Osati kale kwambiri tidakhazikitsa yankho pa seva ya Windows terminal. Monga mwachizolowezi, adaponya njira zazifupi zolumikizirana pama desiki a antchito ndikuwauza kuti agwire ntchito. Koma ogwiritsa ntchito adachita mantha ndi Cyber ​​​​Security. Ndipo mukalumikizana ndi seva, mukuwona mauthenga ngati: "Kodi mumakhulupirira seva iyi? Ndendende, ndendende? Kenako anaganiza kuchita zonse mokongola, kotero kuti pasakhale mafunso kapena mantha.

Ngati ogwiritsa ntchito akubwerabe kwa inu ndi mantha ofanana, ndipo mwatopa kuyang'ana bokosi la "Osafunsanso", landirani ku mphaka.

Gawo zero. Kukonzekera ndi kudalira nkhani

Chifukwa chake, wogwiritsa ntchito amadina fayilo yosungidwa ndi .rdp yowonjezera ndikulandila zopempha izi:

"Zoyipa" kulumikizana.

Kuti muchotse zenerali, gwiritsani ntchito chida chapadera chotchedwa RDPSsign.exe. Zolemba zonse zilipo, monga mwachizolowezi, pa webusaitiyi, ndipo tiwona chitsanzo cha ntchito.

Choyamba, tiyenera kutenga satifiketi kuti tisayine fayilo. Iye akhoza kukhala:

• Pagulu.
• Zaperekedwa ndi ntchito ya mkati mwa Certificate Authority.
• Kudzisainira kwathunthu.

Chofunikira kwambiri ndikuti satifiketiyo imatha kusaina (inde, mutha kusankha
akauntanti ali ndi siginecha za digito), ndipo ma PC kasitomala amamukhulupirira. Apa ndigwiritsa ntchito satifiketi yodzisaina ndekha.

Ndiroleni ndikukumbutseni kuti kudalira chiphaso chodzilembera nokha kumatha kukonzedwa pogwiritsa ntchito mfundo zamagulu. Zambiri pang'ono zili pansi pa spoiler.

Momwe Mungapangire Satifiketi Yodalirika Pogwiritsa Ntchito Matsenga a GPO

Choyamba, muyenera kutenga chiphaso chomwe chilipo popanda chinsinsi chachinsinsi mumtundu wa .cer (izi zikhoza kuchitika potumiza chiphaso kuchokera ku Certificates snap-in) ndikuchiyika mufoda yamtaneti yomwe ogwiritsa ntchito angawerenge. Pambuyo pake, mukhoza kukonza Group Policy.

Kulowetsedwa kwa satifiketi kumakonzedwa mu gawo: Kusintha Kwa Makompyuta - Ndondomeko - Kusintha kwa Windows - Zosintha Zachitetezo - Malamulo Ofunika Pagulu - Maulamuliro Otsimikizira Mizu Yodalirika. Kenako, dinani kumanja kuti mutenge satifiketi.

Ndondomeko yokhazikitsidwa.

Ma Client PC tsopano akhulupirira satifiketi yodzisainira.

Ngati nkhani za trust zithetsedwa, timapita ku nkhani yosainira.

Khwerero XNUMX. Timasaina fayiloyi m'njira yosesa

Pali satifiketi, tsopano muyenera kudziwa zala zake. Ingotsegulani mu "Zitifiketi" ndikuyikopera ku tabu ya "Composition".

Zala zala zomwe tikufuna.

Ndi bwino kuti nthawi yomweyo mubweretse mu mawonekedwe oyenera - zilembo zazikulu zokha ndipo palibe malo, ngati alipo. Izi zitha kuchitika mosavuta mu PowerShell console ndi lamulo:

("6b142d74ca7eb9f3d34a2fe16d1b949839dba8fa").ToUpper().Replace(" ","")

Mutalandira chala mumpangidwe wofunikira, mutha kusaina fayilo ya rdp bwinobwino:

rdpsign.exe /sha256 6B142D74CA7EB9F3D34A2FE16D1B949839DBA8FA .contoso.rdp

Kumene .contoso.rdp ndi mtheradi kapena njira yachibale ku fayilo yathu.

Fayiloyo ikasainidwa, sikudzakhalanso kotheka kusintha magawo ena kudzera pazithunzithunzi, monga dzina la seva (kwenikweni, apo ayi ndi chiyani cholembera?) siginecha "kuthawa".

Tsopano mukadina kawiri panjira yachidule uthenga udzakhala wosiyana:

Uthenga watsopano. Mtunduwu ndi wochepa woopsa, ukupita patsogolo.

Nafenso timuchotse.

Khwerero XNUMX. Ndipo kachiwiri mafunso odalirika

Kuti tichotse uthengawu tidzafunikanso Group Policy. Nthawi ino msewu uli mu gawo la Kukonza Makompyuta - Ndondomeko - Zowona Zoyang'anira - Zigawo za Windows - Ntchito Zapakompyuta Zakutali - Wogwiritsa Ntchito Makompyuta Akutali - Tchulani zidindo za zala za SHA1 za ziphaso zoimira osindikiza odalirika a RDP.

Ndondomeko yomwe tikufuna.

Mu ndale, ndikwanira kuwonjezera zolemba zala zomwe timazidziwa kale kuchokera pa sitepe yapitayi.

Ndizofunikira kudziwa kuti lamuloli likuposa mafayilo a Lolani RDP kuchokera kwa osindikiza ovomerezeka ndi mfundo zokhazikitsira za RDP.

Ndondomeko yokhazikitsidwa.

Voila, tsopano palibe mafunso achilendo - pempho lolowera ndi mawu achinsinsi. Hm...

Khwerero XNUMX. Kulowa mowonekera ku seva

Zowonadi, ngati talowa kale polowa mu kompyuta, ndiye chifukwa chiyani tifunika kulowetsanso mawu achinsinsi omwewo? Tiyeni titumize zidziwitso ku seva "powonekera". Pankhani ya RDP yosavuta (popanda kugwiritsa ntchito RDS Gateway), ... Ndiko kulondola, ndondomeko yamagulu idzatithandiza.

Pitani ku gawo: Kukonzekera Kwamakompyuta - Ndondomeko - Ma Templates Oyang'anira - Dongosolo - Kusamutsa Zizindikiro - Lolani Kusamutsidwa kwa Zidziwitso Zosasintha.

Apa mutha kuwonjezera ma seva ofunikira pamndandanda kapena kugwiritsa ntchito khadi yakutchire. Zidzawoneka ngati TERMSRV/trm.contoso.com kapena TERMSRV/*.contoso.com.

Ndondomeko yokhazikitsidwa.

Tsopano, mukayang'ana zolemba zathu, ziziwoneka motere:

Dzina lolowera silingasinthidwe.

Ngati mugwiritsa ntchito RDS Gateway, mudzafunikanso kuyatsa kusamutsa deta pa izo. Kuti muchite izi, mu IIS Manager, mu "Njira Zovomerezeka" muyenera kuletsa kutsimikizira kosadziwika ndikuyambitsa Windows Authentication.

IIS yosinthidwa.

Musaiwale kuyambitsanso mawebusayiti mukamaliza ndi lamulo:

iisreset /noforce

Tsopano zonse zili bwino, palibe mafunso kapena mafunso.

Ogwiritsa ntchito olembetsedwa okha ndi omwe angatenge nawo gawo pa kafukufukuyu. Lowani muakauntichonde.

Ndiuzeni, kodi mumasaina zilembo za RDP kwa ogwiritsa ntchito anu?

• 43%Ayi, amazolowera kudina "Chabwino" m'mauthenga osawawerenga, ena amasankha okha mabokosi kuti "Osafunsanso."28

• 29.2%Ndimayika chizindikirocho mosamala ndi manja anga ndikupanga kulowa koyamba ku seva limodzi ndi wogwiritsa ntchito aliyense.19

• 6.1%Ndithudi, ndimakonda dongosolo m’zonse.4

• 21.5%sindigwiritsa ntchito ma seva otsiriza.14

Ogwiritsa 65 adavota. Ogwiritsa ntchito 14 adakana.

Source: www.habr.com