Netlogon.chg 文件的作用是什么？？
在NT ，2K Server的服务器中，都有这个文件，请问，这个到底有何作用？？下面是从微软网站上的资料：
The Netlogon.chg file is located on all domain controllers, but is used only by the primary domain controller (PDC) to keep track of changes made to the security databases. All changes to the security databases are recorded in this log file, along with the serial number of the change. Each of the three security databases maintains a separate serial number, which is incremented once for each change. When a backup domain controller (BDC) requests a particular change from the PDC, the PDC checks the change log to determine which changes need to be sent.
问题点数：0、回复次数：5Top
1 楼finnal（冰火）回复于 2003-02-04 13:54:06 得分 0
资料上说，它是存在在最初的域控制器上的，记录域改变轨迹作为安全数据库。当备份域控制器要求一个特别的改变时，就调用这个文件的纪录。Top
2 楼whoamiyxzh（印相纸）回复于 2003-02-04 14:20:08 得分 0
那可否将这个文件删除？ 删除后，下次登陆时系统会重建它吗？Top
3 楼finnal（冰火）回复于 2003-02-04 22:05:35 得分 0
这是NTFS格式下的方案：（翻译得不好，见谅）
找到systemroot文件夹右键点击 Netlogon.chg选择属性，然后选择〈安全〉标签，将对这个项目允许从父项获得的遗传许可（ Allow inheritable permissions from parent to propagate to this object ）前的钩去掉。在安全对话框中点击复制（Copy）将现有的遗传许可保存到这个项目。点击系统账号，点击拒绝，将所有的控制许可设置为拒绝。然后重新启动计算机，删除Netlogon.chg文件，然后重新启动Netlogon.chg 文件会自动重建。
To delete (reset) the Netlogon.chg file on an NTFS partition, use the following steps:
Open Windows Explorer, and then navigate to the %systemroot% folder.
Right-click the Netlogon.chg file, and then click Properties.
Click the Security tab.
Click to clear the Allow inheritable permissions from parent to propagate to this object check box, and then click OK.
In the Security dialog box, click Copy to copy the existing inheritable permissions to this object.
Click the System account, click Deny - Full Control to change all of the permissions to Deny, and then click OK.
Restart the computer. After you log on to the computer, delete the Netlogon.chg file.
Restart the computer again. When you log on the computer, the Netlogon.chg file is rebuilt automatically.
Top
4 楼finnal（冰火）回复于 2003-02-04 22:11:06 得分 0
这是fat下的方案：
启动计算机进入dos模式，删除 %systemroot%文件下的Netlogon.chg 文件重新启动进入windows NT（2000)就会重新建立Netlogon.chg 文件。
Start the system using MS-DOS, and then delete the %SystemRoot%\Netlogon.chg file.
Restart using Windows NT. The file will be recreated at startup.
Top
5 楼finnal（冰火）回复于 2003-02-04 22:16:10 得分 0
这是NTFS格式下的方案：（重新翻译了，要比刚才的好）
找到systemroot文件夹右键点击 Netlogon.chg选择属性，然后选择〈安全〉标签，将对这个项目允许将来自父系的可继承权限传播给该对象（ Allow inheritable permissions from parent to propagate to this object ）前的钩去掉。在弹出的安全对话框中点击复制（Copy）将现有的遗传许可保存到这个项目。在权限控制中将所有的控制许可设置为拒绝。然后重新启动计算机，删除Netlogon.chg文件，然后重新启动Netlogon.chg 文件会自动重建。
To delete (reset) the Netlogon.chg file on an NTFS partition, use the following steps:
Open Windows Explorer, and then navigate to the %systemroot% folder.
Right-click the Netlogon.chg file, and then click Properties.
Click the Security tab.
Click to clear the Allow inheritable permissions from parent to propagate to this object check box, and then click OK.
In the Security dialog box, click Copy to copy the existing inheritable permissions to this object.
Click the System account, click Deny - Full Control to change all of the permissions to Deny, and then click OK.
Restart the computer. After you log on to the computer, delete the Netlogon.chg file.
Restart the computer again. When you log on the computer, the Netlogon.chg file is rebuilt automatically.
Top
