{"id":37887,"date":"2019-10-31T22:20:23","date_gmt":"2019-10-31T19:20:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/windows-uznayom-kto-gde-zaloginen\/"},"modified":"2019-10-31T22:20:23","modified_gmt":"2019-10-31T19:20:23","slug":"windows-uznayom-kto-gde-zaloginen","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/windows-uznayom-kto-gde-zaloginen","title":{"rendered":"Windows: zbulojm\u00eb kush ku \u00ebsht\u00eb loguar","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Windows:<\/a><\/noindex>
\n \u2014 Oh, nothing is working for me, help!
\n \u2014 Don't worry, we'll fix everything right now. Please tell me the computer name\u2026
\n(a classic from tech support calls)<\/p>\n

It's good if you have a tool like BgInfo or if your users know about the Windows+Pause\/Break shortcut and can press it. There are even rare instances of users who have learned the name of their machine. But often, in addition to their main problem, the caller has a second issue: finding out the name\/IP address of their computer. And often, it takes much longer to solve this second problem than the first (when all they needed was to change their wallpaper or restore a missing shortcut :)).
\nIt's much nicer to hear something like:
\n \u2014 Tatiana Sergeevna, don't worry, I'm connecting now...<\/p>\n

<\/a><\/noindex>
\nAnd it doesn't require much for that.
\nA support specialist just needs to memorize the machine names and remember who works on which.
\nBefore describing the solution that we are currently using, I will briefly review other options to explain my choice critically.<\/p>\n

    \n
  1. BgInfo<\/a><\/noindex>, Desktop Info<\/a><\/noindex> and similar tools. If you have more money, there are also paid options. The essence is that technical information is displayed on the desktop: machine name, IP address, login, etc. In Desktop Info, you can even create performance graphs covering half the screen.
    \nWhat is unsatisfactory is that for BgInfo, for example, users need to minimize windows to see the needed data. My colleagues and I have repeatedly observed with BgInfo     a characteristic artifact<\/a><\/noindex>, where new text is displayed over the old one.
    \nSome users are annoyed by the fact that admins draw a frightening 192.168.0.123 on the face of a cat stretched out on the desktop, ruining the aesthetics of the wallpaper, which, of course, is hugely demotivating and completely kills the work mood.\n <\/li>\n
  2. A shortcut like \"Who am I\" (don't try to add a question mark at the end :). A classic desktop shortcut that hides a neat or not-so-neat script that outputs the necessary information in a dialog window. Sometimes, instead of a desktop shortcut, the script itself is placed on the desktop, which IMO is a bad practice.
    \nK\u00ebtu \u00ebsht\u00eb nj\u00eb problem: p\u00ebr t\u00eb hapur ikonic\u00ebn, ashtu si n\u00eb rastin e par\u00eb, duhet t\u00eb minimizosh t\u00eb gjitha dritaret e hapura (nuk e kemi parasysh fatin e atyre q\u00eb kan\u00eb hapur vet\u00ebm nj\u00eb dritare me nj\u00eb loj\u00eb pasijanse). A e din\u00eb p\u00ebrdoruesit tuaj se ku duhet t\u00eb klikojn\u00eb p\u00ebr t\u00eb minimizuar t\u00eb gjitha dritaret? E sakt\u00eb, me gishtin n\u00eb syrin e administratorit.\n <\/li>\n<\/ol>\n

    \nPo ashtu, ai i njohur na tregon se t\u00eb dy metodat e p\u00ebrshkruara m\u00eb sip\u00ebr kan\u00eb nj\u00eb mang\u00ebsi kryesore, q\u00eb \u00ebsht\u00eb se n\u00eb marrjen e informacionit merr pjes\u00eb p\u00ebrdoruesi, i cili mund t\u00eb jet\u00eb paksa verb\u00eb, budalla dhe p\u00ebr m\u00eb tep\u00ebr t\u00eb g\u00ebnjej\u00eb.
    \nNuk do ta shqyrtoj opsionin e rritjes s\u00eb shkrimit kompjuterik, kur t\u00eb gjith\u00eb din\u00eb se ku n\u00eb Windows duhet t\u00eb shikojn\u00eb emrin e kompjuterit, duke qen\u00eb se \u00ebsht\u00eb nj\u00eb pun\u00eb fisnike, por shum\u00eb e v\u00ebshtir\u00eb. Dhe n\u00ebse n\u00eb kompani ka rotacion pune, at\u00ebher\u00eb kjo \u00ebsht\u00eb krejt\u00ebsisht e pamundur. \u00c7far\u00eb t\u00eb them, n\u00eb shumic\u00ebn e rasteve ata as nuk e kujtojn\u00eb emrin e p\u00ebrdoruesit t\u00eb tyre.<\/p>\n

    Kam shprehur shpirtin tim, tani le t\u00eb kalojm\u00eb n\u00eb pun\u00eb.
    \nIdeja \u00ebsht\u00eb marr\u00eb nga nj\u00eb banor i Habr.     mittel<\/a><\/noindex> nga ky artikull<\/a><\/noindex>.
    \nEsenia e ide\u00ebs \u00ebsht\u00eb se kur p\u00ebrdoruesi hyn n\u00eb Windows, skripta e logon e regjistron informacionet e nevojshme (koha dhe emri i kompjuterit) n\u00eb nj\u00eb atribut t\u00eb caktuar t\u00eb llogaris\u00eb s\u00eb p\u00ebrdoruesit. Dhe kur del nga sistemi, p\u00ebrpunon nj\u00eb skript t\u00eb ngjash\u00ebm t\u00eb logoff-it.<\/p>\n

    Mua m\u00eb p\u00eblqeu vet\u00eb idea, por p\u00ebrkundrejt realizimit, disa gj\u00ebra nuk m\u00eb k\u00ebnaqin.<\/p>\n

      \n
    1. Grup politika, ku jan\u00eb shkruar skriptat e logon dhe logoff p\u00ebr p\u00ebrdoruesit, aplikohet n\u00eb t\u00eb gjith\u00eb domenin, prandaj skriptat do t\u00eb funksionojn\u00eb n\u00eb \u00e7do makin\u00eb n\u00eb t\u00eb cil\u00ebn ky\u00e7en p\u00ebrdoruesit. N\u00ebse p\u00ebrve\u00e7 stacioneve t\u00eb pun\u00ebs p\u00ebrdoren zgjidhje terminali (p.sh., Microsoft RDS ose produktet Citrix), qasja e till\u00eb do t\u00eb ishte e pap\u00ebrshtatshme.\n <\/li>\n
    2. T\u00eb dh\u00ebnat regjistrohen n\u00eb atributin Departamenti t\u00eb llogaris\u00eb s\u00eb p\u00ebrdoruesit, p\u00ebr t\u00eb cilin p\u00ebrdoruesi ka akses vet\u00ebm p\u00ebr lexim. P\u00ebrve\u00e7 atributit t\u00eb llogaris\u00eb s\u00eb p\u00ebrdoruesit, skripta gjithashtu b\u00ebn ndryshime n\u00eb atributin Departamenti t\u00eb llogaris\u00eb s\u00eb kompjuterit, i cili p\u00ebr default p\u00ebrdoruesit gjithashtu nuk mund ta ndryshojn\u00eb. Prandaj, n\u00eb m\u00ebnyr\u00eb q\u00eb zgjidhja t\u00eb funksionoj\u00eb, autori sugjeron t\u00eb ndryshohen cil\u00ebsimet standarde t\u00eb siguris\u00eb p\u00ebr objektet AD.\n <\/li>\n
    3. Formati i dat\u00ebs varet nga cil\u00ebsimet e lokalizimit n\u00eb makin\u00ebn p\u00ebrfundimtare, prandaj nga nj\u00eb makin\u00eb mund t\u00eb marrim 10 n\u00ebntor 2018 14:53, dhe nga tjetra 11\/10\/18 2:53 p.m.\n <\/li>\n<\/ol>\n

      P\u00ebr t\u00eb eliminuar k\u00ebto mang\u00ebsi, u b\u00eb kjo.<\/p>\n

        \n
      1. GPO lidhet jo me domainin, por me OU me pajisje (un\u00eb ndaj p\u00ebrdoruesit dhe pajisjet n\u00eb OU t\u00eb ndryshme dhe u rekomandoj edhe t\u00eb tjer\u00ebve). N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, p\u00ebr modo i procesit t\u00eb politikave t\u00eb loopback<\/a><\/noindex> \u00ebsht\u00eb vendosur moda merge<\/i>.\n <\/li>\n
      2. Scripti do t\u00eb regjistroj\u00eb t\u00eb dh\u00ebnat vet\u00ebm n\u00eb llogarin\u00eb e p\u00ebrdoruesit n\u00eb atributin Info<\/i>, t\u00eb cilin p\u00ebrdoruesi mund ta ndryshoj\u00eb vet\u00eb p\u00ebr llogarin\u00eb e tij.\n <\/li>\n
      3. Pjesa e kodit q\u00eb gjeneron vler\u00ebn e atributit \u00ebsht\u00eb modifikuar.\n <\/li>\n<\/ol>\n

        Tani skriptet duken k\u00ebshtu:
        \nSaveLogonInfoToAdUserAttrib.vbs<\/b><\/p>\n

        On Error Resume Next\nSet wshShell = CreateObject(\"WScript.Shell\")\nstrComputerName = wshShell.ExpandEnvironmentStrings(\"%COMPUTERNAME%\")\nSet adsinfo = CreateObject(\"ADSystemInfo\")\nSet oUser = GetObject(\"LDAP:\/\/\" & adsinfo.UserName)\nstrMonth = Month(Now())\nIf Len(strMonth) < 2 then\n  strMonth = "0" & strMonth\nEnd If\nstrDay = Day(Now())\nIf Len(strDay) < 2 then\n  strDay = "0" & strDay\nEnd If\nstrTime = FormatDateTime(Now(),vbLongTime)\nIf Len(strTime) < 8 then\n  strTime = "0" & strTime\nEnd If\nstrTimeStamp = Year(Now()) & "\\\/" & strMonth & "\\\/" & strDay & " " & strTime\noUser.put "info", strTimeStamp & " \" & \" @ \" & strComputerName\noUser.Setinfo\n<\/code><\/pre>\n
        SaveLogoffInfoToAdUserAttrib.vbs<\/b><\/p>\n
        On Error Resume Next\nSet wshShell = CreateObject(\"WScript.Shell\")\nstrComputerName = wshShell.ExpandEnvironmentStrings(\"%COMPUTERNAME%\")\nSet adsinfo = CreateObject(\"ADSystemInfo\")\nSet oUser = GetObject(\"LDAP:\/\/\" & adsinfo.UserName)\nstrMonth = Month(Now())\nIf Len(strMonth) < 2 then\n  strMonth = "0" & strMonth\nEnd If\nstrDay = Day(Now())\nIf Len(strDay) < 2 then\n  strDay = "0" & strDay\nEnd If\nstrTime = FormatDateTime(Now(),vbLongTime)\nIf Len(strTime) < 8 then\n  strTime = "0" & strTime\nEnd If\nstrTimeStamp = Year(Now()) & "\\\/" & strMonth & "\\\/" & strDay & " " & strTime\noUser.put "info", strTimeStamp & " \" & \" @ \" & strComputerName\noUser.Setinfo\n<\/code><\/pre>\n
        \nKushdo q\u00eb do t\u00eb gjej\u00eb t\u00eb gjitha dallimet mes skriptit t\u00eb logon dhe logoff, do t\u00eb ket\u00eb nj\u00eb plus n\u00eb karma. \ud83d\ude42
        \nPo ashtu, p\u00ebr t\u00eb marr\u00eb informacion t\u00eb qart\u00eb \u00ebsht\u00eb krijuar nj\u00eb skript t\u00eb vog\u00ebl PS:
        \nGet-UsersByPCsInfo.ps1<\/b><\/p>\n
        $OU = \"OU=MyUsers,DC=mydomain,DC=com\"\nGet-ADUser -SearchBase $OU -Properties * -Filter * | Select-Object DisplayName, SamAccountName, info | Sort DisplayName | Out-GridView -Title \"Informacion rreth logonave\" -Wait\n<\/code><\/pre>\n
        \nPra, gjith\u00e7ka konfigurhet shum\u00eb leht\u00eb:<\/p>\n
          \n
        1. krijojm\u00eb GPO me cil\u00ebsimet e nevojshme dhe e lidhemi me nj\u00ebsi administrative me stacionet e pun\u00ebs t\u00eb p\u00ebrdoruesve:
          \n\"Windows:\n <\/li>\n
        2. shkoi t\u00eb pij\u00eb \u00e7aj (n\u00ebse AD ka nj\u00eb num\u00ebr t\u00eb madh p\u00ebrdoruesish, at\u00ebher\u00eb nevojitet shum\u00eb \u00e7aj \ud83d\ude42\n <\/li>\n
        3. nisim skriptin PS dhe marrim rezultatin:
          \n\"Windows:
          \nN\u00eb pjes\u00ebn e sip\u00ebrme t\u00eb dritares ka nj\u00eb filtrues t\u00eb p\u00ebrshtatsh\u00ebm, ku mund t\u00eb filtrojm\u00eb t\u00eb dh\u00ebnat sipas vlerave t\u00eb nj\u00eb ose m\u00eb shum\u00eb fushave. Klikimi mbi kolonat e tabel\u00ebs rendit t\u00eb dh\u00ebnat sipas vlerave t\u00eb fushave p\u00ebrkat\u00ebse.\n <\/li>\n<\/ol>\n
          Mund ta \"paketojm\u00eb\" bukur zgjidhjen ton\u00eb.
          \n\"Windows:
          \nP\u00ebr k\u00ebt\u00eb do t\u00eb shtojm\u00eb nj\u00eb shkurtes\u00eb p\u00ebr ekzekutimin e skriptit p\u00ebr specialist\u00ebt e mb\u00ebshtetjes teknike, ku n\u00eb fush\u00ebn \"objekti\" do t\u00eb ket\u00eb di\u00e7ka t\u00eb till\u00eb:
          \npowershell.exe -NoLogo -ExecutionPolicy Bypass -File \"servershareScriptsGet-UsersByPCsInfo.ps1\"
          \n<\/code>
          \nN\u00ebse ka shum\u00eb staf mb\u00ebshtetjeje teknike, mund t\u00eb shp\u00ebrndani nj\u00eb shkurtes\u00eb me an\u00eb t\u00eb           GPP<\/a><\/noindex>.<\/p>\n
          Disa v\u00ebrejtje p\u00ebrfundimtare.<\/p>\n