active-directory – “爆炸帐户”一词的起源和/或标准是什么？

发布时间：2020-12-13 23:31:20 所属栏目：Windows 来源：网络整理

导读：我一直在公司听到“爆炸帐户”,并通过上下文将其视为具有提升权限的帐户. 我相信Active Directory帐户的情况尤其如此,但我可以在互联网上找到非常非常少的“爆炸帐户”,“爆炸帐户”或该术语的变体. 我唯一的“爆炸”上下文是shell脚本“hash bang bin bash

我一直在公司听到“爆炸帐户”,并通过上下文将其视为具有提升权限的帐户.

我相信Active Directory帐户的情况尤其如此,但我可以在互联网上找到非常非常少的“爆炸帐户”,“爆炸帐户”或该术语的变体.

我唯一的“爆炸”上下文是shell脚本“hash bang bin bash”的开头,例如：#！/ bin / bash.我想在某些方面！可能是“提升”帐户的简写.

任何人都可以告诉我,如果我是对的,它来自哪里(当然它有一些词源意义),如果它实际上只是AD的范围？

谷歌-FU

……它似乎是学术命名水平上的东西

还有一些其他如：

http://tech.its.iastate.edu/win2000/admin/WinAdmin.2010.07.09.pdf

http://www.eng.uwaterloo.ca/~erick/nexus/useridconventions.html

Sometimes users are given ‘elevated’ privileges,which might be the
ability to change passwords for a group of users,or the ability to
administer certain machines.

In the case of a research group,the elevated privileges might be
finely tuned permissions to just perform the actions needed on
particular userids and/or computers.

In the case of a departmental or faculty computing office resource
person,the elevated privilege would have access to the entire portion
of the active directory tree that is co-managed by that individual.

These are referred to as BANG accounts,and they take the format of
exclamation mark followed by uwuserid. E.g.. !jblow,!j2smith.

Beginning with Windows 2000,the most effective way to elevate a
user’s capabilities is to leverage permissions of the active
directory. We can fine tune the permissions to entirely (but not
excessively) cover the actions this elevated user is expected to
perform.

The NT 4 style of elevation is to add the user to the local
administrators’ group,but with Active Directory it is easier to group
the stations in to an OU and assign the privilege at the OU level.

在这里：http://micronet-at-uc-berkeley.840177.n3.nabble.com/Micronet-bang-account-on-AD-not-behaving-td1748226.html

（编辑：李大同）

【声明】本站内容均来自网络，其相关言论仅代表作者个人观点，不代表本站立场。若无意侵犯到您的权利，请及时与联系站长删除相关内容!