I-VPN eyodwa, i-akhawunti ezimbili ze-Windows: kungani elinye iseshini liphuka
Imizila nezixazululi zisezingeni lomoto wonke, ngakho ithuneli le-akhawunti eyodwa liqondisa ezinye. Bese uthola ukuthi iyiphi inqubomgomo noma imojuli yokungena esuse ingxenye ethi Shintsha umsebenzisi.
Abantu ababili bangene ngemvume, omunye wabo uxhuma ithuneli yebhizinisi, futhi isiphequluli selinye i-akhawunti siyeka ukulayisha amakhasi ayebesebenza kahle ngomzuzu odlule. Kuselowo moto oyedwa, ingxenye ethi Shintsha umsebenzisi nayo inyamalele esikrinini sokungena, ngakho umuntu wesibili akakwazi ukubuyela kuseshini sakhe. Ukulandela lokhu kusukela kuseshini sesibili siye ngaphandle iyona ndlela esheshayo yokukuqonda, ngoba akukho lutho olufihliwe ngokuxhumana komsebenzisi wokuqala, futhi akukho lutho oluyimfihlakalo enkingeni yomsebenzisi wesibili uma usubona ukuthi yiziphi izinto ezabiwe.
Qala kuseshini esephukile
Iya kudesktopi ye-akhawunti yesibili, hhayi eyokuqala. Vula itheminali lapho bese ubheka ithebula lemizila kanye nohlu lwezixazululi ngenkathi elinye iseshini lixhunyiwe. Konke okubonayo kungokomoto, hhayi okomunye umsebenzisi, futhi lowo umkhondo wokuqala.
Get-NetRoute -AddressFamily IPv4 | Sort-Object RouteMetric | Select-Object -First 12 DestinationPrefix,NextHop,InterfaceAlias
Get-DnsClientServerAddress -AddressFamily IPv4 | Select-Object InterfaceAlias,ServerAddresses
Get-NetConnectionProfile | Select-Object Name,NetworkCategory,IPv4ConnectivityUma umzila ozenzakalelayo manje ukhomba kusixhumi sethuneli, nokuhamba komsebenzisi wesibili kuyawulandela. Uma uhlu lwezixazululi luthole iseva yangasese, ukusesha kwabo manje kuya endaweni abangeke bakwazi ukufinyelela kuyo uma ithuneli liwa. Akukho kulokhu okuyiphutha kuklayenti; kuyimiphumela yesitaki esisodwa senethiwekhi esabiwe.
Umyalo wesithathu uchaza uhlobo lwesibili lwezikhalo. Uma i-adaptha ishintsha umoto isuka kusigaba senethiwekhi esivamile iya kweyangasese, imithetho ye-firewall eboshelwe kuphrofayela ishintsha kuzo zonke i-akhawunti ngesikhathi esisodwa, ngakho izinhlelo ezazivunyelwe ekuseni zingavinjelwa ntambama ngaphandle kokuthi othile athinte umthetho.
Ukuxhumana kungokomsebenzisi ngamunye, inethiwekhi ayikho
I-Windows igcina into yokuxhumana kuphrofayela yomsebenzisi oyidalile. I-adaptha esebenza ngokucabanga eyidalayo, imizila eyifakayo kanye namaseva e-DNS ewayibhalisayo asezingeni lomoto wonke. Lokho kwehlukanisa kuwumthombo wazo zombili izimpawu esihlokweni.
Kuchaza nokuthi kungani ukuphuma komsebenzisi wokuqala ngokuvamile kulungisa owesibili. Ukususa ukuxhumana kususa ne-adaptha kanye nemizila, futhi isimo sezingeni lomoto wonke sibuyela kulokho eyayikho ngaphambi kokuthi noma ubani axhume. Lokho kuwukuxilonga okuwusizo: uma ukuphuma kulungisa enye i-akhawunti, ubheka isimo esabiwe hhayi iphrofayela eyephukile.
Ongakwazi ukukwenza ukunikeza iseshini sesibili ithebula lezindlela elihlukile. Ithebula linye, futhi noma yimaphi amaseshini amabili ayabelana ngalo. Lokho kuyisici sesistimu yokusebenza hhayi umkhawulo weklayenti ethile. Kusho futhi ukuthi noma yimuphi umklamo ocabanga okwehlukile uzolokhu wehluleka, futhi lokho kwehluleka kuzobonakala njengamaphutha wohlelo okungahlobene.
Thola ukuthi yini esuse ingxenye ethi Shintsha umsebenzisi, ngalokhu kulandelana
Ukushintsha komsebenzisi ngokushesha kwanyamalala ngesizathu esihluke ngokuphelele, futhi isixazululo asihlobene nokuhamba kwemizila. Dweba abantu abane abazongenela ukhetho ngokulandelana, ngoba ababili bokuqala babuyiswa emasekondini kanti abakamuva banendleko.
Get-ItemProperty 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System' -Name HideFastUserSwitching
gpresult /h $env:TEMP\gp.html
Get-Service | Where-Object { $_.DisplayName -match 'Logon|Access|Credential' } | Select-Object Status,Name,DisplayNameInani lerejista iyincazelo elula kakhulu. Uma likhona futhi lifunda u-1, ingxenye ifihlwe inqubomgomo, futhi indlela yenqubomgomo yeqembu yi-Computer Configuration, Administrative Templates, System, Logon kanye nesilungiselelo esiqanjwe ngokufihla izindawo zokungena zokushintsha komsebenzisi ngokushesha. Libeke ku-Not Configured bese uvuselela nge-gpupdate /force.
Umyalo wesibili ukutshela ukuthi leyona nqubomgomo ilethwa isuka kusizinda hhayi ukuthi ibhalwe endaweni. Uma ivela embikweni ne-GPO ewine, ukuhlela inani lendawo kuyisixazululo sesikhashana esizobuyela ekushesheni okulandelayo, futhi leyo ngxoxo ingeyomnikazi wenqubomgomo.
Umyalo wesithathu uhlanganisa enye indlela. Umhlinzeki wemininingwane yokuqinisekisa noma wokufinyelela kwinethiwekhi ofaka imojuli yokungena angacindezela ingxenye ngenkathi esebenza, futhi amanye amaklayenti abhalisa nengxenye eqala ngaphambi kokungena futhi egcina isicelo esikrinini sokungena. Ukukhubaza leyo sevisi kubuyisela ukushintsha, futhi kususa nemisebenzi yangaphambi kokungena noma i-posture okwadalelwa yona imojuli.
| Cause | How to confirm | Cost of the fix |
|---|---|---|
| HideFastUserSwitching policy | Registry value present and set to 1 | None; remove the policy |
| Logon module service | Service running under a vendor name | Loses pre-logon and posture behaviour |
| GINA-era assumption | Only relevant on very old Windows | Nothing to fix; the mechanism is gone |
Kushintshe ngaphandle kokuzivalela ngaphandle
Gcina iseshini eyodwa yokuphatha ivuliwe ngenkathi usebenza, futhi ungashintshi isilungiselelo sesikrini sokungena kumoto ongafinyelela kuyo kuphela ngaleso sikrini. Phuma kwezinye izeshini kuqala, sebenzisa ushintsho, vuselela, bese uhlola ngokushintsha abasebenzisi hhayi ngokuqalisa kabusha.
Bhala ukuthi imiphi imisebenzi ye-posture oyikhubazile. Isibuyekezo seklayenti singafaka futhi sisebenzise kabusha imojuli yokungena, futhi uphawu lubuyela ngaphandle kwesizathu esicacile, ngokuvamile phakathi kwewindi lokusekela lapho kungekho okhumbulayo ushintsho lwangaphambili.
Kudivayisi ephethwe, cabanga ukuthi isilungiselelo silethwa siseza phezulu. Ukuhlola umbiko wenqubomgomo kuqala konga ihora lokuhlela kwendawo okuzobuyela emuva. Kukutshela nokuthi ubuze bani uma impendulo ingu-cha. Ithikithi elisho inqubomgomo ewine lixazululwa ngokuphindwe kabili ngokushesha kunalelo elichaza ukhiye werejista osekwashintshwa othile.
Qinisekisa zombili i-akhawunti bese ukhetha imodeli
Hlola umphumela ngokulandelana okuhlangenwe ngabasebenzisi ababili. Ngena nge-akhawunti yesibili ngenkathi eyokuqala inqanyuliwe, qinisekisa ukufinyelela okuvamile, bese uxhuma ithuneli ye-akhawunti yokuqala futhi uqinisekise ukuthi umzila olindelekile we-akhawunti yesibili usewona lowo obuwuhlosile.
qwinsta
Get-NetRoute -DestinationPrefix 0.0.0.0/0 | Select-Object InterfaceAlias,NextHop,RouteMetric
Test-NetConnection -ComputerName intranet.example.internal -Port 443Uma zombili i-akhawunti zidinga ngempela izindlela zenethiwekhi ezihlukile ngesikhathi esisodwa, impendulo eqotho imoto emibili, imoto emibili yokucabanga, noma inqubomgomo lapho kudingeka khona umzila owodwa kuphela. Ithuneli elihlukanisiwe kukuxhumana okwabiwe linganciphisa okuhambayo, kodwa alikwazi ukunikeza iseshini ngayinye ithebula layo. Ukufika lapho kusenesikhathi kushibhe kunokukuthola ngemuva kwemizamo emithathu yokugwema.
Leso yisinqumo okufanele sithathwe ngokusobala esikhundleni sokuxazulula ngokuzungeza. Ithebula elilodwa lemizila, uhlu olulodwa lwezixazululi, iphrofayela eyodwa ye-firewall: konke okunye kulandela lokho, futhi isixazululo esihlonipha lokho sizobe sisasebenza ngenyanga ezayo.