Windows: tsvaga kuti ndiani apinda kupi

- Ah, hapana chinondiitira, batsira!
- Usanetseka, isu tichagadzirisa zvese izvozvi. Ipa zita rekombuta yako...
(Classics yemhando kubva kumafoni kusvika kune technical support)

Zvakanaka kana iwe uine chishandiso cheBgInfo kana vashandisi vako vachiziva nezveWindows+ Pause/Break nzira yekudimbudzira uye uchiziva kuidzvanya. Kune kunyange zvisingawanzo sampuli zvakakwanisa kudzidza zita remotokari yavo. Asi kazhinji munhu anofona, kuwedzera kune dambudziko rake guru, ane yechipiri: kutsvaga zita / IP kero yekombuta. Uye kazhinji zvinotora nguva yakawanda kugadzirisa dambudziko iri rechipiri pane rekutanga (uye waingoda kushandura Wallpaper kana kudzosa nzira yekudimbudzira :).
Asi zvakanyanya kunaka kunzwa chimwe chinhu chakadai:
- Tatyana Sergeevna, usanetseka, ndave kutobatanidza ...

Uye iwe haudi zvakawanda kune izvi.
Nyanzvi yekutsigira tekinoroji inongoda kubata nemusoro mazita emuchina uye rangarira kuti ndiani anoshandira.
Ndisati ndatsanangura mhinduro yatiri kushandisa izvozvi, ndichatarisa muchidimbu dzimwe sarudzo kuitira kuti ndigovashoropodza kusvika pasi uye kutsanangura sarudzo yangu.

1. BgInfo, Desktop Info nezvimwe zvakadaro. Kana pane mari yakawanda, kune vakabhadharwa. Iyo poindi ndeyekuti ruzivo rwehunyanzvi runoratidzwa pane desktop: zita remuchina, IP kero, login, nezvimwe. MuDesktop Info unogona kutosvina magirafu ekuita pahafu yechidzitiro.
   Chandisingade ndechekuti kune imwecheteyo Bginfo, semuenzaniso, mushandisi anoda kudzikisa windows kuti aone iyo inodiwa data. Ini nevandinoshanda navo takacherechedzawo kanopfuura kamwe paBgInfo characteristic artifact, kana chinyorwa chitsva chinoratidzwa pamusoro pechinyakare.
   Vamwe vashandisi vanotsamwiswa nenyaya yekuti admins vanokwevera inotyisa 192.168.0.123 pachiso chekatsi yakatambanudzwa padesktop, ichiparadza aesthetics yemufananidzo wekumashure, uye, hongu, izvi zvinoderedza zvakanyanya uye zvinouraya zvachose mweya webasa. .
2. A label a la "Ndiri ani" (usayedze kuwedzera mubvunzo pairi pakupedzisira :). Yemhando yekudimbudzira padesktop, kumashure kwayo inovanza yakatsvinda kana isina kutsvinda script inoratidza ruzivo rwakakosha muchimiro chebhokisi rebhokisi. Dzimwe nguva, panzvimbo yekudimbudzira, vanoisa iyo script pachayo padesktop, iyo IMHO ine tsika dzakaipa.
   Izvo zvakashata ndezvekuti kuvhura nzira yekudimbudzira, senge yekutanga, iwe unofanirwa kudzikisa ese akavhurika mahwindo (hatitarise avo vadikani verombo vane chete solitaire hwindo rakavhurika pamushini wavo webasa). Nenzira, vashandisi vako vanoziva pekudzvanya kuti uderedze ese windows? Ndizvozvo, chigunwe muziso re admin.

Chivharo chinoratidzawo kuti nzira mbiri dziri pamusoro apa dzine dhizaini huru iyo mushandisi anobatanidzwa mukuwana ruzivo, angave ari bofu, benzi, kana kunyange kunyepa.
Ini handisi kuzofunga nezvesarudzo yekuwedzera komputa kuverenga, kana munhu wese achiziva kupi muWindows kutsvaga zita remuchina wavo: chikonzero chakanaka, asi chakaoma kwazvo. Uye kana iyo kambani iine shanduko yevashandi, zvino inoparadza zvachose. Chii chandingataure, muzviitiko zvakawanda ivo havatomboyeuke kupinda kwavo.

Ndakadurura mweya wangu, uye zvino kune pfungwa.
Pfungwa yemugari weKhabrov yakatorwa sehwaro Mittel kubva chinyorwa ichi.
Izvo zvakakosha zvepfungwa ndezvekuti kana mushandisi apinda muWindows, iyo logon script inopinda iyo inodiwa ruzivo (nguva uye zita remuchina) mune humwe hunhu hweakaundi yemushandisi. Uye iwe paunobuda kunze kweiyo system, yakafanana logoff script inoitwa.

Ndaifarira pfungwa yacho pachayo, asi pane zvimwe zvinhu zvandisina kufara nazvo mukuita.

1. Gwaro reboka, iro rinodoma zvinyorwa zvelogon uye logoff dzevashandisi, rinoshanda kudura rese, saka zvinyorwa zvinomhanya pane chero muchina unopinda vashandisi. Kana iwe ukashandisa zvigadziriso zvekupedzisira pamwe nenzvimbo dzekushandira (semuenzaniso, Microsoft RDS kana Citrix zvigadzirwa), iyi nzira ichave isingaite.
2. Iyo data inopindirwa muDhipatimendi hunhu hweakaundi yemushandisi, iyo muvhareji mushandisi ane kuverenga-chete kuwana. Pamusoro peiyo mushandisi account hunhu, iyo script inoitawo shanduko kuDhipatimendi hunhu hwekombuta account, iyo nevashandisi vekare haigone kuchinja chero. Naizvozvo, kuti mhinduro ishande, munyori anokurudzira kushandura zvimiro zvekuchengetedza zveAD zvinhu.
3. Mafomati emazuva anotsamira pamagadzirirwo enzvimbo pamushini unotariswa, saka kubva kumuchina mumwe tinogona kuwana 10 Mbudzi 2018 14:53, uye kubva kune imwe 11/10/18 2:53 pm.

Kubvisa zvikanganiso izvi, zvinotevera zvakaitwa.

1. GPO yakabatana kwete kune domain, asi kune OU ine michina (Ini ndinoparadzanisa vashandisi nemichina kuita maOU akasiyana uye nekuraira vamwe). Uyezve, nokuda loopback policy processing mode mode yaiswa famba.
2. Iyo script inongonyora data kuaccount yemushandisi mune hunhu Info, iyo mushandisi anogona kuchinja akazvimiririra kune account yake.
3. Yakachinja chidimbu chekodhi chinoburitsa kukosha kwehunhu

Iye zvino zvinyorwa zvinotaridzika seizvi:
SaveLogonInfoToAdUserAttrib.vbs

On Error Resume Next
Set wshShell = CreateObject("WScript.Shell")
strComputerName = wshShell.ExpandEnvironmentStrings("%COMPUTERNAME%")
Set adsinfo = CreateObject("ADSystemInfo")
Set oUser = GetObject("LDAP://" & adsinfo.UserName)
strMonth = Month(Now())
If Len(strMonth) < 2 then
  strMonth = "0" & strMonth
End If
strDay = Day(Now())
If Len(strDay) < 2 then
  strDay = "0" & strDay
End If
strTime = FormatDateTime(Now(),vbLongTime)
If Len(strTime) < 8 then
  strTime = "0" & strTime
End If
strTimeStamp = Year(Now()) & "/" & strMonth & "/" & strDay & " " & strTime
oUser.put "info", strTimeStamp & " <logon>" & " @ " & strComputerName
oUser.Setinfo

SaveLogoffInfoToAdUserAttrib.vbs

On Error Resume Next
Set wshShell = CreateObject("WScript.Shell")
strComputerName = wshShell.ExpandEnvironmentStrings("%COMPUTERNAME%")
Set adsinfo = CreateObject("ADSystemInfo")
Set oUser = GetObject("LDAP://" & adsinfo.UserName)
strMonth = Month(Now())
If Len(strMonth) < 2 then
  strMonth = "0" & strMonth
End If
strDay = Day(Now())
If Len(strDay) < 2 then
  strDay = "0" & strDay
End If
strTime = FormatDateTime(Now(),vbLongTime)
If Len(strTime) < 8 then
  strTime = "0" & strTime
End If
strTimeStamp = Year(Now()) & "/" & strMonth & "/" & strDay & " " & strTime
oUser.put "info", strTimeStamp & " <logoff>" & " @ " & strComputerName
oUser.Setinfo

Ani nani ari wekutanga kuwana misiyano yese pakati peLogon neLogoff zvinyorwa achawana kuwedzera kwekarma. 🙂
Zvakare, kuti uwane ruzivo rwekuona, inotevera diki PS script yakagadzirwa:
Wana-UsersByPCsInfo.ps1

$OU = "OU=MyUsers,DC=mydomain,DC=com"
Get-ADUser -SearchBase $OU -Properties * -Filter * | Select-Object DisplayName, SamAccountName, info | Sort DisplayName | Out-GridView -Title "Информация по логонам" -Wait

Pakazara, zvese zvakagadzirirwa imwe-mbiri-vatatu:

1. gadzira GPO ine zvigadziriso zvinodikanwa uye uzvibatanidza nedhipatimendi rine nzvimbo dzevashandisi:
   
2. ngatiende kunwa tii (kana AD ine nhamba huru yevashandisi, saka iwe unoda yakawanda yeti :)
3. mhanya iyo PS script uye uwane mhedzisiro:
   
   Pamusoro pehwindo pane iri nyore sefa yaunogona kusarudza data zvichienderana nehunhu hweimwe kana akawanda minda. Kudzvanya pamakoramu etafura anoronga marekodhi nehunhu hweminda inoenderana.

Tinogona "kurongedza" mhinduro yedu zvakanaka.

Kuti tiite izvi, tichawedzera nzira yekudimbudzira kuvhura script kune nyanzvi dzekutsigira tekinoroji, vanozove nechimwe chinhu chakadai muchikamu che "chinhu":
powershell.exe -NoLogo -ExecutionPolicy Bypass -File "servershareScriptsGet-UsersByPCsInfo.ps1"

Kana paine akawanda evashandi vetsigiro yehunyanzvi, unogona kugovera nzira yekudimbudzira uchishandisa GPP.

Mhinduro shoma dzekupedzisira.

• Iyo Active Directory module yePowerShell inofanirwa kuisirwa pamushini unobva iyo PS script inotangwa (kuti uite izvi, ingo wedzera AD maturusi ekutonga muWindows zvikamu).
• Nekumisikidza, mushandisi haakwanise kugadzirisa mazhinji ehunhu hweakaundi yake. Ramba uchifunga izvi kana ukafunga kushandisa hunhu kunze kwe Info.
• Zivisa vese vanobatanidzwa vaunoshanda navo hunhu hwauchashandisa. Somuenzaniso, zvakafanana Info rinoshandiswa kuwedzera manotsi kubhokisi retsamba remushandisi muExchange Server admin panel uye mumwe munhu anogona kuinyora zviri nyore, kana kusuruvara kana ruzivo rwavakawedzera rwadzikwa nescript yako.
• Kana iwe uine akawanda Active Directory saiti, wobva wabvumira kunonoka kudzokorora. Semuenzaniso, kana iwe uchida kuwana ruzivo rwezvino nezvevashandisi kubva kuAD saiti A, uye womhanyisa script kubva pamushini kubva kuAD saiti B, unogona kuita izvi:
  Get-ADUser -Server DCfromSiteA -SearchBase $OU -Properties * -Filter * | Select-Object DisplayName, SamAccountName, info | Sort DisplayName | Out-GridView -Title "Информация по логонам" -Wait

  DCfromSiteA - zita remutongi wedunhu resaiti A (nekudaro, iyo Get-AdUser cmdlet inobatanidza kune ari pedyo domain controller)

Image source

Ndingatenda kana iwe ukakwanisa kutora ongororo pfupi iri pazasi.

Vashandisi vakanyoresa chete ndivo vanogona kutora chikamu muongororo. Nyorera mu, Munogamuchirwa.

Unoshandisa chii?

• bginfo, Desktop info nezvimwe. (freeware)

• akabhadhara analogues ye bginfo

• Ndichazviita sezviri munyaya

• hazvina basa, nekuti Ini ndinoshandisa VDI/RDS nezvimwe.

• Ini handisati ndashandisa chero chinhu, asi ndiri kufunga nezvazvo

• Ini handidi kuunganidza data rakadaro

• zvimwe (gova mune zvakataurwa)

112 vashandisi vakavhota. 39 vashandisi vakaramba.

Source: www.habr.com