!>NYDO$;[9(!>@6"'#$
+V-KW@U
F
8 Quy trình windows kiểm tra truy cập đến tài nguyên
• $;[>!U!(!>@6!>C
• -',A-z'9.YDO$;["5A-z/('4C
• M0('A•/('4FL!/•'6m6MO$;[O;[
6m6F;[QNM%]Q'N%„C
• VM0=>•(!>@6•%]Q'N%„C
i
Chương 3: Thiết lập quyền truy cập đối với tập tin và thư mục
 /G\!>(!>@6O$"5@6";0X
8 ‡-.(0,,',
8 -D(.8€'Q*.(.(0,,',
I. NTFS Permissions
L2XF
8 ‡-e.+.'Q'>‡Q.->,.0h;[5#!`"56
%&)*'+,OU!e6%&>•R([‡ˆGhCw59VD
O]Dl™K%F9&JD>Oi9c;5YDQ!,.(OEQ@6"5*!Q;[
OjD F‡-U!;O}Q'N(xO;[^NL",$Q!,.(F9c
;5$ODYD@6(0E6y"`OjD C
F07&HL2XF
8 ‡-,_*X%&\!&Qn@67‡e7D,.(‡Q.D%Q.hD>'%&
‡\!.!Eo0J;<9&JQ;!(^Fc%&'0@'@6"
;0XF9&J0}/D*^Q#!OLx@6C'(DF‡-/9&
J]!QRD'F'6m6;<*`O/0E *XšL›e'
(.,6'*h09VQ0&;TOL^ *X9AC!>F

‡-QN9Vc[6"5^iOjD/*!Q;[=6e*;5KHH7ah
"9V,_*XO;[(OjD00C
8 ‡-Q#$€Q./9&JQNO;[A'NOE0#O!
O}"ODD'A(*^Q#!C//9&JpAO]O;[D>^€Q.
%],1$09VU6&\!mQN'%E#$€Q.F~6\!A(M6X
d*^Q#!(T@>"D/bC
8 '(DF‡-Z/(=!#c!>,y!9A'5;<*`
D'=69A;š0'!6D('›FN'šD(*Q9›50E€Q.FR([
*`zCCC
 NTFS được thiết kế để phù hợp với một số mục đích đặc biệt
8 &J !*^Q#!‡-,_*X9A#0š1#0 !>_›
eš'0(D,D'›hOS1#cJ9V6X*^Q#!#$CL!
0E;b(MO;D(DA>!U!Q0D>Oi=!(~YD#$€Q.
‡-;D>Oi=!(~;0XF9m'*€Q.FN'€Q.05CCCF‡-,q1
#>!U!>F/G9&Jp&>(D
• V$O”6C
• •!D>QN(NA$b(;5O/L!%]QRC
8 •V$O”6
8 ••!D>Q!QN(NA$(;5O/L!%]QRC
8 V$O”6
$(;5O/L!%]QRC
8 a&'0@#%&'0@('‡-O;[xD9L(1L6x0VM;5O$
;[('.(.QYD)*'+,CAO$;[cYD9.(.Q%D'd0
• ‡Q.,
• L%]e*.".,h
• ;<$e66.,h
• V"#ef'%,h
• L(Me6('.,,.,h
• S!(Me(.D*,h
R

• -19#e.".,h
• ;0XD,—0Ne.+'(9,D(.,h
• z]"Xe,.(".,h
• /D('(.,(>e(.,(>9.>,h
• 7A>e6(.(,hkC
7RO$;[('9.(.QO!/0E%&0V&%&'0@e,.!(>*.,(6'(h
(C7R90EL(M>!U!0T€Q.eD>0T%=9ƒO$;['
9AhF#$%&'0@Or"9S0(D%&0V&%&'0@YDO$;[/
6`[6"5!,.(D0."6D,,+'(*YD;<ODOJ@69VFL!6`
[605'6m60TO$;[O/Cz'"@>9V0EL(M'/S0T
€Q.09VO;[,1=66m6YDD*0,(D'(D>YD;<N'€Q.C#
$>'NOE;bO$#!\!&"5€Q."MO$"5€Q.F%&0V&%&'
0@>O;[(1L6QOjD;0E6UYD€Q.C
8 7E,$cJ9A
• R([€Q.…'*.‡-'6m6€Q.Q5G’’9n1,'"5:Cˆ9n
15N\!;5YD‡C
• 4;!(^#!\!&80EQU^DFN<OS0‡-O;[6A(SFU!L
0A>cAy,_*X ‡I™F9L\!&QOjDQ0"#@0N6F 9m0
J,!=C‡-JxD"=O>%oA,_*X0E6;b
 9AOS6y6$9VD'€Q.,'"5A‡O}Q0C
• A%„('&9c;539V;‡F0E6y"`1ONQ5
=lQKaF‡-'6m66y"`Q5b"'9'&I™.pD8
%>.C
F4YX7*4
7!$'6m6;<*`/S(!>@6!>0NMA;0X
 D!>6&O;[,D(.C
0E;0XO}O;[,D(.F%N/S%&'"#;0X%oA=O]
\!>(!>@6;0X*`!';<,_*X'P/0,_*X.'0X
Occ[60DO(DC
!>F\!>(!>@6;0X*`! ,q!=60 OE%&'0@

5N"MAQn*',D!Oy>
8 '6m6;<*`(!>@60r;0X"@6('6N0";
0X*`!T`=6OEC
8 V/#!Q19;<*`dD>(;50A>c D
!>"M0(!>@6!>(0A>>
8 VS*`OS%&'"#x@6
 "H/Z-.(48L2XF
A*?*=OS9L[6\!>(!>@6;0X*`!"5\!>
(!>@6‡-Q
8 w5-D(.^!>*.€D!Q‡!QQ'('QA'/0•".(>'.C
R
8 -D!O/=6\!>‡-'9'&;<*`'P9'&('!6X
SOS(!>@6;0X"@6 ('#$6yUYD€'Q*.(
,D(..(0,,C
Khi kết hợp quyền truy cập NTFS với quyền truy cập Share thì cấp độ giới hạn
luôn là cấp độ có hiệu lực.
wc*X
L!O;[=6\!>(!>@6"50 OE‡!QQ'('Q'I€'Q*.(FOdQ'N
=6\!>(!>@6‡-T=6OE.D*'x;0XO/FM0 OE#!Q1,q
Q.D*"MOy>Q=6OE5N=C
†mI"c*XXS,D!
( (".(N';0X*!!F(;0XN'G€Q.*DDI"*DDGFN'
A!,.(!IF!GC
=6\!>'!I;,D!
8 (!>@6;0Xdungchung"5\!>€!QQ'('Q
8 •!>‡-Q€!QQ'('Q"5€Q.*DDI
8 •!>‡-Q(.D*"5€Q.*DDG
=6\!>'!G;,D!
8 (!>@60Xdungchung"5\!>.D*
8 •!>‡-Q€!QQ'('Q"5€Q.*DDI

8 •!>‡-Q€!QQ'('Q"5€Q.*DDG
4~>M=6OE#!Q1…,.(Q
8 …,.(!I‡!QQ'('Q"5€Q.*DDI".D*"5€Q.*DDG
8 …,.(!G.D*"5€Q.*DDI"€Q.*DDG
RR
A1#
Trên Server: Click chuột phải vào folder Dungchung=>chọn Share
=>Check vào phần Share this folder => chọn Permission
=6\!>(!>@6;0Xz!!'!IQ‡!QQ'('Q
('0M.(0,,'D.0'"./0•".(>'."D**"'!I
;b1D=6\!>.D*'…,.(!G
Cấp quyền NTFS cho file data1
RV
Q9!E6&"'€Q.*DDIr('6.(.,
r*"D.*
RT
a„*=!.9NQQ'+.(D%Q.6.(0,,'€('0.6D(.'6('6DD.',
'%f.D*DQQQ*'%f.,CQ!*..,.+.(.,.p6QQ>*.€.*.(.œvr
'6>œvOS(TQN0M!Ec€Q.C
(0M!Ec€Q.**;<*`U=6\!>"\!>,q=6
(d=6OSA6*X"'A9„C
;b1FD=6\!>(!>@6@6*DDIQ‡!QQ'('Q'…,.(!G
Cấp quyền NTFS cho file data2D•1#;b1"=6\!>
.D*'!,.(!I"‡!QQ'('Q!G
Chú ý: Điều kiện để cấp quyền NTFS cho thư mục và tập tin
8 Là chủ sở hữu của tập tin và thư mục
Phải có quyền truy cập ở mức độ Full Control hoặc quyền truy cập ở mức độ Change Permission hay
Take Ownership
RZ