Abokan ciniki na WSUS ba sa son sabuntawa bayan canza sabar?
Sai mu je gare ku. (DA)
Dukanmu mun kasance cikin yanayi inda wani abu ya daina aiki. Wannan labarin zai mayar da hankali kan WSUS (ana iya samun ƙarin bayani game da WSUS daga и). Ko kuma daidai, game da yadda ake tilasta abokan cinikin WSUS (wato, kwamfutocin mu) don sake karɓar sabuntawa bayan canja wurin ko maido da sabar sabuntawar data kasance.
Don haka lamarin ya kasance kamar haka
Sabar WSUS ta mutu. Daidai sosai, an kera mai sarrafa RAID a cikin 2000. Amma wannan gaskiyar ba ta ƙara farin ciki ba. Bayan ɗan gajeren lokaci (tare da ƙoƙarin mayar da RAID wanda mai kula da mutuwa ya lalata), an yanke shawarar aika duk abin da za a tura sabon uwar garken WSUS.
A sakamakon haka, mun sami WSUS mai aiki, wanda saboda wasu dalilai abokan ciniki ba su haɗa ba.
Mahimmanci: WSUS yana da alaƙa da FQDN ta hanyar uwar garken DNS na ciki, uwar garken WSUS an yi rajista a cikin manufofin rukuni kuma an rarraba shi ga abokan ciniki ta hanyar AD, saitunan tsoho don uwar garken, kafin fara duk ayyuka, sabunta WSUS kanta kuma daidaita sabuntawa.
Bayan nazarin lamarin, an gano mahimman abubuwa da yawa
- Clinch Clinch (muna magana game da wuauclt) lokacin ƙoƙarin haɗi zuwa SID na tsohuwar uwar garken WSUS.
- Matsala tare da ɗaukakawar da aka cire daga tsohuwar uwar garken WSUS.
- Yin kiliya na ayyukan da ke shafar aikin wuauclt (muna magana ne game da wuauserv, bits da cryptsvc). Yin kiliya ya faru saboda dalilai daban-daban, waɗanda ba a tantance su dalla-dalla ba.
A sakamakon haka, duk maganin ya haifar da ƙaramin rubutun, wanda aka rarraba ta hanyar manufofin rukuni ta AD ko da hannuwanku (da ƙafafu). Rubutun yana amfani da zaɓin gyara mafi aminci kuma bai kawo sakamako mara kyau ba har tsawon watanni shida na amfani.
Zan kwatanta abin da ake yi (ga waɗanda ke da sha'awar musamman)
Muna yin fakin sabis ɗin sabar sabuntawa, share bayanin tsaro na sabis na sadarwa na WSUS, share abubuwan sabuntawa daga WSUS da suka gabata, share rajistar nassoshi zuwa WSUS da suka gabata, fara sabis ɗin sabuntawa ta atomatik (wuauserv), sabis na canja wurin fasaha na bango ( bits) da sabis na cryptography (cryptsvc), a ƙarshe muna buga WSUS da ƙarfi don sake saita izini, gano sabon WSUS kuma samar da rahoto ga uwar garken.
Kuma kamar koyaushe: kuna yin duk ayyukan da aka bayyana a sama da ƙasa a cikin haɗarin ku da haɗarin ku. Da fatan za a tabbatar cewa an adana duk mahimman bayanai kafin aiwatar da rubutun.
Rubutun
net stop wuauserv
sc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
del /f /s /q %windir%SoftwareDistributiondownload*.*
REG DELETE "HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate" /v AccountDomainSid /f
REG DELETE "HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate" /v PingID /f
REG DELETE "HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate" /v SusClientId /f
net start wuauserv && net start bits && net start cryptsvc
wuauclt /resetauthorization /detectnow /reportnowsource: www.habr.com