📄 8-1.htm
字号:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>存储文件、打印机、应用服务等等</span><span
lang=EN-US>) </span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>。在这种多域计算环境中,资源域需要具有所有主域的多委托关系。这些委托关系允许主域中的用户访问资源域中的资源。</span></span></p>
<h4><span style='mso-bookmark:_Toc16587483'><a name="_4._文件系统的安全性"></a><span
lang=EN-US><span style='mso-spacerun:yes'> </span>4. 文件系统的安全性</span></span></h4>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
lang=EN-US>Windows</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>推荐使用的</span><span lang=EN-US>NTFS</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>文件系统提供了</span><span
lang=EN-US>FAT</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>和</span><span lang=EN-US>FAT32</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>文件系统所没有的全面的性能、可靠性和兼容性。</span><span
lang=EN-US>NTFS</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>文件系统的设计目标就是能够在很大的硬盘上很快地执行诸如读、写和搜索这样的标准文件操作,甚至包括像文件系统恢复这样的高级操作。</span><span
lang=EN-US>NTFS</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>文件系统包括了公司环境中文件服务器和高端个人计算机所需的安全特性,它还支持对于关键数据完整性的数据访问控制和私有权限。除了可以赋予</span><span
lang=EN-US> Windows</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>计算机中的共享文件夹特定权限外,</span><span lang=EN-US>NTFS</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>文件和文件夹无论共享与否都可以赋予权限。</span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>在</span><span lang=EN-US>NTFS</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>卷中设置权限就是指定一个组或用户对该目录的访问许可。设置目录权限时,对已有的子目录和文件除非特别指定,否则是不会更改其权限的。生成新的子目录和文件时,它们就从目录中继承了新设置的权限。</span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>与目录权限类似,在</span><span lang=EN-US>NTFS</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>卷中设置文件权限就是指定组或用户对该文件的访问许可。在目录中创建一个文件时,该文件也从目录中继承了这种权限。需要注意的是,赋予了对一个目录的“完全控制”权限的组或用户可以删除该目录中的文件,而无论该文件有何保护权限。</span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>通过设置目录和文件权限,用户就可以保护自己的文件和目录,也可以通过设置</span><span lang=EN-US>NTFS</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>卷中的文件和目录的特殊访问权限来加强对自己的文件和目录的保护。特殊访问权限可以对目录、所选目录的所有文件或选定文件有效。</span></span></p>
<h4><span style='mso-bookmark:_Toc16587483'><a name="_5._IP安全性管理"></a><span
lang=EN-US><span style='mso-spacerun:yes'> </span>5. IP安全性管理</span></span></h4>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>在</span><span lang=EN-US> Windows</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>中使用了</span><span
lang=EN-US>Internet</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>安全协议,即通常所说的</span><span lang=EN-US> IP</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>安全性,简称为</span><span
lang=EN-US> IP SEC</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>,它能够定义与网络通信相联系的安全策略。</span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
lang=EN-US>IP</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>安全性可以自动对进出该系统的</span><span lang=EN-US>IP</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>网络包进行加密或解密。从而,可以防止通信内容被窃取。另外在</span><span
lang=EN-US>IP</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>网络中安装</span><span lang=EN-US>IP</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>安全性时,与所送的</span><span
lang=EN-US>TCP/IP</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>包的类型和</span><span lang=EN-US>TCP/IP</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>端口一样,既可以使其覆盖所有的机器,也可以只覆盖一部分机器。</span></span><a
href="#_top"><span style='mso-bookmark:_Toc16587483'><span lang=EN-US
style='text-decoration:none;text-underline:none'><!--[if gte vml 1]><v:shape
id="_x0000_i1025" type="#_x0000_t75" style='width:45pt;height:17.25pt'>
<v:imagedata src="8-1.files/image003.gif" o:title="02"/>
</v:shape><![endif]--><![if !vml]><img border=0 width=60 height=23
src="8-1.files/image003.gif" v:shapes="_x0000_i1025"><![endif]></span></span><span
style='mso-bookmark:_Toc16587483'></span></a><span style='mso-bookmark:_Toc16587483'></span></p>
<h3><span style='mso-bookmark:_Toc16587483'><a name="_Toc36437028"></a><a
name="_Toc37858997"></a><a name="_Toc45739237"></a><a name="_实验目的"></a><span
style='mso-bookmark:_Toc36437028'><span style='mso-bookmark:_Toc37858997'><span
style='mso-bookmark:_Toc45739237'>实验目的</span></span></span></span></h3>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
lang=EN-US>1) </span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>通过本实验,了解和熟悉</span><span lang=EN-US>Windows</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>的网络安全特性和</span><span
lang=EN-US>Windows</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>提供的安全措施;</span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
lang=EN-US>2) </span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>学习和掌握</span><span lang=EN-US>Windows</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>安全特性的设置方法。</span></span><a
href="#_top"><span style='mso-bookmark:_Toc16587483'><span lang=EN-US
style='text-decoration:none;text-underline:none'><!--[if gte vml 1]><v:shape
id="_x0000_i1026" type="#_x0000_t75" style='width:45pt;height:17.25pt'>
<v:imagedata src="8-1.files/image003.gif" o:title="02"/>
</v:shape><![endif]--><![if !vml]><img border=0 width=60 height=23
src="8-1.files/image003.gif" v:shapes="_x0000_i1026"><![endif]></span></span><span
style='mso-bookmark:_Toc16587483'></span></a><span style='mso-bookmark:_Toc16587483'></span></p>
<h3><span style='mso-bookmark:_Toc16587483'><a name="_Toc36437029"></a><a
name="_Toc37858998"></a><a name="_Toc45739238"></a><a name="_工具/准备工作"></a><span
style='mso-bookmark:_Toc36437029'><span style='mso-bookmark:_Toc37858998'><span
style='mso-bookmark:_Toc45739238'>工具<span lang=EN-US>/准备工作</span></span></span></span></span></h3>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>在开始本实验之前,请回顾教科书的相关内容和认真阅读本实验的“背景知识”部分。</span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>需要准备一台运行</span><span lang=EN-US>Windows 2000 Professional</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>操作系统的计算机。</span></span><a
href="#_top"><span style='mso-bookmark:_Toc16587483'><span lang=EN-US
style='text-decoration:none;text-underline:none'><!--[if gte vml 1]><v:shape
id="_x0000_i1027" type="#_x0000_t75" style='width:45pt;height:17.25pt'>
<v:imagedata src="8-1.files/image003.gif" o:title="02"/>
</v:shape><![endif]--><![if !vml]><img border=0 width=60 height=23
src="8-1.files/image003.gif" v:shapes="_x0000_i1027"><![endif]></span></span><span
style='mso-bookmark:_Toc16587483'></span></a><span style='mso-bookmark:_Toc16587483'></span></p>
<h3><span style='mso-bookmark:_Toc16587483'><a name="_Toc36437030"></a><a
name="_Toc37858999"></a><a name="_Toc45739239"></a><a name="_实验内容与步骤"></a><span
style='mso-bookmark:_Toc36437030'><span style='mso-bookmark:_Toc37858999'><span
style='mso-bookmark:_Toc45739239'>实验内容与步骤</span></span></span></span></h3>
<p class=MsoNormal><span style='mso-bookmark:_Toc16587483'><span lang=EN-US><o:p> </o:p></span></span></p>
<p class=MsoNormal><span style='mso-bookmark:_Toc16587483'></span><a
href="#_1._设置安全区域"><span style='mso-bookmark:_Toc16587483'><span lang=EN-US>1. </span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>设置安全区域</span></span><span
style='mso-bookmark:_Toc16587483'></span></a><span style='mso-bookmark:_Toc16587483'></span></p>
<p class=MsoNormal><span style='mso-bookmark:_Toc16587483'></span><a
href="#_2._设置“证书”"><span style='mso-bookmark:_Toc16587483'><span lang=EN-US>2. </span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>设置“证书”</span></span><span
style='mso-bookmark:_Toc16587483'></span></a><span style='mso-bookmark:_Toc16587483'></span></p>
<p class=MsoNormal><span style='mso-bookmark:_Toc16587483'></span><a
href="#_3._“高级”安全设置"><span style='mso-bookmark:_Toc16587483'><span lang=EN-US>3.
</span></span><span style='mso-bookmark:_Toc16587483'><span style='font-family:
宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:"Times New Roman"'>“高级”安全设置</span></span><span
style='mso-bookmark:_Toc16587483'></span></a><span style='mso-bookmark:_Toc16587483'></span></p>
<p class=MsoNormal><span style='mso-bookmark:_Toc16587483'></span><a
href="#_4._设定目录权限"><span style='mso-bookmark:_Toc16587483'><span lang=EN-US>4. </span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>设定目录权限</span></span><span
style='mso-bookmark:_Toc16587483'></span></a><span style='mso-bookmark:_Toc16587483'></span></p>
<p class=MsoNormal><span style='mso-bookmark:_Toc16587483'></span><a
href="#_5._获得文件和目录的所有权"><span style='mso-bookmark:_Toc16587483'><span
lang=EN-US>5. </span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>获得文件和目录的所有权</span></span><span style='mso-bookmark:_Toc16587483'></span></a><span
style='mso-bookmark:_Toc16587483'></span></p>
<p class=MsoNormal><span style='mso-bookmark:_Toc16587483'><span lang=EN-US><o:p> </o:p></span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>本次实验机器环境安装的操作系统是:</span><span lang=EN-US>___________________________________</span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>在“</span><span lang=EN-US>Windows</span></span><span
style='mso-bookmark:_Toc16587483'><span style='font-family:宋体;mso-ascii-font-family:
"Times New Roman";mso-hansi-font-family:"Times New Roman"'>资源管理器”中,右键单击机器中各个硬盘标志,选择“属性”命令,在“常规”选项卡中分别了解各个硬盘设置的“文件系统”:</span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
lang=EN-US>C</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>盘:</span><span lang=EN-US>_______________________________________________________________<o:p></o:p></span></span></p>
<p class=MsoNormal style='text-indent:21.0pt;mso-char-indent-count:2.0;
mso-char-indent-size:10.5pt'><span style='mso-bookmark:_Toc16587483'><span
lang=EN-US>D</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>盘:</span><span lang=EN-US>_______________________________________________________________</span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
lang=EN-US>E</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>盘:</span><span lang=EN-US>_______________________________________________________________</span></span></p>
<p class=MsoNormal style='text-indent:21.0pt'><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>通过复习教科书和阅读本实验的“背景知识”,请回答:</span><span lang=EN-US>Windows
2000</span></span><span style='mso-bookmark:_Toc16587483'><span
style='font-family:宋体;mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:
"Times New Roman"'>的安全机制包括哪几个方面?</span></span></p>
<p class=MsoNormal align=center style='text-align:center'><span
style='mso-bookmark:_Toc16587483'><span lang=EN-US><span
style='mso-spacerun:yes'> </span>____________________________________________________________________</span></span></p>
<p class=MsoNormal align=center style='text-align:center'><span
style='mso-bookmark:_Toc16587483'><span lang=EN-US>________________________________________________________________________</span></span></p>
<p class=MsoNormal align=center style='text-align:center'><span
style='mso-bookmark:_Toc16587483'><span
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -