BKJlIO'lHTh rnm OTKJIIO'lIITb \oV'F; AOCT)'IlHO Bcero ABa CTaTIlqet· KHxnpo~HJUJ:,ltOMeHHhlH It craHtlapTHhfJ'1) Ii orpaHltqeH B lVIaHe
¢YHKL\HOHaJIbHocrn (HanpHMep, y?-leeT tPlUlbTpOBBTbnHWb BXO MuulliTpa¢flK). Visrn nOJl)"UlIlB 06HoBJleHHbIH WF, CTaBWH'I'i Ojl;HHM"3 KOMnOHeHTOB "UeHTpa 06ecneqeHllJl6e30nacHOCTH
Chaos,," W'1e:l to be '1otified about ("langes to your computer
Windows». K rnaBl-(b(M eroocOOeHHoCTRM CTOliTOTHecTlI: B03
U..=.", ':",euT_~,!'..e.Ib!~!.~~.n.!£~~-':'.~!!:Lh~m/,,1
MO>KHOCTb ¢H.Jlb'rpaIl,HH Hc.xo,llluueroTpacPHKa, cnoc06HoCTb Bbl
1t.11 mt nlN' lPn!t U,,, ,",ccc<m1 Centrel ,,:tIn~
~'COJ"ml /'cm m.ting ch.ngel tc ycu' 'c~
ffRlliITb He.KOTOpble THnbf CeTeBblX aTaK, 06ecneqeHHe KOHTpoM
.n;ocryna IlporpaMM BceTb, nOMep}J{J{a fPv6u IPsec, AaCTpoHKa Dehult· Notify me only when p'''9",m. try to moke changcs to my computer
napaMeTpoB qepe306beKThl rpynnoBoH nQnHTHKH Group Policy
Object (GPO)_WF B VlSla nOJl}"lHJI TPH,n;JfHaMH'lecKJ1X npocPWUl
~cn't
-CJ-
Hacrpoex (domain, private, public), KOTophIe MO:>KHO npHBlt
notify me ,·.htn I mll:e .;h,ng" Ie
W;~rlel".<
lltti~g.
3b1BaTb KmITeP4>eHcaM. OP" nop;KJUOqeHHH KcerH O1CTeMa H,AeHTIIIl>HQHpyeT::rry cen. H npHMemleT HaH6on:ee llOAX-OMlUHH npoclmnb. fum B CeTII. 06Hap)')KeH K0Hl'p0JUlep ;:J;OMeHa, yCTB
if)
HaBJUI.SaeTCJl domain, a caMblM 3arn;HIJJ:eHHbIMJlB.WIeTCH public.
Re"mmtnded ifyeu "II r.mili., I"eg,om, 'nd ";'~ hmili.,w"b.~e•.
t.£T06bl OpH noc.;leAYJOrn;eM nO,ll;lUllO'leHlfH K ceTH 6bUI ycraHOB JIeH TOT)!(e OPOcPWlb, B CHCTellfe 3anyrn;eHa cneU;HaJlbHaH CJI)')K6a NerworkLocation Awareness ~1.A), coxpaIDIlOIIJ;a51 HHcP0pMa
B H8CTpoiiK8X UAC -
4eTbipe ypOBH~ peaK~1'I1'I
U;mo 0 CeTH B cEoeR 6a:>eP;amililX.. B BHCTeeA1'!HCI'BeHHOe (HOOqeHhHenplliITHOe) orpaHWIeHHe CHff3aHO CTeM, 'fto B e;:J;HHJm;y BpeMeHH Mo»<eT 6bITb aKTHBeH TOJlbKO O)l;HH npocPHJIb. ECJlJI KOMlIhlOTep nO,[J;J01JOlJeH cpa3YK
KIDi\AOM 3anyOl:e. Mexa.Jrn3M ;:J;OCTaTO\ffiO rrpocr H 131'0 >Ke 13peMJ1
HeCKOJIbKHM ceTffM, npHMeHffeTI:R HaIi60nee OrpaHWIHBaIO~HH
3<fxt>eKTIIBeH, HO liMeHHO pa60Ta UACBbl3b1BatLa II Bhl3bfBaer
npoq,I1Jlb. 3To '-laCTO Bbl3bIDaeT np06neMbJ c nOjl;JUTIOqeHHeM.
mrn6o.n.bwee pa3APa>KeHHe y nOJ[b3()BaTe1IeH Vista Cl30Hlvni noc
BHeWHe H3CTP0I1KH WF B Windows 7 He H3MemUHlCb, Ho'rerreph
T01'IHHbIMH 3anpocaMH BO 6per.uJ ycraHOBKH. HoaOH nporpaMMbl
MO~T 6bITb aKTHBHO HeCKOJIbKO npocPlliIeH. B HacrpoHKax
Ii rIpH 3anycKe HCIlOJl.HJlCMOro <PaJ1na. HacrpoJ1la.1
llIClUnOHOB Private H Public nOJIb30BaTeJIb MOIKeT3aUnoKHpOBaTb
VlStaon:yrcrByJOTKaKKrlacc,MO)KHOnHWbBKJIIO'IIITb!Q'11(.nfO'-lHTb
pa60Tht UAC B t>
info
Bee BXO,1VJlll,He Coe,lU1HeHMJI AlUl nporpaMM, HeBKllTOqeHHhlXB
Ii 3acraBJ.1Tb a.tJ;MHHa Ka)K,ltbfR pa3 BBQDJITb napom..D,llSI nOJJ;
• nO,o,po6Hee 0 WAlK
CfIHCOK pa.3peweHHblX (Blockall incoming connections, including
TBep)f(Jl;eHliJ1 Cl30HX nQ/lHO:\lO·nrn. B Unix KTaKOr.ry npHBhlIOIn, HO
YHT8~ B CT3Tbe «CJ~
Moc6opHbie OKHa» B
those in the list ofallowed programs), -o6ecneqHBaH MaKCH
n0Jlb30BaTellb Windows eee-Talal H36a!!OBaH. nOOTOMynepnoe,
MMbH)'lO 3a~l1TY.,aono,lHH1tilhHO MO>KHO ITOJJyqa'Th yee.n;Oi\f.ile
'ITO jl;e.naeT lO3ep cpa3Ynoc.ne ycraHOBKH Vista, -
HlHl rrpH nonbITKe HOBOU nporpaMMbll3blWrH B HHTePH{~T (Notify
3.D,ecb r.to>KHOn0peKoMeH.II.OBal1>yIlfJu-nylWeakUAC lwww.
OTlOllOqaerUAC.
~HBapcKoM
HOMepe
:x: 3<1 2009 ro.a.
me when Windows Firewall blocks a ne\v program). TaJOKenerKO
tweak
OTKJlIOlmTh WF AJUlOnpe,1\eJIeHHoro flPO~HJIlt. ~eo;:J;HoYlJ;06e
UAC, n03BUllHeTnepeaeCTH ero B <<TIOOIH» pe/ICHM. B 3TOM C/l)"1ae
mo cn~aHOe H3CT]>oMKaMYf. Pa Hee Bee 1!f3MeHeHMll coxpaHHJ1l'fo,
UACBlODO'IeH,H03anpoo,fn06o.nbwHHcmYHe3Ha'-flfl'eJIbHb[X
~lJ1l'1 Windows
B aKTIfBHOM npocpl1JIe, H npH npHMeHeHIIHtI,pyroro nJXXl>HJl1I.
napaMeTpOBHe 6ylIYTBblB0N'fThOl HlIoca:>KJJ:aTb nOnb30BaTeJllO.
Microsoft nOJly4l'1na
IlX rrpKXO,tJ;'HJJOCb n08TOpl'lTb. Tenepl.> MO>KHO 3a.n;aTb OPO~flJlH,
Pa3pa6oT'lHKH npHc.nyrn.aJlHCb K MHeHHTO nOJIb30BaTeneH, H S
60nee
tvUl K01'OpblX npoH3BO,D,H1UI H3MeHeHlIe. B Vi~ta, 'IT06hl33,1.laTb
Windows 7nommnoa, '1eTblpenapHaHTa Hacrpoel< UAC OHM lIB
paU~OHaJll'l3aTOpC~
Kl'IX npeAJ10>KeHl'I~ aT
tl<lc.com), Km'Opal'ITIOMUMOOTIUfJO'-feHHJ1 H f3KJUoqeHW'! • nocne ny6f1ltlKa~
7 Beta
nonYMl'Innl'loH8
HeCKonbKO nopTOB, HX Heo6XQAHMO 6b1JlO nepe'-lHCJll'ITh '-fepe3
XO,lVllUl B«Control Panel- System and Security-Change User
3BTUll)'IO; B 'fOBOi-i BepoUl Mo»<t!0}'l(a3b1n3TbAManmoH.
Account Controlsetting:o>: • Alwaysnoruy-3anpOCDblLl:aeTOl D
non b30BaTe}1e~~TeC
KpoMe TOro, (.:ropoHtll1e pa3pa60T'lHKH TIOJI}"iWUl 06H.OOJleH
JII060M CJI)"Iae (l<aKB Vista); • Default (ycTaHOBJleH no YMOJI'Ia~
Tepos co Bcero Ml'Ipa,
Hbl" API, n03BOnJ1fOIllHH nerKO 3a;J,eBcraoBaTh B03MO:>KHQCTH
HHro) -
WF 11JIH tl,06aBHTb CBOH epYlua.uu1.
cHcreMHble HacrpoAKll H3MewuoTOl nporpaMMHO; eCJJH me
• Ha6pas s none nOl-1c~
;:J;eikTBHe npoU3Bop;HT 3apemCTpHponaBWHHCH nonb30B8TeJ!b,
K8 MeHIO "nyCK»TeKCT
OIIOBeIJJ:eHHenpoH3£OM'1'CfI. TOJIbKO B TOM CJIY'lae, eCJIH
ynPABnEHHE UAC
UAC He3ap;aeT BonpOCOB;
winver, MO>KHO yol-1AeTb
BWindowspaOOracnpaSaMH8,AMHHHcrpaTOpaCYJIHTMHO:>KeCTBO
• Notifyme only when programstlyto make changes to my
OKHO
y.D,06CTB- Bee AeHCTBI1.II pa.3peweHbl, He 1pE!6yeTOl. HHKaKl1X
computer -nOXOiK Hanpe,n;b~HH,TOJIbKO Secure Desktop npH
rAe oTo6pa>KeH8 SCSI I'IH<p0pMaLl,HSI 0 BepcHI'I
,,0 CI'ICTeMe».
lJ;OIlO1IHH'reJIbHblX pa3peWeHH~ltv1R yCTaHOBlG1l1porpa.MM, 06HOB
BbJ30Be UAC He HCTTOJIb3yeTOI;
neHMJI CHCTeMbl,.nocryna K pa:me.naM )KecTKOrO ,llHCKa H npo'iee,
• NevernotifyYOU-OTlUlroqHTb UAC.
1-1 HOMepe C60pKH
MHHYC-.m060i1 BHpyc, 3anymeHHblH H3-fJO;:J; rrpHBHJlernpoBaH
OOCJleAHHe .ll:Ba nYHlcr8 OTMeqeHbl KaK He peKOMeHJ\YeMble, HO
Windows 7, BKnlOyaSl
HotiyqeTI:IOH 3aIIHCH, BbITlOJIHl'leTOi c rrpaBClMH a,llMHHHcrpaTopa,
CKIDKeM, 'ITO pa60Ta B Default.ll:OBO!lbHO KOMtPopTHa. KcraTH, B
.Q8Ty
T.e. HMeeTJ\ocryrr ¢aK"IW-leom Knl06oJl.f)' £<QMnOHel-ny cHcreMbl.
H8CTOflIl.\ee BpeMJI UAC HHKaK He pearHpyeT, ecnH npWlO)!{eHHe,
8KTHS8UHIo1.
l'ICTeyel·\l.1~
CpOK8
B Unix npo6neMYpellIKJIH. )l)Ke.ll.aBHO. BWindows C3THM eepb€3HO
3afIYllleHHOe nOJIb30BaTe.neM, nblTaeTCR H3MeHHTb HaCTpoihrn
Ha'lJaJlH 6opoTbOl BVista, r.a.e BnepUble rrpHMeHeH MexaHmM,
UAC. 3To n03BOJUleT He3aMeTHO era OTKJIlOqHTb, H.D,aHH}'lO
• DlrectAccess MO>KHO
TIOJIY'lllBlllHH Ha3BaHlle UAC ("YnpaBJIeHHeyqeTHblMH 3arrnCflM H
ourn:6Ky fUlaIrnpyKITycTpaH.HTh BRCI.
HClCTpOHTb T8K. YTo6bl
B CHCTeMe <paKTWIeCKH Crrpa:eaMH 06h1'lHoro nOJlb3OBaTeJ1.ll. Ecnll
cnOlKHAA nPH~ECKA
,Q\.1J1 TOllbKO Tpaq,I1K.
»<eJ1.lUlBbIIIOJlHeHHR3ap;a'IHTpe6Y10TCRnpa!3aap;MHHHcrpaTopa.
113MeHeHHH BWindows7 Aocraro'iHOMHOro. OpocroH llpH'lec
npe,nH83H8yeHHbliil
TO BhJp;aeTCR 3anpoc Ha IIOJ\TBep;Kl\eHHe nOBhIWeHllil.IIpJ.lBHJle·
KOH Visra ~ech He o6ollLlIOCb. Y a,1J;MllliHcrparopa nOffBKIlOCb
AnSI KopnOpaTI1BHO~
rnA (B crreI.J;HalIbHOM pe:>KHMe Secure Desktop, He fJ03BOMIOUleM
60nbwe B03M<»KHocrei-i 00 opraHll3alUrnY,l.l06HoH H tJe3onaCHoH
CeTI1
nporpaMMHO HIDKaTh KHom<y). 11 TOJIbKO B3TOM ClJ}"fBe KOHKpeT
cpe,D.bI -anropHTM MHOrKX ~fH H 31feMefITUB KaPtJ.HHaJIbHO
Hoe nplliIQ)KeHMe 6YP;eTBbIIIOJlHeHO CopaBaMH aAMHHflcrpaTOpa.
nepecrpoeH. Ho peaJlH30naTh HeKOTOpble 1-13 HHX YllaCTOl TOJlbKO
Do.rrbllIlIM MHHYCOM UACRBJLlleTCH ern '<336bIlNHBOCl'b": OH <<HC
npHHMH'fJ1.H HOaoH B€pOIH cepBepa Win2k8 R2 (Wmdows Server
3anOMHHaeT» nporpa1'.li\ry, H ITOTOMY 3aIJ1XK: noBTOpl'IeTOI TIpH
7). noroBOpWM 0 HeM BQllHOM IDCJletJ;ylOLUHX HOMepoB.I
1IUTlb30BaTe]U!») .npu aKTIiBHOM UAC a.II.MHHHcrpaTopbl pa60TcuoT
e-XAKEP 05/125/ 09
4epe3 cepsep npoxo
I
~1231