전체 포리스트 업데이트
다음 변경 내용을 검토하여 Windows Server에서 실행할 때 수행되는 스키마 업데이트adprep /forestprep를 이해하고 준비할 수 있습니다.
Windows Server 2012부터 Adprep 명령은 AD DS 설치 중에 필요에 따라 자동으로 실행됩니다. 또한 AD DS 설치 전에 별도로 실행할 수도 있습니다. 자세한 내용은 Adprep.exe 실행을 참조하세요.
Important
포리스트 전체 스키마 업데이트는 adprep에 의해 누적적으로 수행됩니다. 예를 들어 작업 131 - 135는 작업 136 - 142 전에 수행됩니다.
ACE(액세스 제어 항목) 문자열을 해석하는 방법에 대한 자세한 내용은 ACE 문자열을 참조 하세요. SID(보안 ID) 문자열을 해석하는 방법에 대한 자세한 내용은 SID 문자열을 참조 하세요.
Windows Server 2016: 포리스트 전체 업데이트
/forestprepWindows Server 2016의 스위치에서 작업을 수행한 후(작업 136-142) CN=ActiveDirectoryUpdate,CN=ForestUpdates,CN=Configuration,DC=ForestRootDomain 개체에 대한 수정 특성이 16으로 설정됩니다.
| 작업 번호 및 GUID | 설명 | 특성 | 사용 권한 |
|---|---|---|---|
| 작업 136: {328092FB-16E7-4453-9AB8-7592DB56E9C4} | CN=Send-As,CN=Extended-Rights를 gMSA 계정에 부여 |
해당 없음 | 해당 없음 |
| 작업 137: {3A1C887F-DF0A-489F-B3F2-2D0409095F6E} | CN=Receive-As,CN=Extended-Rights를 gMSA 계정에 부여 |
해당 없음 | 해당 없음 |
| 작업 138: {232E831F-F988-4444-8E3E-8A352E2FD411} | CN=Personal-Information,CN=Extended-Rights를 gMSA 계정에 부여 |
해당 없음 | 해당 없음 |
| 작업 139: {DDDDCF0C-BEC9-4A5A-AE86-3CFE6CC6E110} | CN=Public-Information,CN=Extended-Rights를 gMSA 계정에 부여 |
해당 없음 | 해당 없음 |
| 작업 140: {A0A45AAC-5550-42DF-BB6A-3CC5C46B52F2} | CN=Validated-SPN,CN=Extended-Rights를 gMSA 계정에 부여 |
해당 없음 | 해당 없음 |
| 작업 141: {3E7645F3-3EA5-4567-B35A-876304449C70C} | CN=Allowed-To-Authenticate,CN=Extended-Rights를 gMSA 계정에 부여 |
해당 없음 | 해당 없음 |
| 작업 142: {E634067B-E2C4-4D79-B6E8-73C619324D5E} | CN=MS-TS-GatewayAccess,CN=Extended-Rights를 gMSA 계정에 부여 |
해당 없음 | 해당 없음 |
Windows Server 2012 R2: 포리스트 전체 업데이트
/forestprepWindows Server 2012 R2의 스위치에서 작업을 수행한 후(작업 131-135) CN=ActiveDirectoryUpdate,CN=ForestUpdates,CN=Configuration,DC=ForestRootDomain 개체에 대한 수정 특성이 15으로 설정됩니다.
| 작업 번호 및 GUID | 설명 | 특성 | 사용 권한 |
|---|---|---|---|
| 작업 131: {b83818c1-01a6-4f39-91b7-a3bb581c3ae3} | 구성 파티션에 새 인증 정책 구성 컨테이너 개체 CN=AuthN Policy Configuration,CN=Services 를 만들었습니다. |
- objectClass: container- displayName: Authentication Policy Configuration- description: Contains configuration for authentication policy.- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 132: {bbbb9db0-4009-4368-8c40-6674e980d3c3} | 구성 파티션에 새 인증 정책 개체 CN=AuthN Policies,CN=AuthN Policy Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-AuthNPolicies- displayName: Authentication Policies- description: Contains authentication policy objects.- showInAdvancedViewOnly: True |
(A;;RPWPCRCCDCLCLOLORCWOWDSDDTDTSW;;;EA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU) |
| 작업 133: {f754861c-3692-4a7b-b2c2-d0fa28ed0b0b} | 구성 파티션에 새 인증 정책 사일로 개체 CN=AuthN Silos,CN=AuthN Policy Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-AuthNPolicySilos- displayName: Authentication Policy Silos- description: Contains authentication policy silo objects.- showInAdvancedViewOnly: True |
(A;;RPWPCRCCDCLCLOLORCWOWDSDDTDTSW;;;EA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU) |
| 작업 134: {d32f499f-3026-4af0-a5bd-13fe5a331bd2} | 구성 파티션에 새 인증 사일로 요구 유형 개체 CN=ad://ext/AuthenticationSilo,CN=Claim Types,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ClaimType- displayname: AuthenticationSilo- name: ad://ext/AuthenticationSilo- Enabled: True- msDS-ClaimIsValueSpaceRestricted: True- msDS-ClaimIsSingleValued: True- msDS-ClaimSourceType: Constructed- msDS-ClaimValueType: 3- msDS-ClaimTypeAppliesToClass: CN=User,CN=Schema,%ws- msDS-ClaimTypeAppliesToClass: CN=Computer,CN=Schema,%ws- msDS-ClaimTypeAppliesToClass: CN=ms-DS-Managed-Service-Account,CN=Schema,%ws- msDS-ClaimTypeAppliesToClass: CN=ms-DS-Group-Managed-Service-Account,CN=Schema,%ws |
(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;EA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU) |
| 작업 135: {38618886-98ee-4e42-8cf1-d9a2cd9edf8b} | msDS-ClaimIsValueSpaceRestricted 새 인증 사일로 클레임 형식의 특성을 false로 설정 |
- msDS-ClaimIsValueSpaceRestricted: False |
해당 없음 |
Windows Server 2012: 포리스트 전체 업데이트
/forestprepWindows Server 2016의 스위치에서 작업을 수행한 후(작업 84-130) CN=ActiveDirectoryUpdate,CN=ForestUpdates,CN=Configuration,DC=ForestRootDomain 개체에 대한 수정 특성이 11으로 설정됩니다.
| 작업 번호 및 GUID | 설명 | 특성 | 사용 권한 |
|---|---|---|---|
| 작업 84: {4664e973-cb20-4def-b3d5-559d6fe123e0} | 구성 파티션에 새 컨테이너 CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: container |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 85: {2972d92d-a07a-44ac-9cb0-bf243356f345} | 구성 파티션에 새 개체 CN=Claim Types,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ClaimTypes- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 86: {09a49cb3-6c54-4b83-ab20-8370838ba149} | 구성 파티션에 새 개체 CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperties- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 87: {77283e65-ce02-4dc3-8c1e-bf99b22527c2} | 구성 파티션에 새 컨테이너 CN=Resource Property Lists,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: container- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 88: {0afb7f53-96bd-404b-a659-89e65c269420} | 스키마 파티션에 새 개체 CN=Sam-Domain 를 만들었습니다. |
해당 없음 | 개체의 사용자 자체에 Write 속성을 부여하기 위해 다음 ACE(액세스 제어 항목)를 만들었습니다.
|
| 작업 89: {c7f717ef-fdbe-4b4b-8dfc-fa8b839fbcfa} | 스키마 파티션에 새 개체 CN=Domain-DNS 를 만들었습니다. |
해당 없음 | 개체의 사용자 자체에 Write 속성을 부여하기 위해 다음 ACE(액세스 제어 항목)를 만들었습니다.
|
| 작업 90: {00232167-f3a4-43c6-b503-9acb7a81b01c} | 콜백 함수를 사용하여 표시 지정자를 업그레이드합니다. | 해당 없음 | 해당 없음 |
| 작업 91: {73a9515b-511c-44d2-822b-444a33d3bd33} | 구성 파티션에 새 컨테이너 CN=Microsoft SPP,CN=Services 를 만들었습니다. |
- objectClass: container- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 92: {e0c60003-2ed7-4fd3-8659-7655a7e79397} | 구성 파티션에 새 활성화 개체 컨테이너 CN=Activation Objects,CN=Microsoft SPP,CN=Services 를 만들었습니다. |
- objectClass: msSPP-ActivationObjectsContainer- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 93: {ed0c8cca-80ab-4b6b-ac5a-59b1d317e11f} | 구성 파티션에 새 중앙 액세스 정책 컨테이너 CN=Central Access Policies,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msAuthz-CentralAccessPolicies- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 94: {b6a6c19a-afc9-476b-8994-61f5b14b3f05} | 구성 파티션에 새 중앙 액세스 정책 진입 컨테이너 CN=Central Access Rules,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msAuthz-CentralAccessRules- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 95: {defc28cd-6cb6-4479-8bcb-aabfb41e9713} | 구성 파티션에 새 그룹 키 배포 서비스 컨테이너 CN=Group Key Distribution Service,CN=Services 를 만들었습니다. |
- objectClass: container- description: The container contains configuration and data for Group Key Distribution Service.- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 96: {d6bd96d4-e66b-4a38-9c6b-e976ff58c56d} | 구성 파티션에 새 마스터 루트 키 컨테이너 CN=Master Root Keys,CN=Group Key Distribution Service,CN=Services 를 만들었습니다. |
- objectClass: container- description: The container contains master root keys for Group Key Distribution Service.- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU;(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 97: {bb8efc40-3090-4fa2-8a3f-7cd1d380e695} | 구성 파티션에 새 서버 구성 컨테이너 CN=Server Configuration,CN=Group Key Distribution Service,CN=Services 를 만들었습니다. |
- objectClass: container- description: The container contains Group Key Distribution Service configurations.- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 98: {2d6abe1b-4326-489e-920c-76d5337d2dc5} | 구성 파티션에 새 빈 서버 구성 개체 컨테이너 CN=Group Key Distribution Service Server Configuration,CN=Server Configuration,CN=Group Key Distribution Service,CN=Services 를 만들었습니다. |
- objectClass: msKds-ProvServerConfiguration- description: The configuration of cryptography algorithms used by Group Key Distribution Service.- msKds-Version: 1- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 99: {6b13dfb5-cecc-4fb8-b28d-0505cea24175} | 구성 파티션에 새 클레임 변환 정책 구성 컨테이너 CN=Claims Transformation Policies,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ClaimsTransformationPolicies- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCDCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 100: {92e73422-c68b-46c9-b0d5-b55f9c741410} | 구성 파티션에 새 값 유형 구성 컨테이너 CN=Value Types,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: container- showInAdvancedViewOnly: True |
(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 101: {c0ad80b4-8e84-4cc4-9163-2f84649bcc42} | Configuration 파티션에 새 SinglevaluedChoice 값 형식 구성 개체 CN=MS-DS-SinglevaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ValueType- description: You can use this type to author a resource property. When assigning value to a resource property of this value type, a user can choose only one entry from a list of suggested values.- displayname: Single-valued Choice- msDS-ClaimValueType: 3- msDS-ClaimIsValueSpaceRestricted: True- msDS-ClaimIsSingleValued: True- msDS-IsPossibleValuesPresent: True- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 102: {992fe1d0-6591-4f24-a163-c820fcb7f308} | Configuration 파티션에 새 YesNo 값 형식 구성 개체 CN=MS-DS-YesNo,CN=Value Types,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ValueType- description: The valid values for this type are Yes or No.- displayname: Yes/No- msDS-ClaimValueType: 6- msDS-ClaimIsValueSpaceRestricted: False- msDS-ClaimIsSingleValued: True- msDS-IsPossibleValuesPresent: False- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 103: {ede85f96-7061-47bf-b11b-0c0d999595b5} | Configuration 파티션에 새 Number 값 형식 구성 개체 CN=MS-DS-Number,CN=Value Types,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ValueType- description: You can use this type to author resource properties that contain a single number.- displayname: Number- msDS-ClaimValueType: 1- msDS-ClaimIsValueSpaceRestricted: False- msDS-ClaimIsSingleValued: True- msDS-IsPossibleValuesPresent: False- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 104: {ee0f3271-eb51-414a-bdac-8f9ba6397a39} | Configuration 파티션에 새 DateTime 값 형식 구성 개체 CN=MS-DS-DateTime,CN=Value Types,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ValueType - description: You can use this type to author resource properties that are of the date and time format.- displayname: Date Time- msDS-ClaimValueType: 1- msDS-ClaimIsValueSpaceRestricted: False- msDS-ClaimIsSingleValued: True- msDS-IsPossibleValuesPresent: False- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 105: {587d52e0-507e-440e-9d67-e6129f33bb68} | Configuration 파티션에 새 OrderedList 값 형식 구성 개체 CN=MS-DS-OrderedList,CN=Value Types,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ValueType- description: You can use this type to author resource properties that contain a single choice entry that can be compared to other resource properties of the same type. A user typically chooses the entry from a list of ordered suggested values that are provided by ms-DS-Claim-Possible-Values on the resource properties.- displayname: Ordered List- msDS-ClaimValueType: 1- msDS-ClaimIsValueSpaceRestricted: True- msDS-ClaimIsSingleValued: True- msDS-IsPossibleValuesPresent: True- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 106: {ce24f0f6-237e-43d6-ac04-1e918ab04aac} | Configuration 파티션에 새 Text 값 형식 구성 개체 CN=MS-DS-Text,CN=Value Types,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ValueType- description: You can use this type to author resource properties that contain a single text entry.- displayname: Text- msDS-ClaimValueType: 3- msDS-ClaimIsValueSpaceRestricted: False- msDS-ClaimIsSingleValued: True- msDS-IsPossibleValuesPresent: False- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 107: {7f77d431-dd6a-434f-ae4d-ce82928e498f} | Configuration 파티션에 새 MultivaluedText 값 형식 구성 개체 CN=MS-DS-MultivaluedText,CN=Value Types,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ValueType- description: You can use this type to author resource properties that can have multiple text entries.- displayname: Multi-valued Text<br />- msDS-ClaimValueType: 3<br />- msDS-ClaimIsValueSpaceRestricted: False<br />- msDS-ClaimIsSingleValued: False<br />- msDS-IsPossibleValuesPresent: False<br />- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 108: {ba14e1f6-7cd1-4739-804f-57d0ea74edf4} | Configuration 파티션에 새 MultivaluedChoice 값 형식 구성 개체 CN=MS-DS-MultivaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ValueType- description: You can use this type to author resource properties that can have multiple entries that can't be compared. A user typically chooses each entry from a list of suggested values that are provided by ms-DS-Claim-Possible-Values on the resource properties.- displayname: Multi-valued Choice- msDS-ClaimValueType: 3- msDS-ClaimIsValueSpaceRestricted: True- msDS-ClaimIsSingleValued: False- msDS-IsPossibleValuesPresent: True- showInAdvancedViewOnly: True |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 109: {156ffa2a-e07c-46fb-a5c4-fbd84a4e5cce} | 구성 파티션에서 새 개인 식별 정보 리소스 속성 개체 CN=PII_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Personally Identifiable Information (PII) property specifies whether the resource contains PII and if it does, what the sensitivity level of that information is.- displayname: Personally Identifiable Information- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-OrderedList,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 110: {7771d7dd-2231-4470-aa74-84a6f56fc3b6} | 구성 파티션에서 새 보호된 건강 정보 리소스 속성 개체 CN=ProtectedHealthInformation_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Protected Health Information (PHI) property specifies whether the resource contains any data related to an individual's medical record or medical payment history.- displayname: Protected Health Information- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-YesNo,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 111: {49b2ae86-839a-4ea0-81fe-9171c1b98e83} | 구성 파티션에 새 Required Clearance 리소스 속성 개체 CN=RequiredClearance_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Required Clearance property specifies the level of clearance a user should possess before attempting to access the resource.- displayname: Required Clearance- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-OrderedList,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 112: {1b1de989-57ec-4e96-b933-8279a8119da4} | Configuration 파티션에 새 Confidentiality 리소스 속성 개체 CN=Confidentiality_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Confidentiality property specifies the level of confidentiality of the resource, and the potential impact of inadvertent access or disclosure.- displayname: Confidentiality- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-OrderedList,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 113: {281c63f0-2c9a-4cce-9256-a238c23c0db9} | Configuration 파티션에 새 Compliancy 리소스 속성 개체 CN=Compliancy_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Compliancy property specifies the compliance frameworks that apply to the resource.- displayname: Compliancy- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-MultivaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 114: {4c47881a-f15a-4f6c-9f49-2742f7a11f4b} | Configuration 파티션에 새 Discoverability 리소스 속성 개체 CN=Discoverability_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Discoverability property specifies whether the resource contains potential evidence that might require disclosure to opposing legal counsel during the course of current or future litigation.- displayname: Discoverability- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-SinglevaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 115: {2aea2dc6-d1d3-4f0c-9994-66c1da21de0f} | Configuration 파티션에 새 Immutable 리소스 속성 개체 CN=Immutable_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Immutable property specifies whether a user should be allowed to delete a resource or change its contents.- displayname: Immutable- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-YesNo,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 116: {ae78240c-43b9-499e-ae65-2b6e0f0e202a} | Configuration 파티션에 새 지적 재산권 리소스 속성 개체 CN=IntellectualProperty_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Intellectual Property (IP) property specifies whether the resource contains IP, and if so, what kind.- displayname: Intellectual Property- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-SinglevaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 117: {261b5bba-3438-4d5c-a3e9-7b871e5f57f0} | Configuration 파티션에 새 Department 리소스 속성 개체 CN=Department_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Department property specifies the name of the department to which the resource belongs.- displayname: Department- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-SinglevaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 118: {3fb79c05-8ea1-438c-8c7a-81f213aa61c2} | Configuration 파티션에 새 Impact 리소스 속성 개체 CN=Impact_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Impact property specifies the degree of organizational impact from inappropriate access or loss of the resource.- displayname: Impact- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-OrderedList,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain- msDS-ClaimPossibleValues: High - High business impact (HBI) - 3000, Moderate - Medium business impact (MBI) - 2000, Low - Low business impact (LBI) - 1000> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 119: {0b2be39a-d463-4c23-8290-32186759d3b1} | Configuration 파티션에 새 Personal Use 리소스 속성 개체 CN=PersonalUse_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Personal Use property specifies whether the file is for personal use (not business related).- displayname: Personal Use- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-YesNo,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 120: {f0842b44-bc03-46a1-a860-006e8527fccd} | Configuration 파티션에 새 Project 리소스 속성 개체 CN=Project_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Project property specifies the names of one or more projects that are relevant to the resource.- displayname: Project- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-MultivaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 121: {93efec15-4dd9-4850-bc86-a1f2c8e2ebb9} | 구성 파티션에 새 보존 기간 리소스 속성 개체 CN=RetentionPeriod_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Retention Period property specifies the maximum period for which the file should be retained.- displayname: Retention Period- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-SinglevaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 122: {9e108d96-672f-40f0-b6bd-69ee1f0b7ac4} | 구성 파티션에 새 보존 Start Date 리소스 속성 개체 CN=RetentionStartDate_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Retention Start Date property defines the starting date for a Retention Period. The retention period would begin on the Retention Start Date.- displayname: Retention Start Date- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: False- msDS-ValueTypeReference: CN=MS-DS-DateTime,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 123: {1e269508-f862-4c4a-b01f-420d26c4ff8c} | Configuration 파티션에 새 Company 리소스 속성 개체 CN=Company_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Company property specifies which company the resource belongs to.- displayname: Company- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: True- msDS-ValueTypeReference: CN=MS-DS-SinglevaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 125: {e1ab17ed-5efb-4691-ad2d-0424592c5755} 참고: 작업 124가 삭제되었습니다. | Configuration 파티션에 새 Folder Usage 리소스 속성 개체 CN=FolderUsage_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourceProperty- description: The Folder Usage property specifies the purpose of the folder and the kind of files stored in it.- displayname: Folder Usage- Enabled: False- msDS-IsUsedAsResourceSecurityAttribute: False- msDS-AppliestoResourceTypes: MS-DS-Container- msDS-ValueTypeReference: CN=MS-DS-MultivaluedChoice,CN=Value Types,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 126: {0e848bd4-7c70-48f2-b8fc-00fbaa82e360} | 구성 파티션에 새 전역 리소스 속성 목록 구성 개체 CN=Global Resource Property List,CN=Resource Property Lists,CN=Claims Configuration,CN=Services 를 만들었습니다. |
- objectClass: msDS-ResourcePropertyList- description: This is a global out of box resource property list that contains all resource properties that can be consumed by applications.- showInAdvancedViewOnly: True- msDS-MembersOfResourcePropertyList: CN=PII_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=ProtectedHealthInformation_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=RequiredClearance_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Confidentiality_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Compliancy_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Discoverability_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Immutable_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=IntellectualProperty_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Department_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Impact_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=PersonalUse_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Project_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=RetentionPeriod_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=RetentionStartDate_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=Company_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain>- msDS-MembersOfResourcePropertyList: CN=FolderUsage_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services,CN=Configuration,CN=\<forest root domain> |
(D;;SDDT;;;WD)(A;;RPLCLORC;;;AU)(A;;RPWPCRLCLOCCRCWDWOSW;;;EA)(A;;RPWPCRLCLOCCDCRCWDWOSDDTSW;;;SY) |
| 작업 127: {016f23f7-077d-41fa-a356-de7cfdb01797} | 콜백 함수를 사용하여 표시 지정자를 업그레이드합니다. | 해당 없음 | 해당 없음 |
| 작업 128: {49c140db-2de3-44c2-a99a-bab2e6d2ba81} | 구성 파티션에서 폴더 사용량 리소스 속성 개체 CN=FolderUsage_MS,CN=Resource Properties,CN=Claims Configuration,CN=Services 에 대한 문자열이 업데이트되었습니다. |
- description: The Folder Usage property specifies the purpose of the folder and the kind of files stored in it. |
해당 없음 |
| 작업 129: {e0b11c80-62c5-47f7-ad0d-3734a71b8312} | CN=Sam-Domain 개체에 대한 보안 주체 자체 쓰기 속성 및 읽기 속성을 부여하는 ACE가 추가되었습니다. |
해당 없음 | (OA;CIOI;RPWP;3f78c3e5-f79a-46bd-a0b8-9d18116ddc79;;PS) |
| 작업 130: {2ada1a2d-b02f-4731-b4fe-59f955e24f71} | CN=Domain-DNS 개체에 대한 보안 주체 자체 쓰기 속성 및 읽기 속성을 부여하는 ACE가 추가되었습니다. |
해당 없음 | (OA;CIOI;RPWP;3f78c3e5-f79a-46bd-a0b8-9d18116ddc79;;PS) |