날자를 월, 일, 년으로 분해하기에서, 오늘의 날자를 해석하기 위해 DoAToday를 생성하고 사용자 암호의 만료기간을 해석하기위해 DoAExpDT를 생성했다.

Windows NT가 암호 만료 경고를 출력하는 시점 변경을 사용함으로서 Windows NT가 암호만료 경고를 출력하는 시점을 설정할 수 있다.

자신의 암호 만료 경고를 출력하려면 날자를 계산할 필요가 있다. Windows NT 명령행 처리기는 그러한 능력을 제공하지 못한다. 따라서 스스로 만들어야 한다.

call DoAExpDT
call XDate %UserName% %XMM% %XDD% %XYY% Day28.DAT Day30.DAT Day31.DAT

여기서

XDate.bat

@echo off
if /i %2 EQU never goto finish
call Todayp %5 %6 %7
if %TDYYP% GTR %4 goto notify
if %TDMMP% GTR %2 goto notify
if %TDDDP% GTR %3 goto notify
goto finish
:notify
call XNotify %1 %2 %3 %4
:finish

Todayp.bat

@echo off
REM Add XX days to today's date based on the Day tables.
REM The 3 Day tables in this example add 10 days.
REM Day31 is for Jan, Mar, May, Jul, Aug, Oct, & Dec.
REM Day30 is for Apr, Jun, Sep, & Nov.
REM Day28 is for Feb. Leap year is ignored. 
cd %SystemRoot%\System32\Repl\Import\Scripts
call DoAToday
set TDMMP=%TDMM%
set TDYYP=%TDYY%
goto month%TDMM%
:month01
for /f "tokens=1,2 delims=-" %%i in ('findstr /B "%TDDD%-" %3') do set TDDDP=%%j
goto year
:month02
for /f "tokens=1,2 delims=-" %%i in ('findstr /B "%TDDD%-" %1') do set TDDDP=%%j
goto year
:month03
for /f "tokens=1,2 delims=-" %%i in ('findstr /B "%TDDD%-" %3') do set TDDDP=%%j
goto year
:month04
for /f "tokens=1,2 delims=-" %%i in ('findstr /B "%TDDD%-" %2') do set TDDDP=%%j
goto year
:month05
for /f "tokens=1,2 delims=-" %%i in ('findstr /B "%TDDD%-" %3') do set TDDDP=%%j
goto year
:month06
for /f "tokens=1,2 delims=-" %%i in ('findstr /B "%TDDD%-" %2') do set TDDDP=%%j
goto year
:month07
for /f "tokens=1,2 delims=-" %%i in ('findstr /B "%TDDD%-" %3') do set TDDDP=%%j
goto year
:month08
for /f "tokens=1,2 delims=-" %%i in ('findstr /B "%TDDD%-" %3') do set TDDDP=%%j
goto year
:month09
for /f "tokens=1,2 delims=-" %%i in ('findstr /B "%TDDD%-" %2') do set TDDDP=%%j
goto year
:month10
for /f "tokens=1,2 delims=-" %%i in ('findstr /B "%TDDD%-" %3') do set TDDDP=%%j
goto year
:month11
for /f "tokens=1,2 delims=-" %%i in ('findstr /B "%TDDD%-" %2') do set TDDDP=%%j
goto year
:month12
for /f "tokens=1,2 delims=-" %%i in ('findstr /B "%TDDD%-" %3') do set TDDDP=%%j
:year
if %TDDDP% GTR %TDDD% goto yymmdd
for /f "tokens=1,2 delims=-" %%i in ('findstr /B "%TDMM%-" Month.DAT') do set TDMMP=%%j
If %TDMMP% GTR %TDMM% goto yymmdd
for /f "tokens=1,2 delims=-" %%i in ('findstr /B "%TDYY%-" Year.DAT') do set TDYYP=%%j
:yymmdd

XNotify.bat

@echo off
REM echo %1 %2/%3/%4
REM You can use any form of notification that you wish:
REM Net Send %1 Your password expires on %2/%3/%4. Please change it today.
REM or use a freeware command line mailer like Blat.

Day28.DAT

01-11
02-12
03-13
04-14
05-15
06-16
07-17
08-18
09-19
10-20
11-21
12-22
13-23
14-24
15-25
16-26
17-27
18-28
19-01
20-02
21-03
22-04
23-05
24-06
25-07
26-08
27-09
28-10

Day30.DAT

01-11
02-12
03-13
04-14
05-15
06-16
07-17
08-18
09-19
10-20
11-21
12-22
13-23
14-24
15-25
16-26
17-27
18-28
19-29
20-30
21-01
22-02
23-03
24-04
25-05
26-06
27-07
28-08
29-09
30-10

Day31.DAT

01-11
02-12
03-13
04-14
05-15
06-16
07-17
08-18
09-19
10-20
11-21
12-22
13-23
14-24
15-25
16-26
17-27
18-28
19-29
20-30
21-31
22-01
23-02
24-03
25-04
26-05
27-06
28-07
29-08
30-09
31-10

Month.DAT

01-02
02-03
03-04
04-05
05-06
06-07
07-08
08-09
09-10
10-11
11-12
12-01

Year.DAT - 몇 년만 필요하다. 매1월에 한해를 추가하고 지난 해는 삭제한다.

1998-1999
1999-2000
2000-2001
2001-2002
2002-2003
2003-2004
2004-2005
2005-2006
2006-2007
2007-2008
2008-2009
2009-2010
2010-2011
2011-2012
2012-2013
2013-2014
2014-2015
2015-2016
2016-2017
2017-2018
2018-2019
2019-2010
2020-2021

다음은 원격접속서비스(Remote Access Service (RAS)의 오류 목록이다.

   오류    메시지


600     An operation is pending.
   601     The port handle is invalid.
   602     The port is already open.
   603     Caller's buffer is too small.
   604     Wrong information specified.
   605     Cannot set port information.
   606     The port is not connected.
   607     The event is invalid.
   608     The device does not exist.
   609     The device type does not exist.
   610     The buffer is invalid.
   611     The route is not available.
   612     The route is not allocated.
   613     Invalid compression specified.
   614     Out of buffers.
   615     The port was not found.
   616     An asynchronous request is pending.
   617     The port or device is already disconnecting.
   618     The port is not open.
   619     The port is disconnected.
   620     There are no endpoints.
   621     Cannot open the phone book file.
   622     Cannot load the phone book file.
   623     Cannot find the phone book entry.
   624     Cannot write the phone book file.
   625     Invalid information found in the phone book.
   626     Cannot load a string.
   627     Cannot find key.
   628     The port was disconnected.
   629     The port was disconnected by the remote machine.
   630     The port was disconnected due to hardware failure.
   631     The port was disconnected by the user.
   632     The structure size is incorrect.
   633     The port is already in use or is not configured for Remote Access dialout.
   634     Cannot register your computer on the remote network.
   635     Unknown error.
   636     The wrong device is attached to the port.
   637     The string could not be converted.
   638     The request has timed out.
   639     No asynchronous net available.
   640     A NetBIOS error has occurred.
   641     The server cannot allocate NetBIOS resources needed to support the client.
   642     One of your NetBIOS names is already registered on the remote network.
   643     A network adapter at the server failed.
   644     You will not receive network message popups.
   645     Internal authentication error.
   646     The account is not permitted to log on at this time of day.
   647     The account is disabled.
   648     The password has expired.
   649     The account does not have Remote Access permission.
   650     The Remote Access server is not responding.
   651     Your modem (or other connecting device) has reported an error.
   652     Unrecognized response from the device.
   653     A macro required by the device was not found in the device .INF file section.
   654     A command or response in the device .INF file section refers to an undefined macro
   655     The  macro was not found in the device .INF file section.
   656     The  macro in the device .INF file section contains an undefined macro
   657     The device .INF file could not be opened.
   658     The device name in the device .INF or media .INI file is too long.
   659     The media .INI file refers to an unknown device name.
   660     The device .INF file contains no responses for the command.
   661     The device .INF file is missing a command.
   662     Attempted to set a macro not listed in device .INF file section.
   663     The media .INI file refers to an unknown device type.
   664     Cannot allocate memory.
   665     The port is not configured for Remote Access.
   666     Your modem (or other connecting device) is not functioning.
   667     Cannot read the media .INI file.
   668     The connection dropped.
   669     The usage parameter in the media .INI file is invalid.
   670     Cannot read the section name from the media .INI file.
   671     Cannot read the device type from the media .INI file.
   672     Cannot read the device name from the media .INI file.
   673     Cannot read the usage from the media .INI file.
   674     Cannot read the maximum connection BPS rate from the media .INI file.
   675     Cannot read the maximum carrier BPS rate from the media .INI file.
   676     The line is busy.
   677     A person answered instead of a modem.
   678     There is no answer.
   679     Cannot detect carrier.
   680     There is no dial tone.
   681     General error reported by device.
   682     ERROR WRITING SECTIONNAME
   683     ERROR WRITING DEVICETYPE
   684     ERROR WRITING DEVICENAME
   685     ERROR WRITING MAXCONNECTBPS
   686     ERROR WRITING MAXCARRIERBPS
   687     ERROR WRITING USAGE
   688     ERROR WRITING DEFAULTOFF
   689     ERROR READING DEFAULTOFF
   690     ERROR EMPTY INI FILE
   691     Access denied because username and/or password is invalid on the domain.
   692     Hardware failure in port or attached device.
   693     ERROR NOT BINARY MACRO
   694     ERROR DCB NOT FOUND
   695     ERROR STATE MACHINES NOT STARTED
   696     ERROR STATE MACHINES ALREADY STARTED
   697     ERROR PARTIAL RESPONSE LOOPING
   698     A response keyname in the device .INF file is not in the expected format.
   699     The device response caused buffer overflow.
   700     The expanded command in the device .INF file is too long.
   701     The device moved to a BPS rate not supported by the COM driver.
   702     Device response received when none expected.
   703     ERROR INTERACTIVE MODE
   704     ERROR BAD CALLBACK NUMBER
   705     ERROR INVALID AUTH STATE
   706     ERROR WRITING INITBPS
   707     X.25 diagnostic indication.
   708     The account has expired.
   709     Error changing password on domain.
   710     Serial overrun errors were detected while communicating with your modem.
   711     RasMan initialization failure. Check the event log.
   712     Biplex port is initializing. Wait a few seconds and redial.
   713     No active ISDN lines are available.
   714     Not enough ISDN channels are available to make the call.
   715     Too many errors occurred because of poor phone line quality.
   716     The Remote Access IP configuration is unusable.
   717     No IP addresses are available in the static pool of Remote Access IP addresses.
   718     PPP timeout.
   719     PPP terminated by remote machine.
   720     No PPP control protocols configured.
   721     Remote PPP peer is not responding.
   722     The PPP packet is invalid.
   723     The phone number, including prefix and suffix, is too long.
   724     The IPX protocol cannot dial-out on the port because the computer is an IPX router.
   725     The IPX protocol cannot dial-in on the port because the IPX router is not installed.
   726     The IPX protocol cannot be used for dial-out on more than one port at a time.
   727     Cannot access TCPCFG.DLL.
   728     Cannot find an IP adapter bound to Remote Access.
   729     SLIP cannot be used unless the IP protocol is installed.
   730     Computer registration is not complete.
   731     The protocol is not configured.
   732     The PPP negotiation is not converging.
   733     The PPP control protocol for this network protocol is not available on the server.
   734     The PPP link control protocol terminated..
   735     The requested address was rejected by the server..
   736     The remote computer terminated the control protocol.
   737     Loopback detected..
   738     The server did not assign an address.
   739     The remote server cannot use the Windows NT encrypted password.
   740     The TAPI devices configured for Remote Access failed to initialize or were not installed correctly.
   741     The local computer does not support encryption.
   742     The remote server does not support encryption.
   743     The remote server requires encryption.
   744     Cannot use the IPX net number assigned by the remote server. Check the event log.
   752     A syntax error was encountered while processing a script.

자신의 디렉토리에 사용자 제어권을 부여하고 그외의 사람은 접근할 수 없도록하기에서 필자는 서버의 사용자 폴더를 설정하는 두가지 방법을 설명했다.

만약 사용자에게 사용자 자신의 폴더내에의 하위 폴더를 생성/삭제할 권한을 부여하고 싶다면 친 폴더에 Creator Owner에대한 바꾸기 권한을 추가하고 하위 폴더에대한 권한을 바꾼다. 사용자는 자신의 최상위 폴더에대한 Creator Owner가 아니므로 이 들은 이 것을 삭제할 수 없을 것이다. 사용자가 생성한 임의의 새로운 하위폴더는 사용자가 생성한 하위 폴더를 삭제할 수 있는 Creator Owner(친 폴더를 설정할 수 있는 [RWX][RWXD]와 같은 다른 사용권한)를 상속받는다.

초보자의 경우: 탐색기에서 친 폴더(c:\Users)를 우측클릭하고 보안/사용권한을 클릭한다. 추가 버튼을 클릭하고 Creator Owner를 두번 클릭한다. 억세스 유형에서 바꾸기를 선택하고 확인을 클릭한다. 하위 디렉토리에대한 사용권한 바꾸기를 체크한다. 이미 RWXD를 가지고 있으므로 기존 파일에대한 사용권한 바꾸기의 선택을 취소한다. 확인을 클릭하고 다시 확인을 클릭한다. 또다른 방법은 명령행을 열고 다음과 같이 입력한다.

cacls \Path_to_Parent_Folder /T /E /C /G "Creator Owner":C

.EXE 파일을 다운 받을 수 없다면 HKEY_CLASSES_ROOT\exefile의 EditFlags이 부적당하게 설정되었기 때문일 것이다. 이 REG_BINARY 형의 데이타는 xx xx 00 xx와 같아야 한다(여기서 xx는 임의의 값이다). 만약 xx xx 01 xx로 설정되어 있다면 이 값을 변경하고 시스템을 다시 기동한다.

네트웍에대한 이벤트 기록을 감시하면 시스템 이벤트 기록이 다음과 같은 이벤트 ID를 포함한다는 메시지를 받을 수 있다.

ID 7009 접속할 서비스에대한 대기시간 종료(120000 밀리초)

ID 7000 서비스는 다음과 같은 오류때문에 시동할 수 없습니다.

서비스가 응답이 없습니다. 적당한 방법으로 요청을 처리할 수 없습니다.

이러한 오류들은 일반적으로 스스로 조정할 수 없는 사용자에의해 발생한다. 사용자가 로그온하고 바로 로그오프한다. 또한 서비스가 데스크탑과 상호 동작하도록 설정되어 있다면 이 서비스는 기동될 수 없으며 사용자는 다음과 같은 메시지를 받게된다.

Windows가 종료되었기 때문에 응용프로그램을 초기화할 수 없습니다.

이들이 다시 로그온 할때 서비스 제어 관리자(Service Control Manager: SCM)는 시스템 이벤트 로그에 두개의 이빈트를 기록한다.

로그온 스크립트를 종료하기전에 바탕화면이 읽혀지는가와 색다른 로그온 문제을 본다.