Sababta Windows ugu soo bandhigo password-ka VPN server fayl

Windows waxa uu kor u qaadi karaa tunnel kadibna u soo bandhigi karaa isla akoonkaas server fayl aan waligiis maqal. Gateway-ga wuu aqbalay gelitaanka; wadaagistu ma aqbalin, oo password-ka dib u qorista waxba ma beddesho. Daminta kaydinta aqoonsiga kombuyuutarka oo dhan waxay u eg tahay xalka mana aha. Xiriirka RAS ee asalka ah waxa uu qaadaa shidde ku saleysan profile kasta oo si sax ah u muujiya ujeeddadan.

Aqoonso akoonkee la diiday

Akhri codsiga halkii aad iska dhaafi lahayd. Magaca server-ka ee wadahadalka, domain-ka lagu daabacay magaca isticmaalaha agtiisa, iyo haddii codsigu yimid tunnel-ka ka hor ama ka dib — mid kastaa meel kale ayuu tilmaamayaa. Guuldarro sheegta wadaagis ma aha mid la mid ah tan sheegta martigeliyaha.

Ka hor inta aadan ka doodin aqoonsiga, hubi in kheyraadku jawaabo. Waddo maqan, khalad xuruufeed magaca server-ka iyo akoon aan lahayn fasax wadaagis waxay soo saaraan saddex calaamadood oo kala duwan, oo kaliya tan ugu dambeysa ayaa khuseeya aqoonsiga Windows soo bandhigay. Hubi haddii akoonka la diiday uu yahay akoonka gateway-ga. Haddii gelitaanka VPN uu yahay aqoonsi marin fog oo u leh gateway-ga halkii uu ahaan lahaa akoon hagaha, server faylku ma laha sabab uu ku garto, oo isla password-ka dib u qorista waxay kaliya ku celisaa isla diidmadaas. Farqigaas ayaa go'aamiya haddii qaybta xigta ay adiga kugu khuseyso.

Deji UseRasCredentials hal profile

Goobtu waa UseRasCredentials, qiimaha eberna wuxuu ka hortagaa in xiriirkaas kaliya u soo bandhigo aqoonsigiisa RAS kheyraadka shabakadda. Isbeddelku wuxuu ku xaddidan yahay hal profile, waana taas arrinta oo dhan: waxa uu leeyahay hal macne oo diiwaangashan oo wax kale oo mishiinka ah ma taabto.

Siyaasadda amniga ee xannibta aqoonsiga kaydsan ee xaqiijinta shabakadda waxay samaysaa ka soo horjeeda, sababtoo ah waxay khusaysaa xiriir kasta oo kombuyuutarka ah. Isticmaalka halkan waxay beddeli lahayd dhaqanka kheyraad kasta oo isticmaaluhu todobaadka danbe furto, sidaas darteed waxay ka baxsan tahay dayactirkan. UseRasCredentials sidoo kale waa sifo RAS, marka macmiil dhinac saddexaad oo maamula aqoonsigiisa ayaa iska indhatiri doona. Macmiiladaas, dukumeentiga iibiyaha ayaa ah awoodda kaliya ee ku saabsan haddii dhaqanka la beddeli karo. Hubi macmiilkee baa leh xiriirka ka hor inta aadan tafatirin fayl uusan macmiilkaas waligiis akhrin.

Tafatir buugga telefoonka ee leh xiriirka

Ka hor inta aadan furin tafatire, hel buugga telefoonka ee leh xiriirka. Xiriirka isticmaaluhu sameeyay waxa uu ku yaal waddada xogta abka wareegta, tan loo sameeyay isticmaalayaasha oo dhan waxay ku taal hagaha xogta barnaamijyada; labada fayl waa madax banaan yihiin. Tafatirka kan qaldan waxba ma beddelo, oo guuldarraduna isku mid bay u muuqataa ka dib.

Liis soo bandhig labada goobood oo xaqiiji waddada buuxda ee faylka aad rabto inaad tafatirto. Fayl ku jira profile qaldan waa la iska indhatiri doonaa xitaa ka dib markaad si sax ah u beddesho, oo guuldarrada labaad waxay u egtahay sidii tii ugu horreysay.

Get-ChildItem "$env:APPDATA\Microsoft\Network\Connections\Pbk"
Get-ChildItem "$env:PROGRAMDATA\Microsoft\Network\Connections\Pbk"
Copy-Item "$env:APPDATA\Microsoft\Network\Connections\Pbk\rasphone.pbk" "$env:APPDATA\Microsoft\Network\Connections\Pbk\rasphone.pbk.bak"
Select-String -Path "$env:APPDATA\Microsoft\Network\Connections\Pbk\rasphone.pbk" -Pattern "UseRasCredentials"

Qaybta sita magaca xiriirka saxda ah gudaheed, shidduhu waa hal sadar. Beddel qiimahaas oo kaliya, qayb kasta oo kalena u dhaaf sidii ay ahayd.

UseRasCredentials=1   becomes   UseRasCredentials=0

Beddelka faylka oo dhan ee xiriir kasta oo buugga telefoonka ku jira ma aha isbeddel hal profile, wuxuuna soo baxaa toddobaadyo ka dib marka qof uu cilad ka raadiyo tunnel aan xiriir la lahayn. Hayso kaydka faylka agtiisa ilaa isbeddelka la xaqiijiyo. Haddii qalabka la maamulo, dejinta waa in laga beddelo baahinta leh, ma aha fayl ku jira profile isticmaalaha. Noocyada Windows ee la taageeray waxay soo bandhigaan mid u dhigma profile kasta iyada oo loo marayo bixiyaha adeegga habaynta VPNv2, oo shuruudaha nooca ay tahay in si gooni ah loo hubiyo shuruudaha bixiyaha guud ahaan.

Ku xaqiiji isku day cusub

Gooy xiriirka, xir fadhigii furan, oo mar kale isku day. Darawal la calaamadeeyay oo jira ama gacan fayl oo furan waxay sii wadi karaan isticmaalka aqoonsiga ay horey u xaqiijiyeen, sidaas darteed wax kasta oo ka shaqeeya fadhi hore waxba kama caddeeyo isbeddelka. Marka hore xaqiiji qiimaha la tafatiray, oo la soco macne ku filan oo muujinaya qaybta uu ka tirsan yahay.

Select-String -Path "$env:APPDATA\Microsoft\Network\Connections\Pbk\rasphone.pbk" -Pattern "UseRasCredentials=0" -Context 4,0

Kadib xaqiiji aqoonsiga kheyraadku dhab ahaan helay. Wadaagis weli diidda gelitaanka akoonka saxda ah waa dhibaato fasax, oo jawaabtu waxay ku jirtaa diiwaanka server faylka laftiisa. sharraxaadda diiwaangashan ee dejintan waxay dabooshaa baahinta halkaas oo aqoonsiga VPN uu ka duwan yahay aqoonsiga hagaha, waana mudan in la akhriyo ka hor inta aadan u malayn in goobtu khuseyso macmiilkaaga. Diiwaangeli isbeddelka, waddada buugga telefoonka iyo akoonka uu kheyraadku hadda arko, sababtoo ah qofka xiga ee la kulma tan wuxuu ka bilaabaa jahawareerkaas.