hmLoadTopic({
hmKeywords:"同步化模式",
hmTitle:"同步化模式 - Active Directory\/Open Directory\/LDAP",
hmDescription:"若要建立新的伺服器工作，按一下 [工作] > [新增] > [伺服器工作] 或從樹狀結構選取需要的工作類型，然後按一下 [新增] > [伺服器工作]。",
hmPrevLink:"sg_server_tasks_synch.html",
hmNextLink:"sg_windows_net_synch.html",
hmParentLink:"sg_server_tasks_synch.html",
hmBreadCrumbs:"<a href=\"using.html\">使用 ESET PROTECT On-Prem<\/a> &gt; <a href=\"working_with_era.html\">ESET PROTECT On-Prem 主功能表<\/a> &gt; <a href=\"admin_ct.html\">工作<\/a> &gt; <a href=\"admin_server_tasks.html\">伺服器工作<\/a> &gt; <a href=\"sg_server_tasks_synch.html\">靜態群組同步化<\/a>",
hmTitlePath:"使用 ESET PROTECT On-Prem > ESET PROTECT On-Prem 主功能表 > 工作 > 伺服器工作 > 靜態群組同步化 > 同步化模式 - Active Directory\/Open Directory\/LDAP",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">同步化模式 - Active Directory\/Open Directory\/LDAP<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">若要建立新的伺服器工作，按一下 <span class=\"f_UI\">[工作]<\/span> &gt; <span class=\"f_UI\">[新增]<\/span> &gt; <img alt=\"新增\" title=\"新增\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/add_new_default.png\"\/><span class=\"f_UI\">[伺服器工作]<\/span> 或從樹狀結構選取需要的工作類型，然後按一下 <span class=\"f_UI\">[新增]<\/span> &gt; <img alt=\"新增\" title=\"新增\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/add_new_default.png\"\/><span class=\"f_UI\">[伺服器工作]<\/span>。<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">基本<\/span><\/h2>\n\r<p class=\"p_Normal\">在 <span class=\"f_UI\">[基本]<\/span> 區段中，輸入有關工作的基本資訊，例如 <span class=\"f_UI\">[名稱] 及 [說明] (選用)<\/span>。 按一下 <span class=\"f_UI\">[選取標籤]<\/span> 以<a href=\"tags.html#assign_tags\" class=\"topiclink\">指派標籤<\/a>。<br \/>\n\r在 <span class=\"f_UI\">[工作]<\/span> 下拉式功能表中，選取您要建立和配置的工作類型。如果您先選取了特定工作類型，然後才建立新工作，則會依據您之前的選擇來預先選取 <span class=\"f_UI\">[工作]<\/span>。<span class=\"f_UI\">[工作]<\/span> (請參閱<a href=\"admin_ct.html\" class=\"topiclink\">所有工作清單<\/a>) 可定義工作的設定與行為。<\/p>\n\r<p class=\"p_Normal\">您也可以從下列工作觸發設定中選取：<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">完成後立即執行工作<\/span><span class=\"f_NormalList\"> - 選取此選項，以在您按一下 [完成] 之後自動執行工作。<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">配置觸發<\/span> - 選取此選項，以啟用可在此配置觸發設定的 <a href=\"admin_st_triggers.html\" class=\"topiclink\">[觸發]<\/a> 區段。<\/p>\n\r<p class=\"p_Normal\" style=\"margin: 0 0 10px 13px;\">若要留待稍後再設定觸發，請將此核取方塊保留為取消選取。<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">設定<\/span><\/h2>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><span class=\"f_Heading3\">通用設定<\/span><\/h3>\n\r<p class=\"p_Normal\">按一下 <span class=\"f_UI\">[靜態群組名稱]<\/span> 下的 <span class=\"f_UI\">[選取]<\/span> - 依預設，同步化的電腦會使用執行使用者的家用群組。您也可以建立 <span class=\"f_UI\">[新靜態群組]<\/span>。<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">要同步化的物件<\/span><span class=\"f_NormalList\"> - 可以是 <\/span><span class=\"f_UI\">[電腦和群組]<\/span><span class=\"f_NormalList\"> 或 <\/span><span class=\"f_UI\">[只限電腦]<\/span><span class=\"f_NormalList\">。<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">電腦建立衝突處理<\/span> - 如果同步化要新增已經是靜態群組成員的電腦，則您可以選取下列一種衝突解決方法：<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 39px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: \'Courier New\';display:inline-block;width:13px;margin-left:-13px\">o<\/span><span class=\"f_UI\">略過<\/span><span class=\"f_NormalList\"> (將不新增同步化的電腦)<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 39px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: \'Courier New\';display:inline-block;width:13px;margin-left:-13px\">o<\/span><span class=\"f_UI\">移動<\/span><span class=\"f_NormalList\"> (新電腦將移到子群組)<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 58px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: \'Courier New\';display:inline-block;width:13px;margin-left:-13px\">o<\/span><span class=\"f_UI\">複製<\/span> (新電腦將以不同名稱新增)<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">電腦移除處理<\/span><span class=\"f_NormalList\"> - 如果電腦不再存在，您可以<\/span><span class=\"f_UI\">移除<\/span><span class=\"f_NormalList\">此電腦或將其<\/span><span class=\"f_UI\">略過<\/span><span class=\"f_NormalList\">。<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">群組移除處理<\/span><span class=\"f_NormalList\"> - 如果群組不再存在，您可以<\/span><span class=\"f_UI\">移除<\/span><span class=\"f_NormalList\">此群組或將其<\/span><span class=\"f_UI\">略過<\/span><span class=\"f_NormalList\">。<\/span><\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"重要\" title=\"重要\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">如果將 <span class=\"f_UI\">[群組移除處理]<\/span> 設為 <span class=\"f_UI\">[略過]<\/span>，且從 Active Directory 刪除群組 (組織部門)，則不會偵測到 ESET PROTECT On-Prem 中屬於群組的電腦，即使您將其 <span class=\"f_UI\">[群組移除處理]<\/span> 設為 <span class=\"f_UI\">[移除]<\/span>。<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">同步化模式<\/span><span class=\"f_NormalList\"> - <\/span><span class=\"f_UI\">Active Directory\/Open Directory\/LDAP<\/span><\/p>\n\r<p class=\"p_Normal\">請閱讀<a href=\"https:\/\/support.eset.com\/kb7819\/\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">知識庫文章<\/a>，了解在 ESET PROTECT On-Prem 中使用 Active Directory 同步化管理電腦。<\/p>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><span class=\"f_Heading3\">伺服器連線設定<\/span><\/h3>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"注意\" title=\"注意\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\">如果 ESET PROTECT 伺服器在連線到網域的 Windows 機器上執行，則僅需要 <span class=\"f_UI\">[伺服器]<\/span> 欄位。 您可以跳過下面的所有其他 Active Directory 配置步驟。如果網域是值得信任的，則可同步化多個網域。<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">伺服器<\/span><span class=\"f_NormalList\"> -<\/span>輸入伺服器名稱或網域控制站的 IP 位址。<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">登入<\/span>以下列格式輸入網域控制站的使用者名稱：<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 26px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: \'Courier New\';display:inline-block;width:13px;margin-left:-13px\">o<\/span><span class=\"f_CodeHighlighted\">DOMAIN\\username<\/span><span class=\"f_NormalList\"> (在 Windows 上執行的 ESET PROTECT 伺服器)<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 45px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: \'Courier New\';display:inline-block;width:13px;margin-left:-13px\">o<\/span><span class=\"f_CodeHighlighted\">username@FULL.DOMAIN.NAME<\/span> 或 <span class=\"f_CodeHighlighted\">username<\/span> (在 Linux 上執行的 ESET PROTECT 伺服器)。<\/p>\n\r<div style=\"text-align: left; text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding: 0 0 0 0; margin: 0 0 0 19px;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"重要\" title=\"重要\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">用大寫字母輸入網域以正確地驗證 Active Directory 伺服器的查詢。<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">[密碼]<\/span> - 輸入用來登入網域控制站的密碼。<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"重要\" title=\"重要\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\"><a id=\"ldaps\" class=\"hmanchor\"><\/a>ESET PROTECT 伺服器 (在 Windows 上) 依預設對所有 Active Directory (AD) 連線使用 LDAPS (用於 SSL 的 LDAP) 通訊協定。您還可以<a href=\"https:\/\/help.eset.com\/getHelp?product=protect_deploy_va&amp;version=13.1&amp;lang=zh-TW&amp;topic=configure_ldaps_connection_to_a_domain\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">在 ESET PROTECT 虛擬設備上配置 LDAPS<\/a>。<\/p>\n\r<p class=\"p_Normal\">若要使 AD 成功連線到 LDAPS，請配置以下內容：<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>網域控制站必須已安裝機器憑證。若要為您的網域控制站頒發憑證，請遵循以下步驟：<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">a)<\/span><span class=\"f_NormalList\">開啟 <\/span><span class=\"f_UI\">[伺服器管理員]<\/span><span class=\"f_NormalList\">，按一下 <\/span><span class=\"f_UI\">[管理]<\/span><span class=\"f_NormalList\"> &gt; <\/span><span class=\"f_UI\">[新增角色和功能]<\/span><span class=\"f_NormalList\">，然後安裝 <\/span><span class=\"f_UI\">[Active Directory 憑證服務]<\/span><span class=\"f_NormalList\"> &gt; <\/span><span class=\"f_UI\">[憑證授權單位]<\/span><span class=\"f_NormalList\">。將在<\/span><span class=\"f_UI\">受信任的根憑證授權單位<\/span><span class=\"f_NormalList\">中建立新的憑證授權單位。<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">b)<\/span><span class=\"f_NormalList\">按一下 <\/span><span class=\"f_UI\">[伺服器管理員]<\/span><span class=\"f_NormalList\">中的通知 (黃色三角形) 並<\/span><span class=\"f_UI\">在目標伺服器上配置 Active Directory 憑證服務<\/span><span class=\"f_NormalList\">。在 <\/span><span class=\"f_UI\">[角色服務]<\/span><span class=\"f_NormalList\"> 中，選取 <\/span><span class=\"f_UI\">[憑證授權單位]<\/span><span class=\"f_NormalList\">。按一下 <\/span><span class=\"f_UI\">[下一步]<\/span><span class=\"f_NormalList\"> 以完成配置。<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">c)<\/span><span class=\"f_NormalList\">瀏覽到 <\/span><span class=\"f_UI\">[開始]<\/span><span class=\"f_NormalList\"> &gt; 輸入 <\/span><span class=\"f_CodeHighlighted\">certlm.msc<\/span><span class=\"f_NormalList\"> 並按下 <\/span><span class=\"f_UI\">[Enter]<\/span><span class=\"f_NormalList\"> 以執行 <\/span><span class=\"f_UI\">[憑證]<\/span><span class=\"f_NormalList\"> Microsoft 管理主控台嵌入式管理單元 &gt; <\/span><span class=\"f_UI\">[憑證 - 本機電腦]<\/span><span class=\"f_NormalList\"> &gt; <\/span><span class=\"f_UI\">[個人]<\/span><span class=\"f_NormalList\"> &gt; 滑鼠右鍵按一下空窗格 &gt; <\/span><span class=\"f_UI\">[所有工作]<\/span><span class=\"f_NormalList\"> &gt; <\/span><span class=\"f_UI\">[請求新的憑證]<\/span><span class=\"f_NormalList\"> &gt; <\/span><span class=\"f_UI\">[註冊網域控制站]<\/span><span class=\"f_NormalList\">角色。<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">d)<\/span><span class=\"f_NormalList\">驗證發行的憑證是否包含網域控制站的 <\/span><span class=\"f_NormalList\">FQDN<\/span><span class=\"f_NormalList\">。<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">e)<\/span><span class=\"f_NormalList\">在您的 ESET PROTECT 伺服器上，將您所產生的 CA 匯入至憑證存放區 (使用 <\/span><span class=\"f_CodeHighlighted\">certlm.msc<\/span><span class=\"f_NormalList\"> 工具) &gt; <\/span><span class=\"f_UI\">[本機機器]<\/span><span class=\"f_NormalList\"> &gt; <\/span><span class=\"f_UI\">[受信任的根憑證授權單位]<\/span><span class=\"f_NormalList\"> 資料夾。<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 39px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">f)<\/span>重新啟動 ESET PROTECT 伺服器電腦。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>向 AD 伺服器提供連線設定時，請在 <span class=\"f_UI\">[伺服器]<\/span> 或 <span class=\"f_UI\">[主機]<\/span> 欄位中輸入網域控制站的 FQDN (如網域控制站證書中所提供)。IP 位址不再足夠 LDAPS 使用。<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\">若要啟用以 LDAP 通訊協定遞補，請選取 <span class=\"f_UI\">[使用 LDAP 而非 Active Directory]<\/span> 核取方塊，然後輸入要和伺服器比對的特定屬性。或者您可以按一下 <span class=\"f_UI\">[選取]<\/span> 來選取 <span class=\"f_UI\">[預設]<\/span>，系統會自動填入屬性：<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Active Directory<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">macOS Server Open Directory (電腦主機名稱)<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">macOS Server Open Directory (電腦 IP 位址)<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_UI\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">含有 Samba 電腦記錄的 OpenLDAP<\/span> - 設定 <a href=\"server_tasks_static_groups_linux.html\" class=\"topiclink\">Active Directory 中的 DNS 名稱<\/a>參數。<\/p>\n\r<p class=\"p_Normal\">當您選取 <span class=\"f_UI\">[使用 LDAP 取代 Active Directory]<\/span> 及 <span class=\"f_UI\">[Active Directory]<\/span> 預設時，您可以從 Active Directory 結構填入<a href=\"computer_details.html\" class=\"topiclink\">電腦詳細資料<\/a>與屬性。只能使用類型 <span class=\"f_CodeHighlighted\">DirectoryString<\/span> 的屬性。您可以使用工具 (例如，<span class=\"f_Path\">ADExplorer<\/span>) 檢查您網域控制站上的屬性。請參閱下表的對應欄位：<\/p>\n\r<div style=\"text-align: left; text-indent: 19px; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small\" >\n\r<thead>\n\r<tr class=\"Table_small\">\n\r<th class=\"Table_small\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">電腦詳細資訊欄位<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">同步化工作欄位<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">名稱<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">電腦主機名稱屬性<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">說明<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">電腦說明屬性<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><span class=\"f_Heading3\">同步化設定<\/span><\/h3>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">識別名稱<\/span> - Active Directory 樹狀結構中節點的路徑 (識別名稱)。將這個選項保留空白將會同步化整個 AD 樹狀結構。按一下<span class=\"f_UI\"> [識別名稱]<\/span> 旁的 <span class=\"f_UI\">[瀏覽]<\/span>。接著會顯示 Active Directory 樹狀結構。選取最上方項目以將所有群組與 ESET PROTECT On-Prem 同步化，或僅選取您要新增的特定群組。只會同步化電腦和組織單位。當您完成時，按一下 <span class=\"f_UI\">[確定]<\/span>。<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"注意\" title=\"注意\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Note_heading\" style=\"page-break-after: avoid;\"><span class=\"f_Note_heading\">確定辨別名稱<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span><span class=\"f_NormalList\">開啟 <\/span><span class=\"f_UI\">Active Directory 使用者與電腦<\/span><span class=\"f_NormalList\">應用程式。<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span><span class=\"f_NormalList\">按一下 <\/span><span class=\"f_UI\">[檢視]<\/span><span class=\"f_NormalList\">，然後選取 <\/span><span class=\"f_UI\">[進階功能]<\/span><span class=\"f_NormalList\">。<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span><span class=\"f_NormalList\">以滑鼠右鍵按一下網域 &gt; 按一下 <\/span><span class=\"f_UI\">[內容]<\/span><span class=\"f_NormalList\"> &gt; 選取 <\/span><span class=\"f_UI\">[屬性編輯器]<\/span><span class=\"f_NormalList\"> 索引標籤。<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 39px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span>找到<span class=\"f_UI\">distinguishedName<\/span>該行其看起來像此範例：<span class=\"f_CodeHighlighted\">DC=ncop,DC=local<\/span>。<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">已排除的識別名稱<\/span> - 您可以選擇排除 (略過) Active Directory 樹狀結構中的特定節點。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">忽略停用的電腦 (僅限在 Active Directory)<\/span> - 您可以選擇忽略 Active Directory 中的已停用電腦 (此工作將略過這些電腦)。<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"重要\" title=\"重要\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">如果發生錯誤：<span class=\"f_CodeHighlighted\">Server not found in Kerberos database<\/span> 按一下 <span class=\"f_UI\">[瀏覽]<\/span> 之後，使用伺服器的 AD FQDN 取代 IP 位址。<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><img id=\"toggle0186a1_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> &nbsp; &nbsp; &nbsp; &nbsp;<span class=\"f_Heading2\"><a id=\"toggle0186a1_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a1_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">從 Linux 伺服器進行同步化<\/a><\/span><\/h2>\n\r<div id=\"toggle0186a1\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 18px;display:none\"><table style=\"border:none; border-spacing:0;\" role=\"presentation\">\n\r<tr>\n\r<td style=\"vertical-align:top; padding:0; border:none\"><p class=\"p_Normal\">在 Linux 上執行 ESET PROTECT 伺服器可從 Windows 機器以不同方式進行同步化。程序如下所示：<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>必須填入網域控制站的主機名稱及認證。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>伺服器會驗證認證，然後將之轉換為 Kerberos 票證。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">3.<\/span>如果不存在的話，伺服器會偵測到網域的識別名稱。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">4.<\/span>A) 如果未核取選項 <span class=\"f_UI\">[使用 LDAP 取代 Active Directory]<\/span>：<br \/>\n\r對 <span class=\"f_CodeHighlighted\">ldapsearch<\/span> 的多次呼叫可列舉樹狀結構。取得電腦記錄之程序的簡化範例：<br \/>\n\r<span class=\"f_CodeHighlighted\">kinit &lt;username&gt;<\/span><br \/>\n\r(這是會分為兩行的一個命令：)<br \/>\n\r<span class=\"f_CodeHighlighted\">ldapsearch -LLL -Y GSSAPI -h ad.domain.com -b \'DC=domain,DC=com\' \\<\/span><br \/>\n\r<span class=\"f_CodeHighlighted\">\'(&amp;(objectCategory=computer))\' \'distinguishedName\' \'dNSHostName\'<\/span><br \/>\n\r&nbsp;<br \/>\n\rB) 如果已核取選項 <span class=\"f_UI\">[使用 LDAP 取代 Active Directory]<\/span>：<br \/>\n\r相同的處理程序與在選項 4A 中的名稱相同，但使用者可以配置參數。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">5.<\/span>Kerberos 會使用交握機制以驗證使用者，然後產生可後續用於其他服務的票證以進行驗證，而不需要傳送純文字格式的密碼 (與 <span class=\"f_UI\">[使用簡單驗證]<\/span> 選項相反)。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">6.<\/span><span class=\"f_CodeHighlighted\">ldapsearch<\/span> 公用程式之後會使用 GSSAPI，利用所取得的 Kerberos 票證來驗證 Active Directory。<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">7.<\/span>會透過非加密通道傳回搜尋結果。<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">觸發<\/span><\/h2>\n\r<p class=\"p_Normal\"><span class=\"f_UI\"><a href=\"admin_st_triggers.html\" class=\"topiclink\">[觸發]<\/a><\/span> 區段包含可能會執行工作之觸發的相關資訊。每個<span class=\"f_UI\"> [伺服器工作]<\/span> 可以有最多一個觸發。每一個觸發都只能執行一項 <span class=\"f_UI\">[伺服器工作]<\/span>。若未在 <span class=\"f_UI\">[基本]<\/span> 區段內選取 <span class=\"f_UI\">[配置觸發]<\/span>，則不會建立觸發。工作可以不使用觸發來建立。這種工作可以手動執行，或在稍後新增觸發。<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">進階設定 - 節流<\/span><\/h2>\n\r<p class=\"p_Normal\">透過設定<a href=\"admin_st_throttling.html\" class=\"topiclink\">節流<\/a>，您可以為已建立的觸發設定進階規則。設定節流為選用。<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">摘要<\/span><\/h2>\n\r<p class=\"p_Normal\">此處會顯示所有已配置的選項。檢視設定並按一下<span class=\"f_UI\"> <\/span>。<\/p>\n\r<p class=\"p_Normal\">在<span class=\"f_UI\">工作<\/span>中，您可以看到<a href=\"admin_ct_executions_progress.html\" class=\"topiclink\">進度指示器欄<\/a>、<a href=\"admin_ct_executions_status_icon.html\" class=\"topiclink\">狀態圖示<\/a>以及每個已建立工作的<a href=\"admin_ct_executions_drill_down.html\" class=\"topiclink\">詳細資訊<\/a>。<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"注意\" title=\"注意\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\">您可以執行<a href=\"server_tasks_agent_deployment1.html\" class=\"topiclink\">代理程式部署伺服器工作<\/a>，以將 ESET Management 代理程式部署至從 Active Directory 同步的電腦。<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r"
})
