Ukufakwa kwe-RRAS kuyehluleka ngoba isevisi ye-RemoteAccess iyama
Iqhaza le-Routing and Remote Access lingehluleka ngoba isevisi yalo ihlala eme ku-Starting. Hlola ilungelo lokungena ngokuthi isevisi ngaphambi kokufaka noma yini kabusha.
Ukufakwa kweqhaza kuyama ngephutha elijwayelekile futhi ilogi yezenzeko cishe ayinikezi lutho ongasebenza ngalo. Kumaseva lapho lokhu kwenzeka khona, ingxenye engekho ayikho ku-wizard: isevisi ye-Remote Access ayiyeki isimo sika-Starting nhlobo. Iqhaza elingakwazi ukuqedela ukuqalisa kwalo liyehluleka futhi kuwo wonke umzamo, ngakho isevisi iza kuqala i-wizard ilandele. Ukulungisa ilungelo lokungena kuthatha amaminithi, ukufaka iqhaza kabusha kaningi akukwenzi.
Qala ngesevisi, hhayi nge-wizard yeqhaza
Vula iphrompthi ephakanyisiwe futhi ufunde ukucushwa kwesevisi ngaphambi kokuthinta iqhaza. Izindinganiso ezimbili zibalulekile: uhlobo lokuqala kanye ne-akhawunti isevisi esebenza ngaphansi kwayo. Ukufakwa okuzenzakalelayo kubhalisa isevisi ukuze iqale ngokuzenzekelayo, kubambezeleke ngaphansi kwe-Network Service.
Uma isimo sihlala ku-Starting esikhundleni sika-Running, isevisi ilinde into engakwazi ukuyithola, futhi ilungelo lokungena liyisicelo esivamile. Ukulinda isikhathi eside akusizi, ngoba ukuqala sekuhlulekile ngendlela i-Service Control Manager eyibika ngayo njengelindile. Misa isevisi ngokuhlanzekile bese ufunda ukucushwa kwayo futhi. Bese ubheka umzamo wokuqala wesevisi kulogi yezenzeko, yilapho igama le-akhawunti livela khona eceleni kwephutha.
I-wizard yeqhaza ibika kuphela ukuthi ukuqalisa kuhlulekile, yingakho ukuxilongwa kwesevisi kufanele kuqale.
Funda ilungelo lokungena ngaphambi kokufaka kabusha
I-Network Service idinga ilungelo lokungena njengesevisi ukuze iqale. Ama-akhawunti akhelwe ngaphakathi ngokuvamile ayithola ngobulungu beqembu, futhi umugqa wesisekelo oqinisiwe noma ukuvuselelwa kwenqubomgomo kungayithatha. Inqubomgomo yeqembu iyawina ekuvuselelweni okulandelayo, ngakho ukunikezwa ngesandla kungaphinda kunyamalale ngaphandle kwesexwayiso.
Khipha inqubomgomo yezokuphepha yasendaweni bese ufunda umbhalo esikhundleni sokuthemba i-GUI. Lokho kukushiya nefayela ozolifanisa nalo ngemva kokuvuselela, futhi yiyo kuphela indlela yokwazi ukuthi ushintsho lwasinda yini. Uma umbhalo ungenalutho noma ushiya i-akhawunti, utholile iphutha. Bhala ukuthi yiluphi into yenqubomgomo eyisethayo, ngoba yiyo leyo nto edinga ukulungiswa okuhlala njalo.
secedit /export /cfg C:\Windows\Temp\secpol-export.inf
Select-String -Path C:\Windows\Temp\secpol-export.inf -Pattern SeServiceLogonRight
sc.exe qc RemoteAccess
Get-Service RemoteAccess | Format-List Name, Status, StartType
Ukunikezwa okusetshenziswe endaweni futhi okubhalwe phezu kwakho inqubomgomo ekuvuselelweni okulandelayo kubonakala njengokulungiswa okwayeka ukusebenza, futhi kuzophinde kuhluleke ngendlela efanayo.
Uhambo lwe-akhawunti olubhala kabusha ukucushwa
Indlela emfushane ilungisa ukucushwa kokungena kwesevisi ngaphandle kokuhlela inqubomgomo ngesandla: shintsha i-akhawunti, sebenzisa, bese uyishintsha ibuyele emuva izinkambu zephasiwedi zishiywe zingenalutho.
Lolu hambo lubhala kabusha irekhodi lesevisi futhi lunikeza i-akhawunti ilungelo eliyidingayo futhi. Kuwukuzungeza hhayi ukulungisa imbangela eyisisekelo, ngakho kufanele kube kuyirekhodi yezinguquko okunosuku eceleni kwayo. Lapho umugqa wesisekelo uphatha iseva, ukulungiswa okulungile ukwengeza i-akhawunti ekwabiweni kokungena njengesevisi kulowo mugqa wesisekelo. Kwenze kuqala uma ukwazi, futhi usebenzise uhambo kuphela ukuvula ukufakwa okuvaleke ngenye indlela.
sc.exe config RemoteAccess obj= "NT AUTHORITY\LocalService" start= demand
Start-Service RemoteAccess
sc.exe config RemoteAccess obj= "NT AUTHORITY\NetworkService" start= delayed-auto
Start-Service RemoteAccess
Funda isimo ngemva komyalo ngamunye, ngoba isevisi eqala ngaphansi kwe-akhawunti eyodwa kodwa ingaqali ngaphansi kwenye ikutshela ukuthi yiliphi ilungelo elingekho.
Faka iqhaza futhi ukhombise ukuthi lifakiwe
Ngesikhathi isevisi isebenza, engeza iqhaza futhi, futhi ufake isici esincane se-VPN ohlose ukusisebenzisa ngempela. Iqhaza elijwayelekile lodwa alikunikezi iphoyinti lokugcina le-VPN elisebenzayo.
Install-WindowsFeature DirectAccess-VPN -IncludeManagementTools
Get-WindowsFeature RemoteAccess, DirectAccess-VPN, Routing
Get-Service RemoteAccess
Qinisekisa ukuthi izici ezincane zibika i-Installed hhayi i-Available, bese uvula ikhonsoli bese uqedela ukucushwa kokuqala ngaphambi kokuba omunye umuntu athinte umshini. Uma ikhonsoli isathi isevisi ayisebenzi, buyela ekuhlolweni kwesevisi esikhundleni sokususa iqhaza.
Bhala lokho okushintshile
Izinketho zokuqala ze-wizard zibeka imithetho ye-firewall, ukwabiwa kwamakheli kanye nokuthi iseva ilindele i-DHCP relay yini. Amaklayenti ambalwa ephoyinti-kuya-esizeni awadingi isimo sephoyinti lokugcina lesiza-kuya-kwesinye. Nquma iqhaza, ichibi lamakheli, indlela yokuqinisekisa kanye nomthombo wesitifiketi ngaphambi kokuchofoza. Ukuqagela lapha kukhiqiza iseva efakwa ngokuhlanzekile futhi engalokothi yamukele ukuxhumana.
Gcina ukuphambuka ku-akhawunti yesevisi kumbhalo ofanayo. Umjikelezo wokuqinisa obuyisela i-akhawunti ezenzakalelayo ungabuyisa iphutha ekuqaliseni okulandelayo, ezinyangeni ngemva kokuba lowo oyixilongile esehambile.