Ukuxhuma i-VM ye-Azure ku-Entra Domain Services: qala ngokunquma
Izinqumo ezintathu zandulela ukuxhuma: imodeli yedirectory edingwa umsebenzi, i-DNS yangasese exazulula isizinda, kanye ne-akhawunti ekwazi ukuqinisekisa.
Izinqumo ezintathu zimi phambi kwe-VM ye-Windows Server okumele isebenzise idirectory elawulwayo, futhi umyalo wokuxhuma ngowona mncane kuzo. Khetha imodeli yedirectory engalungile futhi ukuxhuma kuyaphumelela kuyilapho uhlelo lokusebenza lusengakwazi ukuqinisekisa. Phazamisa ukuxazululwa kwamagama futhi ukwehluleka kuvela endaweni ebukeka njengenkinga yobufakazi.
Nquma imodeli, ukuxazulula ne-akhawunti ngaphambi kokuthinta iseva, bese umyalo ugijima kanye.
Yikuphi kokuxhuma okuthathu okufunayo ngempela
Ukuxhuma kwedivayisi kubhalisa umshini ku-Microsoft Entra ID ukuze kube nokufinyelela okunemibandela nokungena kanye, futhi akuniki umsebenzi ithikithi le-Kerberos eliya esizindeni sesitayela sasendaweni. Ukuxhuma kwesizinda kwendabuko kubopha into yekhompyutha kudirectory futhi kunikeza i-akhawunti yomshini, inqubomgomo yeqembu nokuqinisekiswa kwesizinda. Isizinda esilawulwayo sinikeza leyo modeli yesibili njengesiphakamiso. Amagama azwakala efana futhi imiphumela ayifani.
Kungamabili okugcina kuphela afaka isilawuli sesizinda ngomqondo ojwayelekile, futhi yisiphakamiso esilawulwayo kuphela esisusa amaseva ohlwini lwakho lwamaphakethe.
Isinqumo ngokuvamile sincike kuhlelo lokusebenza hhayi ekuthandeni. Isofthiwe efuna ukubopha kwe-LDAP, i-akhawunti yesevisi ene-SPN, noma izinto zenqubomgomo yeqembu iyingxenye yemodeli yesizinda. Isofthiwe edinga kuphela ukwazi ubunikazi bomsebenzisi kudivayisi yenkampani ngokuvamile ayiyona ingxenye.
| Model | What the server gets | Where it appears |
|---|---|---|
| Entra device join | Device identity and conditional access signals | Microsoft Entra ID |
| Managed domain join | Machine account, Kerberos, group policy | The managed directory |
| Self-hosted AD DS | The same, plus every controller you operate | Your own forest |
Indlela ye-DNS inquma ukuthi ukuxhuma kungaqedwa yini
Ukuxhuma kwesizinda kuqala ngokuseshwa kwesitholi samarekhodi esilawuli sesizinda, ngakho ukuxazululwa kwamagama kumele kusebenze ngaphambi kokuba noma yibuphi ubufakazi buhlolwe. Khomba i-VM kumakheli edirectory esizinda esilawulwayo, kungaba ngezilungiselelo ze-DNS zenethiwekhi ebonakalayo noma ngomdlulisi onemibandela othumela kuphela leyo ndawo yamagama lapho. Umdlulisi olinganiselwe endaweni yamagama ngokuvamile uyisinqumo esiphephile, ngoba ushiya ukuxazululwa okusele kwe-VM kunjalo.
Hlola isitholi hhayi igama lomsingathi elingenalutho. I-ping egameni lesizinda ayifakazeli cishe lutho, kuyilapho umbuzo we-SRV wamarekhodi esilawuli sesizinda kungaba ubuyisela izinhloso ezilindelekile noma wehluleke ngokushesha:
Resolve-DnsName -Name "_ldap._tcp.dc._msdcs.ds.corp.example" -Type SRV -Server 10.20.0.4
Test-NetConnection -ComputerName 10.20.0.4 -Port 53Shintsha igama lesizinda namakheli amabili ngamanani avela kusimo sesizinda sakho esilawulwayo; izinombolo lapha ziyizibonelo. Uma umbuzo ubuyisela izimpendulo zesinye isifunda, i-VM isebenzisa isixazululi esingadlulisi indawo yamagama elawulwayo, futhi noma ngabe ukuxhuma kuphindwa kangaki lokho ngeke kushintshe.
Gcina umsebenzi ngaphandle kwesubneti egcinwa isizinda esilawulwayo sezinsiza zaso zesevisi, futhi gcina amachweba edirectory endleleni yangasese. Ukuveza lawo machweba emphakathini akusona isiqondiso; kuwumklamo ohlukile onephrofayela yengozi ehlukile.
Ukufaneleka kwe-akhawunti kuhlolwa ngaphambi komshini
I-akhawunti eyenza ukuxhuma idinga imvume yokwakha into yekhompyutha esitsheni esihlosiwe, futhi kumele ikwazi ukuqinisekisa esizindeni esilawulwayo. I-akhawunti yefu kuphela eyakhiwe ngaphambi kokuba isizinda esilawulwayo sibe khona ingase intule izinto ezitholakala kwiphasiwedi edingwa isizinda, futhi ukushintsha noma ukusetha kabusha iphasiwedi kuyikhiqiza kabusha. Leyo ncazelo ichaza ikilasi lokwehluleka kokuxhuma okubukeka njengamaphasiwedi angalungile lapho iphasiwedi ilungile. Hlola ubufakazi esizindeni ngaphambi kokuba iwindi lesondlo livulwe.
Ama-akhawunti ahlanganisiwe avumelanisiwe anezimiso zawo zangaphambili into yomsebenzisi ebonakalayo engayigcwalisi yodwa. Ukufakwa ohlwini lwedirectory akufani nokukwazi ukuthola ithikithi kulo, ngakho hlola i-akhawunti ngaphambi kwewindi lesondlo hhayi phakathi kwalo.
Delegela ilungelo lokuxhuma ngokuncane. Ukunikeza wonke umsebenzisi wesiseva wesikhathi esizayo ubulungu bomlawuli wesizinda ukuze kwenzeke ukubhaliswa okukodwa kuyisipho saphakade senkinga yesikhashana.
Ukuxhuma uqobo kuwumyalo owodwa
Lapho imodeli isikhethiwe, i-DNS iphendula futhi i-akhawunti ifanelekile, umsebenzi uwumsebenzi ojwayelekile we-Windows. Isikhombisi sigcina iphasiwedi ngaphandle kweziskripthi nomlando wesheli:
Add-Computer -DomainName "ds.corp.example" -Credential (Get-Credential) -PassThruUmyalo ngale ndlela awuqalisi kabusha umshini ngokwawo, ngakho ukuqalisa kabusha kwenzeka ngaphansi kohlelo lwesondlo futhi indlela yokubuyisela isatholakala. Iseva esivele ixhumene nesinye isizinda idinga uhlelo lokufuduka, hhayi ukuxhuma kwesibili phezu kokokuqala.
Rekhoda isitsha lapho into yekhompyutha yehlela khona kanye ne-akhawunti eyayidalile. Kokubili kubalulekile lapho umshini udinga ukuxhunywa kabusha ngemuva kokwakhiwa kabusha, futhi akukho okubonakala kusuka kuseva ngemva kwalokho.
Okungakunikezwa ubulungu
Ubulungu besizinda abenzi muntu ube ngumlawuli wasendaweni, futhi abunikezi ukufinyelela kwidesktop ekude noma ukwabelana ngamafayela. Lawo malungelo alungiselelwa ngokwehlukana, futhi esizindeni esilawulwayo ahlala ngaphakathi kobubanzi baso bokuphatha obusekelwayo.
Indlela yenethiwekhi iwukuncika okuqhubekayo hhayi isinyathelo sokusetha. Uma uxhumano lwangasese lunyamalala, iseva iqhubeka nokusebenza ngobufakazi obugciniwe kwikheshi kuze kube khona okudinga idirectory, bese ukwehluleka kufika kulo lokhu okulotshiwe kohlelo hhayi eduze kwesimo esishintshile.
Umhlahlandlela ka-Microsoft wokuxhuma i-Windows Server ubala izimiso zangaphambili ezisekelwayo zomsebenzi wesizinda esilawulwayo. Yifunde ngokuqhathanisa nezi zinqumo ezintathu ezingenhla, futhi thatha noma yikuphi ukungafani njengesizathu sokuma hhayi imininingwane okufanele igwenywe.