tailieunhanh - Active Directory Best Practices 24 seven Migrating, Designing, and Troubleshooting phần 10

Sự kiện được ghi lại khi người dùng cố gắng để tương tác đăng nhập vào một bộ điều khiển miền hoặc xác thực với một bộ điều khiển miền để lấy một kịch bản đăng nhập hoặc chính sách. Kiểm toán truy cập đối tượng này nên được thiết lập để thành công / thất bại. | 314 chapter 22 securing active directory Guaranteeing Database Space There are two reserve log files that are used in case the partition that holds the logs files fills to capacity. These reserve log files are 10MB each and will move along with the Active Directory log files when you move them. You should not rely on these log files to be adequate if there is an attack on your system. 10MB is not going to be enough space in case of an emergency or if you come under a denial of service attack. You should consider creating a dummy file that will take up space on the partition where you have placed your directory database files. Create this reserve file so that it takes up at least 250MB of the partition. On large partitions you can create the reserve file to be at least 1 percent of the partition size but the minimum size should not be smaller than 250MB. Creating reserve files becomes a good practice by guaranteeing that an attack on the database partition or poor planning by the administrator does not allow the database partition to become too full to efficiently recover. To create the reserve file you need to log on to a Windows XP or Windows Server 2003 system with an account that has domain administrator rights and connect to the partition on the domain controller on which you want to create the reserve file. For instance if you placed the directory database on the E partition on the domain controller you would open a command prompt and type net use x e . Once you have mapped the drive you can open a command prompt change to the mapped drive and issue the command fsutil file createnew ReservFileName ReserveFileSize. The ReserveFileSize has to be entered in bytes. If you want to reserve 250MB on your partition and name the file ReserveFile enter the command fsutil file createnew ReserveFile 256000. After you create the file make sure you set the permissions on the file so that any of the administrative staff who are .