Bootstrap noma i-GPO: izindlela ezimbili zephrofayela ye-VPN ye-Windows
Iphrofayela esatshalaliswa nge-GPO ayikwazi ukuba ukuphela kwendlela yokufinyelela isabelo esiyisatshalalisayo. Hlukanisa ukufakwa kokuqala nokubuyekezwa okuvamile, bese uhlanganisa zombili ndawonye ngenguqulo.
Pusha iphrofayela ye-VPN kusuka kwisabelo sedomaini futhi konke kuyasebenza, kuze kufike ikhompyutha ephathekayo engakwazi ukufinyelela idomaini. Ngaleso sikhathi ukulethwa kuncike ekuxhumekeni okwenzelwe ukuthi iphrofayela ikudale. Umuntu ophethe leyo khompyutha usendaweni lapho ideski losizo lingamboni. Phatha ukufakwa kokuqala nokubuyekezwa okuvamile njengezindlela ezimbili ezihlukene zephakethe elilodwa, ngoba zombili zihluleka ngezindlela ezingenalutho olufanayo.
Ukufakwa kokuqala kuyinkinga ehlukile
Izigameko ezimbili zibalulekile, futhi kungenye kuphela eyenzeka lapho inethiwekhi isebenzisana. Ithebula lihlukanisa ngokuthi yini etholakalayo, yini eqala umsebenzi, nokuthi ngokuvamile kuhamba kanjani kabi.
| First install | Routine update | |
|---|---|---|
| Network reachable | Something other than the VPN being installed | The domain or a management channel |
| Trigger | Enrollment, imaging, or a prepared package | A policy refresh or a management push |
| Usual failure | No route to the package at all | Duplicate profiles, or a change that silently does nothing |
Into eyodwa ebuyekezwe ingasebenzela zombili izindlela; umbono mayelana nokuxhumeka awukwazi ukwabiwa. Iskripthi sokuqala sifihla lowo mbono ngenkathi sigijima etafuleni kunethiwekhi yenkampani, futhi siwudalula ensimini. Iskripthi asinasici, sicelwa nje ukuba sigijime lapho kungekho muntu owaklama khona.
Iphakethe kumele libe nakho
Nquma izinto ezinhlanu ngaphambi kokupakisha: iyiphi indlela yephrofayela ye-Windows esekwayo, ukuthi ububanzi bungobomsebenzisi noma bobudivayisi, yimaphi amasertifikhethi noma izingxenye zeklayenti eziyizimfuneko, uthini umhlahlandlela wephrofayela, futhi yisiphi isenzo esiyisebenzisayo. ProfileXML iyindlela esekwayo yokuveza izilungiselelo ze-VPN, ilethwa nge-CSP ye-VPNv2, futhi umhlahlandlela we-Microsoft wezinketho zephrofayela ubala okungase kube nakho. Noma yini engaphandle kwalolo hlu iyisinqumo osithatha ngaso leso sikhathi.
Amapharamitha eskripthi sosizo ngawaleso skripthi. Amagama afana ne-xmlFilePath noma i-AllUserConnection ayizinqumo zombhali oyedwa, hhayi izinga elilandelwa yibo bonke abafaki; ukuwakhopshela kwesinye iskripthi kunikeza umyalo obonakala ulungile futhi angenzi lutho.
Gcina iskripthi nomhlahlandlela ngaphansi kwenguqulo eyodwa, futhi uhlole ukuthi kokubili kuvelaphi kanye nezimvume zazo. Iskripthi sokuqala esinegunya esitholakala sifundeka ku-SYSVOL asikahlolwa, futhi ukusatshalaliswa ngenqubomgomo akulona ukuhlola.
Ukuthola ukuxhumeka kokuqala
Ukufakwa kokuqala kwenzeka ngenkathi idivayisi isafinyeleleka ngenye indlela: inethiwekhi egunyaziwe, isiteshi sokuphatha esivele sikhona, noma inqubo yokubhalisa eyenzelwe lokhu. Amasertifikhethi nezimfuneko zokuthembela zendlela yokuqinisekisa ekhethiwe zingezephakethe elifanayo, ngoba akukho okungalethwa nge-tunnel engakabi khona. Buza ukuthi yisiphi kulezi ziteshi ezintathu esingokoqobo kulo msebenzisi ngaphambi kokuba othile athembise usuku. Isiteshi esikhona ephepheni kuphela siphenduka ucingo oluvela ensimini.
Bhala ukuthi uchwepheshe noma umsebenzisi wenzani ngempela ngaleso sikhathi. Uma impendulo ithi i-IT ixhumanisa kude ukuze isize, khona-ke indlela yokufakwa kokuqala incike ngokuthula kwelinye ithuluzi lokufinyelela kude okufanele nomunye umuntu alihlinzeke futhi alisekele.
Izibuyekezo zidinga isimo esaziwayo
Lapho umshini ufinyelela idomaini, inqubo evamile yedomaini noma yokuphathwa kwamadivayisi ingathatha izintambo. Amaphutha angena ebubanzini, ngoba iskripthi sokuqala sigijima kumongo womshini, kuyilapho isenzo sokungena somsebenzisi nesenzo sokuphatha idivayisi kungahluka ngobubanzi nangezimvume.
Ukufakwa kokuxhumeka kwabo bonke abasebenzisi akulona i-tunnel yedivayisi ngaphambi kokungena, noma amagama asikisela ini. Ama-tunnel edivayisi anezimfuneko zawo zeplathifomu, iphrothokholi nezicilelo, futhi ukufunda lezo zimfuneko yiyo kuphela indlela yokwazi ukuthi i-tunnel ngaphambi kokungena iyenzeka yini lapha. I-tunnel yomsebenzisi eqala lapho kungena inikeza isiqinisekiso esihlukile.
Yenza indlela yokubuyekeza iphindeke: thola iphrofayela esevele iphathwa, gcina izintandokazi zomsebenzisi ezihlosiwe, sebenzisa umhlahlandlela ohambisanayo futhi bika umphumela ocacile. Ukwakha iphrofayela entsha kukho konke ukuvuselelwa kwenqubomgomo yikho okwenza umshini ugcine unokufakwa okuhlanu nomsebenzisi okhetha okungalungile.
Irekhodi elikugcina kusekelwa
Izihele ezintathu zingezokudluliselwa: ukuthi idivayisi esanda kukhishwa ithola kanjani ukuxhumeka kwayo kokuqala, ubani ovunyelwe ukushintsha iphakethe, nokuthi umphathi uhoxa kanjani kushintsho olungahambisani. Uma lezi zibhaliwe, ukusatshalaliswa akusanciki kumuntu osevele enokufinyelela okufanele kunikezwe.
Gcina leyo rekhodi eduze kwenguqulo yephakethe futhi ubuyekeze kokubili kushintsho olulodwa. Uma kungenjalo umuntu olandelayo wakha kabusha indlela ye-bootstrap kusuka kwithikithi elavalwa ngonyaka odlule.