I-Group Policy ayikho ku-VPN? Hlola ububanzi ngaphambi komhubhe

Into ebesebenza kunethiwekhi yasehhovisi iyeka ukusebenza ngesonto lapho umsebenzisi eqala ukusebenza nge-VPN, futhi umhubhe usolwa ngaphambi kokuba noma ubani avule umbiko. I-Group Policy inquma ukuthi yiziphi izilungiselelo ezifinyelela kumsebenzisi nekhompyutha ye-Windows, ithatha impahla esizindeni futhi yenza ukucubungula ohlangothini lweklayenti, futhi lezi zinyathelo ezintathu zehluleka ngezindlela ezintathu ezihlukene. Umhubhe ushintsha kuphela ukuthi iklayenti linandlela iphi. Ukudlula izivivinyo ngokulandelana kuvimbela inkinga yemvume yefayela ukuthi ingalandelwa njengenkinga yomzila.

Qala ngesilungiselelo, hhayi ngomhubhe

Bhala i-GPO eyodwa elindelekile kanye nesilungiselelo esisodwa esiqondile kuyo, bese unquma ukuthi leso silungiselelo siku-Configuration Yomsebenzisi noma ku-Configuration Yekhompyutha. Lokhu kucabanga iklayenti le-Windows eligunyaziwe nelixhunywe esizindeni ku-VPN evunyelwe, hhayi idivayisi engaphethwe noma esemafwini kuphela eyenziwa ilungu lesizinda. Impendulo yobubanzi inquma ukuthi ubani angafunda umphumela nokuthi ukukhushulwa kwegunya kuyadingeka yini, ngakho xazulula lokho ngaphambi kokusebenzisa noma yini.

Buza umphathi wesizinda ukuthi yisiphi isixhumanisi, indawo yento, izihlungi zokuphepha kanye nezihlungi ze-WMI okufanele zisebenze. Ukushintsha lezo zilawuli ukuze isivivinyo siphumelele kungumsebenzi ohlukile onomnini ohlukile.

Funda umbiko nge-akhawunti engumnikazi wesilungiselelo

Kuseshini yomsebenzisi othintekile uqobo, sebenzisa whoami /user bese kuba gpresult /scope user /r. I-akhawunti eyaqinisekisa i-VPN akuyona ngokuzenzakalela i-akhawunti ye-Windows ocwaninga inqubomgomo yayo, futhi ukuhlola okuvela ku-akhawunti yomphathi kuphendula omunye umbuzo. Gcina isisekelo ngaphansi kwegama lefayela elisha, njenge-%TEMP%\vpn-policy-user-before.html. isithenjwa se-gpresult sichaza izishintshi zobubanzi nokukhiphayo, futhi kuhle ukwazi ukuthi ukukhiqiza umbiko akukuvuseleli lutho.

Inqubomgomo yekhompyutha inobubanzi bayo kanye nomongo wayo wemvume, ngakho yihlole ngokwehlukile ngokukhushulwa okudingekayo. Ukuhlanganisa zombili izindawo emibikweni eyodwa yindlela okumenyezelwa ngayo ukuthi isilungiselelo somsebenzisi asikho kuyilapho singakaze sibe kuleso sikhathi.

Ukuthola akulona ukufinyelela: kuqala amarekhodi e-SRV, bese kuba i-SMB

Uma i-VPN evunyelwe ixhunyiwe, qinisekisa ukuthi iklayenti lixazulula izilawuli zesizinda ngendlela ye-DNS ehlosiwe; iwebhusayithi yomphakathi elayishayo ayisho lutho mayelana nokutholakala kwezilawuli. Esizindeni sesibonelo corp.example, nslookup -type=SRV _ldap._tcp.dc._msdcs.corp.example siphendula umbuzo onawo ngempela. Irekhodi lesevisi elibuyisiwe liwubufakazi bokuthola kuphela, ngoba ikheli lesilawuli esikhethiwe kusafanele lifinyeleleke ngokuqinisekisa okudingekayo kanye nezinsizakalo zohlu oluvunyelwe. Impahla yenqubomgomo bese ivela ku-SYSVOL, okuwukufunda kwe-SMB mayelana naleso silawuli esithile hhayi ukuhlolwa kwe-ICMP.

Ubufakazi obuthaka kulula ukubuthatha njengobufakazi. Impendulo ye-ICMP evela kwisilawuli, eduze nokufundwa okunqatshiwe kwesifanekiso senqubomgomo, kukhiqiza umbiko obonakala ungenalutho ngesizathu okungakaxhunyaniswa muntu.

Gcina izimvume zensizakalo ye-AD, izindlela zokubuya kanye nokuvumelanisa isikhathi kokusetshenziswayo kuhambisana, esikhundleni sokukufaka esikhundleni ngokuvula unqamazwe wonke noma ngenseva ye-DNS yomphakathi. Idatha yenqubomgomo ehluka phakathi kwezilawuli iwumbuzo wokukopisha kumnikazi wohlu.

Ukuvuselela okukodwa, imibiko emibili, ukuqhathanisa okukodwa

Uma indlela isiqinisekisiwe, cela ukuvuselela okufanele nge-gpupdate /target:user bese ufunda umphumela esikhundleni sokuwucabanga. Ukuvuselela okuzenzakalelayo kusebenzisa inqubomgomo eshintshiwe kuyilapho i-/force icela ukusetshenziswa kabusha; akukho kokubili okulungisa i-DNS, izimvume zefayela noma ukuhlunga. Ezinye izandiso ziqedwa kuphela ekungeneni okulandelayo noma komunye umcimbi wangaphambili, ngakho ukugijima kanye akusona isinqumo. Ukwengeza izishintshi zokuphuma noma zokuqala kabusha kuseshini yomsebenzisi okude njengokuxilonga okujwayelekile kulahla noma yini ebiyivuliwe.

Khiqiza umbiko wesibili ngaphansi kwegama lefayela elihlukile bese uqhathanisa isikhathi sokucubungula, i-GPO elindelekile, isimo sayo esisetshenzisiwe noma esenqatshiwe kanye nesilungiselelo uqobo. Umbiko ovela kuseshini ephumelelayo yangaphambili awufakazi lutho mayelana nalokhu kuvuselela. Inqubomgomo ehlungiwe ikhomba ekusebenzeni hhayi ekuthuthukisweni, okushintsha ukuthi ubani ongumnikazi wesinyathelo esilandelayo.

Hlanganisa ukwehluleka nomsebenzi owodwa

Kusibonisi Sezehlakalo, qala ngesixwayiso noma ngephutha le-Group Policy kurekhodi Yesistimu, bese udlulela kurekhodi yokusebenza ye-GroupPolicy ngaphansi kwamarekhodi Ezinhlelo Nezinsizakalo. Hlunga lelo rekhodi lokusebenza ngesikhombisi somsebenzi wokuvuselela okusanda kusetshenziswa, ngoba ukuvuselela okusha kuthola isikhombisi esisha futhi ukukuxuba nezehlakalo zayizolo kuveza isiphetho esiqinisekile kodwa esingalungile. Rekhoda isikhathi, umongo womsebenzisi noma wekhompyutha, isilawuli esikhethiwe, i-GPO, ikhodi yephutha kanye nokuncika okwehlulekile.

Leyo rekhodi iyona umnikazi wenethiwekhi noma wohlu angasebenza kuyo. Ukuxhumeka ku-VPN nokusebenzisa i-gpupdate izikhathi eziningi akubona ubufakazi, futhi akukho kokubili okusinda ekudlulisweni.

Gcina imibiko ye-HTML iyimfihlo, ngoba iveza amagama angaphakathi, ubulungu beqembu kanye nokucushwa kwezokuphepha. Uma isilungiselelo sesiqinisekisiwe, susa izimvume zesikhashana ozingezele esikhundleni sokuzishiya zikhona.