Silungisa amaklayenti e-WSUS

Amaklayenti e-WSUS awafuni ukubuyekeza ngemva kokushintsha amaseva?
Bese siya kuwe. (NGANYE)

Sonke sike saba sezimeni lapho okuthile kuyeka ukusebenza. Lesi sihloko sizogxila ku-WSUS (ulwazi olwengeziwe mayelana ne-WSUS lungatholakala ku- lapha и lapha). Noma ngokunembile, mayelana nendlela yokuphoqa amaklayenti e-WSUS (okungukuthi, amakhompyutha ethu) ukuthi athole izibuyekezo futhi ngemva kokudlulisa noma ukubuyisela iseva yokubuyekeza ekhona.

Ngakho isimo simi kanje

Iseva ye-WSUS ifile. Ngokunembayo, isilawuli se-RAID sakhiwe ngo-2000. Kodwa leli qiniso alizange lengeze injabulo. Ngemva kwengxabano emfushane (ngemizamo yokubuyisela i-RAID yonakaliswe isilawuli esifa), kunqunywe ukuthi kuthunyelwe konke ukuze kusetshenziswe iseva entsha ye-WSUS.

Ngenxa yalokho, sithole i-WSUS esebenzayo, lapho ngenxa yezizathu ezithile amaklayenti awazange axhume.
Amaphuzu: I-WSUS ixhunywe ku-FQDN ngeseva ye-DNS yangaphakathi, iseva ye-WSUS ibhaliswe kuzinqubomgomo zeqembu futhi isakazwa kumakhasimende nge-AD, izilungiselelo ezizenzakalelayo zeseva, ngaphambi kokuqala zonke izenzo, buyekeza i-WSUS ngokwayo futhi uvumelanise izibuyekezo.

Ngemva kokuhlaziya isimo, amaphuzu amaningana abalulekile ahlonziwe

1. Iclinch yeklayenti (sikhuluma nge-wuauclt) lapho izama ukuxhuma ku-SID yeseva ye-WSUS endala.
2. Inkinga ngezibuyekezo ezingakhishiwe ezilandwe kuseva ye-WSUS endala.
3. Ukupaka kwezinsizakalo ezithinta ukusebenza kwe-wuauclt (sikhuluma nge-wuauserv, bits kanye ne-cryptsvc). Ukupaka kwenzeke ngenxa yezizathu ezahlukene, ezingahlaziywanga ngokuningiliziwe.

Ngenxa yalokho, isixazululo sonke sibangele iskripthi esincane, esatshalaliswa ngezinqubomgomo zeqembu nge-AD noma ngezandla zakho (nezinyawo). Iskripthi sisebenzisa inketho yokulungisa ephephe kunazo zonke futhi asilethanga nomphumela owodwa omubi izinyanga eziyisithupha zokusetshenziswa.

Ngizochaza okwenziwayo (kulabo abafuna ukwazi ikakhulukazi)

Sipaka isevisi yeseva yokuvuselela, sisula isichazi sezokuphepha sesevisi yezokuxhumana ye-WSUS, sisusa izibuyekezo ezikhona ku-WSUS yangaphambilini, sisula ukubhaliswa kwezithenjwa ze-WSUS yangaphambilini, siqale isevisi yokuvuselela okuzenzakalelayo (wuauserv), isevisi yokudlulisa ehlakaniphile yangemuva ( bits) kanye nensizakalo ye-cryptography (cryptsvc), ekugcineni singqongqoza ngenkani ku-WSUS ukuze sisethe kabusha ukugunyazwa, sithole i-WSUS entsha futhi senze umbiko kuseva.

Futhi njengenjwayelo: wenza zonke izenzo ezichazwe ngenhla nangezansi ngengozi yakho kanye nengozi. Sicela uqiniseke ukuthi yonke idatha edingekayo ilondoloziwe ngaphambi kokusebenzisa iskripthi.

Iskripthi

net stop wuauserv
sc sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
del /f /s /q %windir%SoftwareDistributiondownload*.*
REG DELETE "HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate" /v AccountDomainSid /f
REG DELETE "HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate" /v PingID /f
REG DELETE "HKLMSOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdate" /v SusClientId /f 
net start wuauserv && net start bits && net start cryptsvc
wuauclt /resetauthorization /detectnow /reportnow

Source: www.habr.com