案例:存取的協助Scenario: Access-Denied Assistance

適用於:Windows Server 2016、Windows Server 2012 R2、Windows Server 2012Applies To: Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

在嘗試存取共用的檔案和資料夾的檔案伺服器的它們不需要權限時,使用者會出現存取的訊息。Users will get an access-denied message when they try to access shared files and folders on a file server for which they do not have permissions. 系統管理員通常不需要進行疑難排解的存取問題,可讓您修正問題的相關硬碟適當操作。Administrators often do not have the appropriate context to troubleshoot the access issue, which makes it hard to resolve the issue.

案例描述Scenario description

存取的協助是提供下列方式的相關問題進行疑難排解的 Windows Server 2012 中的新功能的檔案和資料夾的存取:Access-denied assistance is a new feature in Windows Server 2012 , which provides the following ways to troubleshoot issues that are related to access to files and folders:

  • 自我尋求協助。Self-assistance. 如果使用者可以判斷問題,使其可以存取要求唯讀問題的影響企業太低,且不特殊例外所需的中央存取原則。If a user can determine the issue and remediate the problem so that they can get the requested access, the impact to the business is low, and no special exceptions are needed in the central access policy. 存取的協助提供的檔案伺服器管理員可自訂的公司特定資訊的存取的訊息。Access-denied assistance provides an access-denied message that file server administrators can customize with information specific to their organizations. 例如,系統管理員可以安裝訊息,讓使用者可以要求的資料擁有的存取權不需要的檔案伺服器管理員。For example, an administrator could set the message so that users can request access from a data owner without involving the file server administrator.

  • 資料擁有者來協助。Assistance by the data owner. 您可以定義散發清單的共用資料夾,並使資料夾擁有者接收的電子郵件通知,當使用者需要存取設定。You can define a distribution list for shared folders, and configure it so that the folder owner receives an email notification when a user needs access. 如果資料擁有者不知道如何協助存取的使用者,擁有者可以檔案伺服器管理員向前這項資訊。If the data owner does not know how to help the user get access, the owner can forward this information to the file server administrator.

  • 檔案伺服器系統管理員尋求協助。Assistance by the file server administrator. 當使用者無法修正問題,並協助的資料擁有者無法使用這種類型的協助。This type of assistance is available when the user cannot fix an issue and the data owner cannot help. Windows Server 2012 提供使用者介面位置檔案伺服器管理員可以檢視有效權限使用者的檔案或資料夾,讓它更容易存取問題的疑難排解。Windows Server 2012 provides a user interface where file server administrators can view the effective permissions for a user on a file or folder so that it is easier to troubleshoot access issues.

Windows Server 2012 存取的協助提供檔案伺服器管理員存取的相關詳細資訊,他們就可以判斷的問題和適當的工具,讓他們可以設定的變更滿足存取要求。Access-denied assistance in Windows Server 2012 provides file server administrators the relevant access details so that they can determine the issue and appropriate tools so that they can make configuration changes to satisfy the access request. 例如,使用者可能會依照此程序存取它們目前不可以存取檔案:For example, a user might follow this process to access a file that they currently do not have access to:

  • 使用者嘗試朗讀 \\financeshares 共用資料夾中的檔案,但伺服器會顯示存取的訊息。The user attempts to read a file in the \\financeshares shared folder, but the server displays an access-denied message.

  • Windows Server 2012 顯示選項,以要求協助使用者存取的協助資訊。Windows Server 2012 displays the access-denied assistance information to the user with an option to request assistance.

  • 如果使用者要求存取的資源,伺服器會傳送具有存取要求資訊的電子郵件資料夾擁有者。If the user requests access to the resource, the server sends an email with the access request information to the folder owner.

您可以找到計劃的資訊設定存取的協助計劃 Access-Denied 協助的You can find planning information for configuring access-denied assistance in Plan for Access-Denied Assistance.

您可以找到關於設定存取的協助步驟Deploy Access-Denied 協助與 #40; 示範步驟和 #41;.You can find steps about configuring access-denied assistance in Deploy Access-Denied Assistance (Demonstration Steps).

本案例中In this scenario

本案例是動態存取控制案例的一部分。This scenario is part of the Dynamic Access Control scenario. 如需關於動態存取控制的詳細資訊,請查看:For additional information about Dynamic Access Control, see:

實用的應用程式Practical applications

Windows Server 2012 存取的協助提供動態存取控制,讓使用者要求直接從存取的訊息共用的檔案和資料夾的存取權的能力。Access-denied assistance in Windows Server 2012 contributes to Dynamic Access Control by giving users the ability to request access to shared files and folders directly from an access-denied message.

本案例中所包含的功能Features included in this scenario

下表列出的功能是此案例,並告訴他們支援的方式。The following table lists the features that are part of this scenario and describes how they support it.

功能Feature 它如何支援此案例How it supports this scenario
檔案伺服器資源管理員概觀File Server Resource Manager Overview 您可以使用該檔案伺服器上的檔案伺服器資源管理員」主控台設定存取的協助。Access-denied assistance can be configured by using the File Server Resource Manager console on the file server.
檔案和儲存服務概觀File and Storage Services Overview 檔案伺服器資源管理員是一個檔案,並儲存服務角色服務,並包含數一組可用來管理您的網路上的檔案伺服器的功能。File Server Resource Manager is a File and Storage Services role service, and it is comprised of a set of features that can be used to administer the file servers on your network.