{"id":118,"date":"2016-08-28T13:02:55","date_gmt":"2016-08-28T05:02:55","guid":{"rendered":"https:\/\/rol801.com\/wordpress\/?p=118"},"modified":"2016-08-28T13:02:55","modified_gmt":"2016-08-28T05:02:55","slug":"%e7%97%9b%e8%8b%a6%e5%98%85ad-upgradephase-out-exchange-20032007-removal","status":"publish","type":"post","link":"https:\/\/rol801.com\/wordpress\/?p=118","title":{"rendered":"\u75db\u82e6\u5605AD Upgrade\/Phase Out, Exchange 2003\/2007 Removal."},"content":{"rendered":"

\"index\"<\/p>\n

 <\/p>\n

 <\/p>\n

\"images\"<\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

\u56e0\u70ba\u5f9e\u4f86\u672a\u505a\u904e\uff0c\u6b65\u9a5f\u4fc2\u932f\u5605\u3002<\/p>\n

\u7b2c\u4e00\u932f\uff0c\u4fc2AD Site\uff0c\u672a\u9664Decommision Exchange 2003\/2007 \u524d\uff0c\u5514\u61c9\u8a72dcpromo DC…… \u57fa\u65bc\u5462\u500b\u5481\u611a\u8822\u5605apporach. \u96bbExchange 2003 \u4fc2\u4fc2ADSIEdit\u5f37\u884cDelete… \uff0c Server remove registry… \u771f\u4fc2\u7b28\u5230\u7121\u670b\u53cb
\n\u7b2c\u4e8c\u932f\uff0cPublic Folders… \u5462\u4e00\u6a23\u91ce\u9ede\u53bb\u5230Replica.\u4fc2\u6709Exchange20032\/07\uff0c \u5230\u5462\u5bb6\u5f97\u8fd4\u96bb2010…\u4fc2\u5514\u540c\u5605\u3002\u6700\u5f8c\u5230\u6bd4\u6211\u6435\u5230\u6709\u4eba\u8b1b\u3002\u3002 \u9802\uff01\uff20\uff03\uff04\uff05?\uff06\uff0a\uff08\uff01\u00a0\u00a0 M\uff04\u00a0 \uff01\uff01\uff01<\/p>\n

\u6700\u5f8c(\u5514\u4fc2\u6211\u932f)…. Remove Exchange 2007… \u518d\u4ffe\u591a\u500berror\u6211\u7747<\/p>\n

“Error: Unable to create IIS (Internet Information Service) directory entry. Error Message is: Exception from HRESULT: 0x80005008. HResult = -2147463160”<\/strong><\/p>\n

\u8981\u4fc2 %SystemRoot%\/System32\/inetsrv\/metabase.xml .. \u6709\u4e09\u884c\u6709\u6703\u6709IpSecurity=””\u00a0\u00a0 , \u5168\u90e8 Delete \u4f62\u5148\u53ef\u4ee5uninstall\u5230Exchange2007…<\/p>\n

Shit !@#$%^&*()_<\/p>\n

Reference Information:<\/p>\n

The Resolution<\/strong><\/p>\n

I spoke to a Microsoft exchange architect named Indarraaj. He informed me that this is this error is by design. You can only have one exchange 2003 and one exchange 2007 server as a replica at these parent level public folders. However if you look at the sub folders, it is possible to add all your servers as replica’s. As long as you add all your servers as replica’s to your sub folders you will be fine.<\/strong><\/p>\n

I asked him why this was not documented on the internet anywhere, as I did research this pretty intensively and there was hardly any information! He said there is a KB article for this however it is a Microsoft internal KB which is not available externally for the public! I think this is pretty strange, if this error is by design, shouldn’t Microsoft at least document this if every exchange organisation around the world experiance this issue at a given time when migrating from exchange 2003 to 2007?<\/p>\n

Anyway all in all just check the child public folders and ensure that the replica’s are set right on them.<\/p>\n

http:\/\/clintboessen.blogspot.hk\/2009\/06\/cannot-add-replicas-to-certain-system.html<\/a><\/p>\n

https:\/\/social.technet.microsoft.com\/Forums\/exchange\/en-US\/18fbfc64-eae5-4660-8f7e-b57f35dc862e\/iis-ip-restriction-on-cas-server-destroys-it?forum=exchangesvrgenerallegacy<\/p>\n","protected":false},"excerpt":{"rendered":"

            \u56e0\u70ba\u5f9e\u4f86\u672a\u505a\u904e\uff0c\u6b65\u9a5f\u4fc2\u932f\u5605\u3002 \u7b2c\u4e00\u932f\uff0c\u4fc2AD Site\uff0c\u672a\u9664Decommision Exchange 2003\/2007 \u524d\uff0c\u5514\u61c9\u8a72dcpromo DC…… \u57fa\u65bc\u5462\u500b\u5481\u611a\u8822\u5605apporach. \u96bbExchange 2003 \u4fc2\u4fc2ADSIEdit\u5f37\u884cDelete… \uff0c Server remove registry… \u771f\u4fc2\u7b28\u5230\u7121\u670b\u53cb \u7b2c\u4e8c\u932f\uff0cPublic Folders… \u5462\u4e00\u6a23\u91ce\u9ede\u53bb\u5230Replica.\u4fc2\u6709Exchange20032\/07\uff0c \u5230\u5462\u5bb6\u5f97\u8fd4\u96bb2010…\u4fc2\u5514\u540c\u5605\u3002\u6700\u5f8c\u5230\u6bd4\u6211\u6435\u5230\u6709\u4eba\u8b1b\u3002\u3002 \u9802\uff01\uff20\uff03\uff04\uff05?\uff06\uff0a\uff08\uff01\u00a0\u00a0 M\uff04\u00a0 \uff01\uff01\uff01 \u6700\u5f8c(\u5514\u4fc2\u6211\u932f)…. Remove Exchange 2007… \u518d\u4ffe\u591a\u500berror\u6211\u7747 “Error: Unable to create IIS (Internet Information Service) directory entry. Error Message is: Exception from HRESULT: 0x80005008. HResult = -2147463160” \u8981\u4fc2 … Continue reading “\u75db\u82e6\u5605AD Upgrade\/Phase Out, Exchange 2003\/2007 Removal.”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[2,3],"tags":[],"class_list":["post-118","post","type-post","status-publish","format-standard","hentry","category-it","category-microsoft"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p71O8A-1U","jetpack-related-posts":[{"id":197,"url":"https:\/\/rol801.com\/wordpress\/?p=197","url_meta":{"origin":118,"position":0},"title":"Exchange 2013 – Web Service(EWS) Virtual Directory Creation","author":"rol801","date":"May 16, 2017","format":false,"excerpt":"\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Microsoft EWS Virtual Directory\uff0c\u6bd4create ActiveSync Virtual Directory\u66f4\u53e4\u602a\uff0c\u66f4\u5c0f\u4eba\u8a0e\u8ad6 \u7d55\u5c0d\u6703\u8ad7\u6240\u6709creation\u53ef\u4ee5\u4fc2Exchange Management Shell\u505a\u5230\uff0c\u4f46\u4fc2\"\u5049\u5927\"\u5605M$\u518d\u4e00\u6b21\u4ffeSurprise\u6211\u54cb\u3002\u3002\u3002 \u6700\u5f8c\u6211\u8a66\u51fa\u9ece\u5605\u7d50\u679c\u4fc2\u3002\u3002\u3002\u3002 EWS Virtual Directory Creation - \u4fc2\u7528\u666e\u901aPowerShell \uff0c\u518d\u7528\"AddPSSnapin Microsoft.Management.PowerShell.E2010\" \u7747\u5230\u5462\u5230\uff0c\u4f60\u7121\u7747\u932f\u3002\u3002\u4fc22010 Module \u9ede\u89e3\u6211\u77e5\uff1f\u5c31\u4fc2\u56e0\u70ba\u932f\u8aa4\u54cbcreate\u5de6\u591a\u4e00\u500bPowerShell VirtualDirectory \u4fc2Default Web Site\uff0c\u4f46\u4fc2\u53c8remove\u5514\u5230....... \u6700\u5f8c\u6435\u5230expect exchange\u6709\u4eba\u8b1b\u540c\u4e00\u554f\u984c...... Create PowerShell vDir - Exchange Managment PowerShell Remove PowerShell vDir - Normal PowerShell + PSSnapin (E2010) Create\u2026","rel":"","context":"In "IT"","block_context":{"text":"IT","link":"https:\/\/rol801.com\/wordpress\/?cat=2"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2016\/08\/images.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":189,"url":"https:\/\/rol801.com\/wordpress\/?p=189","url_meta":{"origin":118,"position":1},"title":"Microsoft ActiveSync – New EAS Website with Certificate Base Authentication(CBA) in same server","author":"rol801","date":"May 12, 2017","format":false,"excerpt":"\u70ba\u5de6\u5514\u4f7f\u8d77\u591a\u90e8CAS\uff0c\u4f46\u53c8\u53ef\u4ee5\u8a66CBA\uff0c \u53ea\u4fc2\u7528\u52a0\u591a\u4e00\u5f35NIC\uff0c\u591a\u4e00\u7c92IP\u3002 \u7d55\u5c0d\u4fc2\u5feb\u975a\u6b63\u3002 \u4f46\u4fc2\uff0c\u4fc2deployment\u5605\u904e\u7a0b\uff0c\u4fc2\u7d55\u5c0d\u4ffeExchange\/IIS\u73a9\u6b7b\u3002 \u5462\u4e0bWebsite\u5605\u6b65\u9a5f\u7d55\u5c0d\u7121\u932f\uff08\u63a8\u85a6\u7b2c\u4e00\u500b\uff09 \u9047\u5230\u554f\u984c\u5982\u4e0b 1\u3002\u540c\u4e00\u5f35NIC\u7528\u4e8c\u7c92IP\uff0c\u4fc2setup\u6642\u6703\u884d\u751fHost \u932fIP\u554f\u984c\uff0c\u6240\u4ee5\u5514\u5efa\u8b70 2\u3002\u7576\u4e2d\u907f\u514d\u7528IIS\u53bbSet\uff0c\u7279\u5225\u4fc2Step 11\u958bclientCertificateMappingAuthentication\uff0c\u540c\u57cb\u6700\u5c3eenable \"Require Client Certificate\" \u96d6\u7136\u4fc2IIS\u90fd\u6703\u6539\u5230\uff0c\u4f46\u4fc2\u5049\u5927\u5605M\uff04\u8a71Exchange \u91ce\u61c9\u8a72\u8fd4Exchange Admin Center\uff08EAC\uff09\u505a\uff0c\u540cSharePoint \u4e00\u6a23...... \u5514\u76f8\u4fe1....\u6211\u81ea\u5df1\u5f97\u5230\u5605\u4ee3\u50f9\uff0c\u5c31\u4fc2\u5514\u540c\u5605IIS Error\u3002\u3002 \u53ef\u80fd\u4fc2403.7 \uff0c\u63a5403.16........ \u518d\u5514\u4fc2\uff0c\u51faError 500\u3002\u3002\u606d\u559c\uff5eGameOver\u3002\u3002\u3002 \u9047\u904e\u597d\u5e7e\u6b21\uff0c\u8981delete site\uff0c\u7531\u982d\u518d\u569f..... 3\u3002EWS IIS Error 413, \u5514Fix, Notification\u4ea6\u6703\u505c\u5514work \u9700\u8981\u6539\u4ee5\u4e0b C:\\Program Files\\Microsoft\\Exchange Server\\V15\\FrontEnd\\HttpProxy\\autodiscover\\web.config C:\\Program Files\\Microsoft\\Exchange Server\\V15\\FrontEnd\\HttpProxy\\ews\\web.config 2. Replace the value \"uploadReadAheadSize\" of 0 to 1048576 (bytes) in\u2026","rel":"","context":"In "IT"","block_context":{"text":"IT","link":"https:\/\/rol801.com\/wordpress\/?cat=2"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2016\/08\/images.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":134,"url":"https:\/\/rol801.com\/wordpress\/?p=134","url_meta":{"origin":118,"position":2},"title":"\u521d\u8a66SAML\u5927\u96c6\u6703 ….. 1.OKTA 2.Sales Force 3.ADFS","author":"rol801","date":"October 15, 2016","format":false,"excerpt":"\u00a0 \u7d55\u5c0d\u4fc2\u65b0\u6311\u6230 !!!!! SAML\u00a0\u00a0\u00a0\u00a0\u00a0 \u4e00\u76f4\u4fc2\u4ee5\u5f80\u5514\u591a\u6562\u53bb\u6382\u5605\u91ce\u3002\u76f8\u6bd4Kerberos\uff0cSAML\u6709\u81ea\u5df1\u89ba\u5f97\u597d\u96e3\u7747\u5605XML (Recursive xml\uff09\u3002\u8ad7\u8d77\u90fd\u6015\u6015\u3002\u6015\u6015\u3002 \u57fa\u5982\u569f\u7dca\u597d\u9ad8\u6a5f\u6703\u8981\u7528\u540c\u81ea\u5df1\u5605\u672a\u96e8\u7da2\u7e46\uff0c\u6c7a\u5b9a\u653e\u624b\u7747\u7747\u4f62...... \u7b2c\u4e00\u4fc2\u6435\u7528\u5605IdP\uff08Identity Provider) \u540cSP(Service Provider) \u96d6\u7136\u5df2\u7d93\u6709ADFS\u4fc2\u5230\u53ef\u7528\uff0c \u4f46\u4fc2ADFS\u5514\u4fc2\u5462\u500b\u4eca\u6b21Buildup\u6700\u521d\u6703\u7528\u5605\u3002 SalesForce\u5df2\u77e5\u5605\u4fc2\u5927\u8def\u5605Service Provider\u3002\u3002 Production \u8981\u9322\u7121\u53ef\u80fd\u3002\u4f46\u4fc2Developer Edition\u4fc2\u5169\u500bUser\u514d\u8cbb \uff0c\u672a\u6435\u5230\u6709\u7121Support\u3002 \u8d85\u5b64\u5bd2\u3002\u3002\u3002\u3002 \u5df2IdP\u4fc2\u6435\u5605\u7576\u4e2d\u7747\u5230OKTA\u3002\u3002 \u4f62\u5c0d\u6bd4\u597d\u5572\u3002 \u4e09\u500bApp\uff0c\u4e00\u767e\u500bUser\u4fc2\u6c38\u4e45\u514d\u8cbb\uff0c\u4ea6\u6709Support\u3002 \u597d\u5572 \u597d\u3002\u3002\u3002 \u6e96\u5099\u5b8c\u6210\u3002\u3002 \u958b\u5de5 \u5927\u81f3\u4e0a\u5605Concept AD \u4fc2Identity\u00a0 Source\uff0c \u6700\u521d\u4ee4\u81ea\u5df1\u4e82\u5605\u4fc2\u9ede\u958bOKTA\u5605UserID. \u56e0\u70ba\u4fc2\u672a\u5b89OKTA Agent\u540cAD link\u57cb\u4e4b\u524d\u3002 OKTA \u81ea\u5df1\u5605user account\u90fd\u4fc2\u7528\u540c\u4e00\u500bdomain suffix. Password \u4e00\u6a23\u6703\u96e3\u53bb\u78ba\u5b9a\u3002 \u4f46\u4fc2\u767c\u73fe\u7576\u5b89\u5b8cOKTA Agent match \u597duser\u4e4b\u5f8c\u3002 \u4fc2\u5f97\u8fd4AD password. \u5373\u4fc2\u5514\u9700\u8981\u6435account \u505alocal\u2026","rel":"","context":"In "ADFS"","block_context":{"text":"ADFS","link":"https:\/\/rol801.com\/wordpress\/?cat=13"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2016\/10\/ADFSSalesforceConfig.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2016\/10\/ADFSSalesforceConfig.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2016\/10\/ADFSSalesforceConfig.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2016\/10\/ADFSSalesforceConfig.jpg?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2016\/10\/ADFSSalesforceConfig.jpg?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":404,"url":"https:\/\/rol801.com\/wordpress\/?p=404","url_meta":{"origin":118,"position":3},"title":"Exchange 2013 CBA Setup Review","author":"rol801","date":"October 18, 2018","format":false,"excerpt":"\u6eab\u6545\u77e5\u65b0 !\u57fa\u65bc\u4e0a\u661f\u671fUpgrade Exchange 2013 \u7531 CU13 Upgrade \u53bb\u00a0CU21\u3002\u56e0\u70baServer \u4fc2\u4e0a\u5e74\u7528\u7279\u5225\u624b\u6bb5Split\u51fa\u569f\u3002\u6240\u4ee5Upgrade\u5230\u81e8\u5c3e\u51fa\u8996\u3002\u8feb\u65bc\u7121\u5948\u8981Delete\u5169\u500bExchange Website\u3002\u5462\u500b\u661f\u671f\u771f\u6b63\u8d77\u904e\u4e00\u96bb\u65b0Server\u53bb\u505aCAS\u3002\u904e\u7a0b\u7121\u7279\u5225\u8981\u591a\u8b1b\u56e0\u70ba\u975e\u5e38\u9806\u5229\uff0c\u4f46\u4fc2\u5982\u540c\u4e0a\u5e74\u4e00\u6a23\uff0cCBA\u5148\u4fc2\u6700\u5927\u96e3\u95dc\u3002\u4fc2\u518dReview Article\u5605\u9014\u4e2d\uff0c\u5c31\u7747\u5230\u6700\u9032\u53e3\u5605\u4e00\u74b0\u3002\u5c31\u4fc2Certificate\u5605Subject\u4fc2\u8981\u6709User\u5605Email\uff0c\u6216\u8005Certificate\u5605SAN Name\u6709User UPN\u3002\u5514\u8ddf\u5462Part\u5c31\u6703\u51faIIS Error 403.7 Prerequisites: You need access to a\u00a0CA\u00a0for client certificates. This can be a public CA solution, individual certificates from a vendor, or an Active Directory Certificate Services solution. Regardless, the following requirements must be met: The\u2026","rel":"","context":"In "IT"","block_context":{"text":"IT","link":"https:\/\/rol801.com\/wordpress\/?cat=2"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2016\/08\/images.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":293,"url":"https:\/\/rol801.com\/wordpress\/?p=293","url_meta":{"origin":118,"position":4},"title":"My ADFS Claims Rules Journey \u2013 Part 3 – Final","author":"rol801","date":"February 28, 2018","format":false,"excerpt":"\u00a0 \u00a0 \u7d42\u65bc\u6709\u6642\u9593\u5fc3\u60c5\u5beb\u57cb\u6700\u5f8c\u5462Part\u3002 \u7e7cPart 2\u3002 \u7d93\u904e\u4e0d\u65b7Try on Error\u8a66Claims Rules\u4e4b\u5f8c\u3002 \u5ee0\u5605\u4ee5\u4e0b\u5462\u500bArticle\u53e6\u6211\u653e\u68c4Claims Rules\u53bb\u505aRestriction\u5605\u8ad7\u6cd5\u3002\u5c0d\u65bcActiveSync\u569f\u8b1b\uff0c\u4f3c\u4e4e\u7528Modern Auth\u4fc2\u524b\u6b7bClaim Rule\u3002 \u4ee5\u4e0b \u5e7e\u985e\u578b\u5605\u505a\u6cd5\u53ef\u4ee5\u53d6\u66ffUnauthorize ActiveSync device access \u7b2c\u4e00\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u7528MDM Vendor\u5605Identity Management Software - \u76f8\u5c0d\u96e3\u5ea6\u4fc2\u6700\u9ad8\uff0c\u56e0\u70ba\u591a\u7528SAML\uff0c \u9700\u8981\u6709Deploy SAML\u5605\u7d93\u9a57\u3002\u800cInfrasture\u5165\u9762\u5605\u914d\u7f6e\u5df2\u7d93\u5514\u4fc2\u666e\u901aCompany\u6703\u6295\u8cc7 \u7b2c\u4e8c\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Deploy Certificate Authentication\u3002\u96e3\u5ea6\u540c\u7b2c\u4e00\u7a2e\u505a\u6cd5\u4e0d\u9051\u591a\u8b93\u3002\u9700\u8981Deploy\/ Maintain Internal CA \/ NDES \/PKI infrastructure\u540c\u6a23\u5514\u5bb9\u6613 \u7b2c\u4e09\u00a0 \u00a0\u2026","rel":"","context":"In "ADFS"","block_context":{"text":"ADFS","link":"https:\/\/rol801.com\/wordpress\/?cat=13"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2015\/12\/adfs-logo.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2015\/12\/adfs-logo.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2015\/12\/adfs-logo.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":295,"url":"https:\/\/rol801.com\/wordpress\/?p=295","url_meta":{"origin":118,"position":5},"title":"Azure AD Seamless SSO","author":"rol801","date":"February 28, 2018","format":false,"excerpt":"\u00a0 \u00a0 \u00a0 \u00a0 Seamless SSO\uff0c\u4e00\u500b\u66fe\u7d93\u89ba\u5f97\u597d\u96e3\u597d\u96e3\u5605\u6771\u6771\u3002\u4f46\u4fc2\u7d93\u904e\u5462\u5169\u4e09\u5e74\u524dConfigure Kerberos\uff0c\u540c\u958b\u59cb\u63a5\u89f8SAML\u5f8c\u5f97\u5230\u5605\u7d93\u9a57\u3002 Seamless SSO\u5514\u518d\u4fc2\u5481\u96e3\u4ee5\u89f8\u6478\u3002 \u7b2c\u4e00\uff0c\u90fd\u4fc2\u8981\u591a\u8b1d\u6211\u54cb\u5049\u5927\u5605Microsoft\u3002Azure AD\u4fc2\u4e0a\u5e74\u4e5d\u6708\u5de6\u53f3\u5605Update\u3002 Pass-Through Authentication\u3002Microsoft \u89e3\u91cbBenefit\u4fc2Authentication\u6703\u8fd4\u8fd4OnPremises AD\u505a\uff0c\u53ef\u4ee5\u5514\u9700\u8981\u958bPassword Sync\u3002 \u4fc2\u53e6\u4e00\u65b9\u9762\uff0c\u96d6\u7136\u5df2\u7d93\u6709ADFS WAP\uff0c\u4f46\u4fc2\u4fc2DMZ\u5605\u95dc\u4fc2\uff0c\u4fc2\u7121join AD\u3002\u6240\u4ee5Azure Pre-Authentication\u4fc2\u7528\u5514\u5230\u3002\u4fc2\u53e6\u4e00\u65b9\u9762\uff0c\u96d6\u7136\u5df2\u7d93\u6709ADFS WAP\uff0c\u4f46\u4fc2\u4fc2DMZ\u5605\u95dc\u4fc2\uff0c\u4fc2\u7121join AD\u3002\u6240\u4ee5Azure Pre-Authentication\u4fc2\u7528\u5514\u5230\u3002\u4f46\u4fc2\u7528Application Proxy Connector\u5c31\u7121\u5462\u500b\u9650\u5236\u3002Application Proxy Connector\u53ef\u4ee5\u5b89\u88dd\u4fc2\u4efb\u4f55\u4e00\u90e8Domain Joined Server\u3002\u4fc2\u5462\u500b\u56e0\u7d20\u4e4b\u4e0b\uff0cMachine Account \u884c Kerberos\u5c31\u7d55\u5c0d\u7121\u96e3\u5ea6\u3002 \u6b65\u9a5f\u53ef\u4ee5\u7167\u8ddfMicrosoft\u3002\u8b02\u7368\u6709\u4e00\u500bStep\u4ee4\u6211\u7279\u5225\u7559\u610f\uff0c\u56e0\u70ba\u540c\u4ee5\u5f80Configure KCD\u5514\u540c\u3002Common\u4fc2Delegation - \"Trust this computer for delegation to specified services only\" \u4e0b\u9762\u5605Section\u4fc2\u63c0\u00a0\"Kerberos only\"\uff0c\u4f46\u4fc2\u4eca\u6b21Config Application Proxy Delegation\u4fc2\u7528\"Use Any\u2026","rel":"","context":"In "Azure AD"","block_context":{"text":"Azure AD","link":"https:\/\/rol801.com\/wordpress\/?cat=14"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2018\/02\/microsoft-azure-640x401.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2018\/02\/microsoft-azure-640x401.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2018\/02\/microsoft-azure-640x401.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=118"}],"version-history":[{"count":2,"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/118\/revisions"}],"predecessor-version":[{"id":122,"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/118\/revisions\/122"}],"wp:attachment":[{"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}