ProHoster > Блог > Gudanarwa > Windows: gano wanda ya shiga a ina

Windows: gano wanda ya shiga a ina

Windows: gano wanda ya shiga a ina
- Oh, babu abin da ke aiki a gare ni, taimako!
- Kada ku damu, za mu gyara komai yanzu. Bada sunan kwamfutar ku...
(classic na nau'in daga kira zuwa goyan bayan fasaha)

Yana da kyau idan kuna da kayan aiki a la BgInfo ko masu amfani da ku sun san gajeriyar hanyar Windows+Pause/Break kuma ku san yadda ake latsa shi. Akwai ma wasu samfuran da ba kasafai suka yi nasarar sanin sunan motarsu ba. Amma sau da yawa mai kiran, baya ga babbar matsalarsa, yana da na biyu: gano sunan / IP address na kwamfutar. Kuma sau da yawa yana ɗaukar lokaci mai yawa don magance wannan matsala ta biyu fiye da ta farko (kuma kawai kuna buƙatar canza fuskar bangon waya ko dawo da gajeriyar hanyar da ta ɓace:).
Amma yana da kyau a ji wani abu kamar:
- Tatyana Sergeevna, kada ku damu, na riga na haɗi ...


Kuma ba kwa buƙatar da yawa don wannan.
Kwararrun tallafin fasaha kawai yana buƙatar haddace sunayen injinan kuma ya tuna wanda ke aiki don wane.
Kafin in bayyana mafita da muke amfani da su a halin yanzu, zan dan duba wasu zabin domin in yi suka a kan su kuma in bayyana zabi na.

  1. BgInfo, Bayanin Desktop da makamantansu. Idan akwai kudi da yawa, akwai wadanda ake biya. Ma'anar ita ce, ana nuna bayanan fasaha akan tebur: sunan inji, adireshin IP, shiga, da dai sauransu. A cikin Bayanin Desktop kuna iya matse zane-zanen aiki akan rabin allo.
    Abin da ba na so shi ne cewa ga Bginfo iri ɗaya, alal misali, mai amfani yana buƙatar rage windows don ganin mahimman bayanai. Ni da abokan aiki na kuma mun lura fiye da sau ɗaya a BgInfo halayyar kayan tarihi, lokacin da aka nuna sabon rubutu a saman tsohon.
    Wasu masu amfani suna jin haushin gaskiyar cewa admins suna zana 192.168.0.123 mai ban tsoro akan fuskar cat da aka shimfiɗa akan tebur, yana lalata kyawawan hoton bangon, kuma, ba shakka, wannan yana da matuƙar lalata kuma yana kashe ruhin aikin gaba ɗaya. .
  2. Alamar a la "Wane Ni" (kada ku yi ƙoƙarin ƙara alamar tambaya gare shi a ƙarshen :). Hanyar gajeriyar hanya ta al'ada akan tebur, a baya wacce ke ɓoye ingantaccen rubutu ko a'a wanda ke nuna mahimman bayanai ta hanyar akwatin maganganu. Wani lokaci, maimakon gajeriyar hanya, suna sanya rubutun kanta akan tebur, wanda IMHO mummunan ɗabi'a ne.
    Rashin hasara shine don ƙaddamar da gajeriyar hanyar, kamar yadda a cikin yanayin farko, kuna buƙatar rage duk buɗe windows (ba mu la'akari da waɗancan masoyan arziki waɗanda ke da taga kawai solitaire a buɗe akan injin aikin su). Af, masu amfani da ku sun san inda za su danna don rage duk windows? Haka ne, yatsa a idon admin.

Har ila yau, hular ta nuna cewa duka hanyoyin da aka bayyana a sama suna da babban lahani da mai amfani ya shiga wajen samun bayanai, wanda zai iya zama makaho, wawa, ko ma karya.
Ba zan yi la'akari da zaɓi na haɓaka ilimin kwamfuta ba, lokacin da kowa ya san inda a cikin Windows don neman sunan injin su: dalili ne mai kyau, amma yana da wuyar gaske. Kuma idan kamfani yana da canjin ma'aikata, to gaba ɗaya ya lalace. Abin da zan iya cewa, a mafi yawan lokuta ba sa ma tuna shigar su.

Na zubar da raina, kuma a yanzu har zuwa ga ma'ana.
An dauki ra'ayin mazaunin Khabrov a matsayin tushen mittel daga wannan labarin.
Mahimman ra'ayin shine lokacin da mai amfani ya shiga cikin Windows, rubutun tambarin yana shigar da bayanan da suka dace (lokaci da sunan na'ura) zuwa wani sifa na asusun mai amfani. Kuma lokacin da kuka fita daga tsarin, ana aiwatar da rubutun tambarin makamancin haka.

Ina son ra'ayin kanta, amma akwai wasu abubuwan da ban ji daɗin aiwatarwa ba.

  1. Manufofin rukuni, waɗanda ke ƙayyadaddun rubutun tambari da tambarin ga masu amfani, sun shafi gaba dayan yanki, don haka rubutun za su yi aiki akan kowace na'ura da masu amfani suka shiga. Idan kun yi amfani da mafita ta ƙarshe tare da wuraren aiki (misali, samfuran Microsoft RDS ko samfuran Citrix), wannan hanyar ba za ta dace ba.
  2. Ana shigar da bayanan cikin sifofin Sashen na asusun mai amfani, wanda matsakaicin mai amfani ke samun damar karantawa kawai. Baya ga sifa ta asusun mai amfani, rubutun kuma yana yin canje-canje ga sifa ta Sashen na asusun kwamfuta, wanda ta tsohuwar masu amfani ba za su iya canza ko ɗaya ba. Don haka, don mafita don aiki, marubucin ya ba da shawarar canza ƙa'idodin saitunan tsaro don abubuwan AD.
  3. Tsarin kwanan wata ya dogara ne da saitunan ganowa akan injin da aka yi niyya, don haka daga injin ɗaya za mu iya samun 10 Nuwamba 2018 14:53, kuma daga wani 11/10/18 2:53 pm

Don kawar da waɗannan gazawar, an yi haka.

  1. An haɗa GPO ba ga yanki ba, amma ga OU mai injuna (Na raba masu amfani da injina zuwa OU daban-daban kuma ina ba da shawara ga wasu). Bugu da ƙari, don yanayin sarrafa manufofin loopback an saita yanayin tafi.
  2. Rubutun zai rubuta bayanai kawai zuwa asusun mai amfani a cikin sifa info, wanda mai amfani zai iya canza kansa don asusunsa.
  3. Canza yanki na lambar da ke haifar da ƙimar sifa

Yanzu rubutun yayi kama da haka:
AjiyeLogonInfoToAdUserAttrib.vbs

On Error Resume Next
Set wshShell = CreateObject("WScript.Shell")
strComputerName = wshShell.ExpandEnvironmentStrings("%COMPUTERNAME%")
Set adsinfo = CreateObject("ADSystemInfo")
Set oUser = GetObject("LDAP://" & adsinfo.UserName)
strMonth = Month(Now())
If Len(strMonth) < 2 then
  strMonth = "0" & strMonth
End If
strDay = Day(Now())
If Len(strDay) < 2 then
  strDay = "0" & strDay
End If
strTime = FormatDateTime(Now(),vbLongTime)
If Len(strTime) < 8 then
  strTime = "0" & strTime
End If
strTimeStamp = Year(Now()) & "/" & strMonth & "/" & strDay & " " & strTime
oUser.put "info", strTimeStamp & " <logon>" & " @ " & strComputerName
oUser.Setinfo

AjiyeLogoffInfoToAdUserAttrib.vbs

On Error Resume Next
Set wshShell = CreateObject("WScript.Shell")
strComputerName = wshShell.ExpandEnvironmentStrings("%COMPUTERNAME%")
Set adsinfo = CreateObject("ADSystemInfo")
Set oUser = GetObject("LDAP://" & adsinfo.UserName)
strMonth = Month(Now())
If Len(strMonth) < 2 then
  strMonth = "0" & strMonth
End If
strDay = Day(Now())
If Len(strDay) < 2 then
  strDay = "0" & strDay
End If
strTime = FormatDateTime(Now(),vbLongTime)
If Len(strTime) < 8 then
  strTime = "0" & strTime
End If
strTimeStamp = Year(Now()) & "/" & strMonth & "/" & strDay & " " & strTime
oUser.put "info", strTimeStamp & " <logoff>" & " @ " & strComputerName
oUser.Setinfo

Duk wanda ya fara nemo duk bambance-bambance tsakanin rubutun Logon da Logoff zai sami ƙari ga karma. 🙂
Hakanan, don samun bayanan gani, an ƙirƙiri ƙaramin rubutun PS mai zuwa:
Samu-UsersByPCsInfo.ps1

$OU = "OU=MyUsers,DC=mydomain,DC=com"
Get-ADUser -SearchBase $OU -Properties * -Filter * | Select-Object DisplayName, SamAccountName, info | Sort DisplayName | Out-GridView -Title "Информация по логонам" -Wait

Gabaɗaya, an saita komai ɗaya-biyu-uku:

  1. ƙirƙiri GPO tare da saitunan da suka dace kuma ku haɗa shi zuwa sashin tare da wuraren aikin mai amfani:
    Windows: gano wanda ya shiga a ina
  2. mu je shan shayi (idan AD yana da yawan masu amfani, to kuna buƙatar shayi mai yawa :)
  3. gudanar da rubutun PS kuma sami sakamako:
    Windows: gano wanda ya shiga a ina
    A saman taga akwai tace mai dacewa wanda zaku iya zaɓar bayanai dangane da ƙimar ɗayan ko fiye da filayen. Danna kan ginshiƙan tebur yana tsara rikodin ta ƙimar filayen da suka dace.

Za mu iya da kyau "kunshin" mafitarmu.
Windows: gano wanda ya shiga a ina
Don yin wannan, za mu ƙara gajeriyar hanya don ƙaddamar da rubutun don ƙwararrun tallafin fasaha, waɗanda za su sami wani abu kamar wannan a cikin filin "abu":
powershell.exe -NoLogo -ExecutionPolicy Bypass -File "servershareScriptsGet-UsersByPCsInfo.ps1"

Idan akwai ma'aikatan tallafin fasaha da yawa, zaku iya rarraba gajeriyar hanya ta amfani da GPP.

'Yan sharhi na ƙarshe.

  • Dole ne a shigar da tsarin Active Directory na PowerShell akan injin da aka ƙaddamar da rubutun PS (don yin wannan, kawai ƙara kayan aikin AD a cikin abubuwan Windows).
  • Ta hanyar tsoho, mai amfani ba zai iya gyara yawancin halayen asusunsa ba. Rike wannan a zuciyarsa idan kun yanke shawarar amfani da sifa banda info.
  • Sanar da duk abokan aikin da abin ya shafa waɗanne sifa za ku yi amfani da su. Misali, iri daya info ana amfani da shi don ƙara bayanin kula cikin akwatin saƙo na mai amfani a cikin kwamitin gudanarwa na Exchange Server kuma wani zai iya rubutawa cikin sauƙi, ko yin baƙin ciki lokacin da rubutun ku ya sake rubuta bayanan da suka ƙara.
  • Idan kuna da shafuka masu Active Directory da yawa, sannan ku ba da izini don jinkirin maimaitawa. Misali, idan kuna son samun sabbin bayanai game da masu amfani daga rukunin yanar gizon AD, kuma kuna gudanar da rubutun daga na'ura daga rukunin AD na B, zaku iya yin haka:
    Get-ADUser -Server DCfromSiteA -SearchBase $OU -Properties * -Filter * | Select-Object DisplayName, SamAccountName, info | Sort DisplayName | Out-GridView -Title "Информация по логонам" -Wait

    DC dagaSiteA - sunan mai sarrafa rukunin yanar gizon A (ta tsohuwa, Get-AdUser cmdlet yana haɗi zuwa mai sarrafa yanki mafi kusa)

Windows: gano wanda ya shiga a ina

Tushen hoto

Zan yi godiya idan za ku iya ɗaukar ɗan gajeren binciken da ke ƙasa.

Masu amfani da rajista kawai za su iya shiga cikin binciken. Shigadon Allah.

Me kuke amfani?

  • bginfo, bayanan Desktop da sauransu. (freeware)

  • Analogues da aka biya na bginfo

  • Zan yi shi kamar yadda a cikin labarin

  • bai dace ba, saboda Ina amfani da VDI/RDS da dai sauransu.

  • Ban yi amfani da komai ba tukuna, amma ina tunaninsa

  • Bana buƙatar tattara irin waɗannan bayanan

  • sauran (sharing a cikin comments)

Masu amfani 112 sun kada kuri'a. Masu amfani 39 sun kaurace.

source: www.habr.com

Add a comment