Ukwethemba kwesizinda kwehlulekile ngemva kwenyanga ngaphandle kwe-intanethi? Hlola kuqala

I-laptop ihlala amasonto ayisithupha ngaphandle kwe-VPN, iphinde ibuye, futhi umsebenzisi akakwazi ukungena nge-akhawunti yesizinda. Iphutha likhuluma ngobudlelwane bokwethemba, ngakho othile usetha kabusha i-akhawunti yekhompyutha, noma uphoqa umsebenzisi ukuba aye emhubheni ogcwele, futhi inkinga ibonakala inyamalala. Akukho senzo esikhombisa ukuthi yini eyayiphukile. Ilungu le-Windows lingahlala ngaphandle kwe-intanethi isikhathi eside kakhulu kunangesikhawu esijwayelekile sephasiwedi yomshini ngaphandle kokulahlekelwa ukwethemba ngokuzenzakalela, ngakho umsebenzi wokuqala ukuhlukanisa ukwehluleka kokufinyelela nokungafani kwangempela kwemfihlo.

Iphutha libukeka njengokwethemba, kodwa izimo ezintathu ziyafana

Umsebenzisi angase angene ngolwazi lwesizinda olugciniwe, isiteshi somsebenzi singase singakutholi isilawuli sesizinda, noma ilungu nesizinda kungase kungavumelani ngempela nge-akhawunti yekhompyutha. Eyesithathu kuphela ubudlelwane bokwethemba obuphukile ngomqondo oqinile.

Impilo yokuphindwa kwe-AD ingumbono wesine, futhi ayihlobene neze nalesi siteshi somsebenzi. Ichaza ukuvumelana phakathi kwezilawuli zesizinda, futhi idashibhodi yokuphindwa enempilo ayikhombisi ukuthi imfihlo yendawo yalo mshini ihambisana ne-akhawunti yayo yekhompyutha.

Okuzenzakalelayo okujwayelekile kwezinsuku ezingu-30 kuyinqubomgomo yoshintsho, hhayi umnqamulajuqu wokuphelelwa ngaphandle kwe-intanethi. Incazelo ye-Microsoft yephasiwedi ye-akhawunti yomshini ichaza inqubo yoshintsho edidiyelwe, futhi inhlangano ingakwazi ukuhlela isikhawu esihlukile.

Isithonjana se-VPN asikhombisi lutho ngomzila ovikekile

Ukuxhumana kufanele kube kuhle ngokwanele ukufinyelela izinsizakalo zesizinda ngaphambi kokuba noma yiluphi uvivinyo lusho okuthile. Lokho kusho isixazululi se-DNS sesizinda esihlosiwe, isilawuli esitholakalayo, izinsizakalo zokuqinisekisa ezifinyelelekalayo kanye newashi eliseduze ngokwanele kwe-Kerberos.

Umhubhe ogcwele ungaba umklamo ovumelekile ngokuphelele lapha. Ukushintshela kumhubhe ohlukanisiwe akusona isimo esidingekayo kubudlelwane besizinda obunempilo, futhi ukukuthatha njengalokho kuguqula ukuxilonga kube ushintsho lwesakhiwo. Hlola ukuthi yisiphi isilawuli isiteshi somsebenzi esikhetha ngempela, futhi gcina lelo gama kanye nephutha.

nltest /dsgetdc:corp.example.com
Test-ComputerSecureChannel -Verbose

Bhala iseva ye-DNS, isilawuli esixazululiwe kanye nombhalo oqondile wephutha. Iklayenti le-VPN elibika ukuthi lixhunyiwe likutshela ukuthi umhubhe ukhona, hhayi ukuthi indlela yesizinda iyasebenza. Isilawuli esiphendula embobeni ye-Kerberos kodwa hhayi embobeni yohlu lwamabhuku ukuthola kwe-firewall, hhayi ukuthola kokwethemba.

Vivinya ilungu ngaphambi kokulilungisa

Emlungwini wesizinda se-Windows ogunyaziwe, i-Test-ComputerSecureChannel -Verbose ukuhlola kokufunda kuphela komzila phakathi komshini nesizinda. Yisebenzise esimweni somshini oyopayo, hhayi kusilawuli sesizinda, esinendima ehlukile nemithetho ehlukile yokubuyisela. Bhala okukhiphayo kanye nesimo sokuphuma esikhundleni segama elithi kudlulile noma kwehlulekile. Uma i-cmdlet ingekho kuleyo build, imojuli iyinkinga ehlukile.

Umphumela usadinga umongo. Uma umshini ungeke ukwazi ukufinyelela noma ukuqinisekisa kusilawuli esikhethiwe, uvivinyo olwehlulekile akubona ubufakazi obuzimele bokuthi iphasiwedi yangaphandle kwe-intanethi iphelelwe yisikhathi. Gcina iphutha langempela nesilawuli esisetshenzisiwe, futhi phinda uvivinyo uma indlela isaziwa njengenhle.

Hlanganisa izehlakalo ze-Netlogon elungwini nakusilawuli esifanele ezungeze isigameko. Gcina igama lomshini, ikheli lomthombo, isikhathi kanye nobufakazi bakho kokushintshwa kwe-akhawunti. Ukungena okuphumelelayo komunye umsebenzisi, noma idashibhodi yesilawuli enempilo, akukwazi ukuthatha indawo yokushintshana kwalolu mshini.

Lungisa kuphela ubudlelwane obukufakazile

Uma ukuxhumana sekuzinzile futhi umphathi eqinisekisile ukuthi ukulungisa kufanelekile, imodi ye-Repair ye-cmdlet enemininingwane yokuqinisekisa egunyaziwe iwumsebenzi oyedwa osekelwayo wesiteshi somsebenzi esiyilungu. Ishintsha ubudlelwane, futhi akuwona omunye uvivinyo lokufunda kuphela.

Gcina i-akhawunti yokubuyisela yendawo egunyaziwe kanye nendlela yokuphatha itholakala ngaphambi koshintsho. Izilawuli zesizinda zinendima ehlukile yokubuyisela futhi le nqubo akufanele izithathe njengeziteshi zomsebenzi ezijwayelekile. Sebenzisa uhlelo lokubuyisela lwenhlangano esikhundleni sokuqalisa amathuluzi amaningi okusetha kabusha ngokulandelana nokwethemba ukuthi elilodwa lawo lilungile.

Ngemva kokulungisa, qinisekisa uvivinyo olusha lomzila ovikekile kanye nokusebenza kwesizinda kwasekuqaleni. Gcina amaphrofayili abasebenzisi kanye nesimo sezinhlelo zokusebenza, futhi ungenzi ukususa-nokujoyina futhi kube isenzo sokuqala esingachazwanga.

Okumele kuhlolwe uma ukwehluleka kubuya

Uma ukwehluleka kubuya, bheka ukuhlehla, ubunikazi obuphindiwe kanye nesikhathi sezinguquko ze-akhawunti esikhundleni sokusetha kabusha i-akhawunti efanayo futhi. Isithombe esibuyisiwe, isithombe sesikhashana, ubunikazi bomsini obukotshiwe, noma ukusethwa kabusha kwe-akhawunti yekhompyutha okwenziwe kwenye indawo konke kufanele kuphenywe.

Ukusetha kabusha okuphumelelayo kwesikhashana kubufakazi obusizo bokubuyisela, kodwa akubona ubufakazi bokuthi i-VPN ephazamisekayo yabangela ukungafani kwasekuqaleni. Ukwenzeka okulandelayo yikho okuzokutshela ukuthi imbangela yake yasuswa.

Bhala isilawuli, iseva ye-DNS kanye nokukhiphayo kovivinyo kwithikithi. Lowo mbhalo yiwo ohlukanisa ukwehluleka kokwethemba kwangempela ne-laptop engakwazanga ukuthola isizinda.