Isisetshenziswa soxhumano lwesithunzi somuntu sokungeyena umlawuli kumaseshini wabasebenzisi be-RDP ku-WinServer 2012R2

Inkinga ngesikhathi sokuvalelwa kwebhizinisi yaba yilena elandelayo: kuyadingeka ngempela ukunciphisa inani lokuvakashela amahhovisi ngochwepheshe abasebenza futhi bebonisana ngesoftware yesicelo, futhi ukukhuluma ngokungagwegwesi, abasebenzisi bavame ukusebenzisa kabi usizo lochwepheshe ngaphandle kokufuna ukujula. udaba ngokwalo, bathi "bazofika - bazosiza - bazokwenza, kodwa ngizobhema/ngiphuze ikhofi, njll." Ukubonisana ngocingo lapho wabelana ngeseva kuphumelela kakhulu uma ubuka isikrini esikude.

Ngemva "kokusungulwa" kwebhayisikili lethu, kwavela ulwazi oluhlakaniphile esihlokweni sendatshana: I-RDS Shadow - uxhumano lwesithunzi kumaseshini wabasebenzisi be-RDP ku-Windows Server 2012 R2 noma Imodi yesithunzi somsebenzisi ongenalungelo kuseva yeWindows noma Ukunikeza amandla okuphatha amaseshini e-RDP. Zonke zibandakanya ukusetshenziswa kwekhonsoli, ngisho nezici zenkhulumomphendvulwano elula.

Lonke ulwazi olungezansi lwenzelwe labo abakwenzayo ibekezelela ukuhlanekezela okungavamile ngokujwayelekile ukuthola umphumela oyifunayo, ukusungula izindlela ezingadingekile.
Ukuze "ungadonsi ikati ngomsila," ngizoqala ngeyokugcina: ibhayisikili lisebenzela umsebenzisi ojwayelekile usebenzisa insiza. I-AdmiLink, esibonga umbhali wayo.

I. Console kanye ne-RDP yesithunzi.

Kusukela ukusetshenziswa nge amalungelo omlawuli wekhonsoli Yesiphathi Seseva -> I-QuickSessionCollection -> ngokuchofoza iseshini yomsebenzisi onentshisekelo kuwo, ukhethe i-Shadow kumenyu yokuqukethwe kubasebenzi abayalela indlela yokusebenzisa isoftware, akuyona inketho, enye indlela "yokhuni" yacatshangelwa, okungukuthi:

1. Thola i-ID ye-RDP yeseshini:

query user | findstr Administrator

noma:

qwinsta | findstr Administrator 

Ngaphezu kwalokho "| findstr Administrator"Kwakulula kuphela uma wazi ukuthi yini ngempela Administrator udinga, noma sebenzisa ingxenye yokuqala kuphela ukuze ubone wonke umuntu engene kuseva.

2. Xhuma kulesi sikhathi, inqobo nje uma lokho kusizinda izinqubomgomo zeqembu Inketho ethi "Setha isilawuli kude sezikhathi zomsebenzisi Wezinsiza Zedeskithophu Ekude" ikhethwa okungenani ngenketho ethi "Qapha ngemvume yomsebenzisi" (ulwazi oluningi):

mstsc /shadow:127

Sicela uqaphele ukuthi uhlu luzoqukatha kuphela ukungena ngemvume komsebenzisi.

Ngiyaphinda ngithi ngaphandle kwamalungelo admin uzothola okulandelayo:

Kodwa ngokulungisa iphutha lokuqala lohlelo oluzoxoxwa ngalo, ngisebenzise i-akhawunti enamalungelo omlawuli.

II. Uhlelo

Ngakho isitatimende senkinga: ukudala isixhumi esibonakalayo esilula sokuxhuma kumqondo wesithunzi somsebenzisi ngemvume yakhe, ukuthumela umlayezo kumsebenzisi. Indawo yokuhlela ekhethiwe nguLazaru.

1. Sithola uhlu olugcwele lwesizinda lwabasebenzisi “abangena ngemvume” - “igama eligcwele” kumphathi, noma futhi ngekhonsoli:

wmic useraccount get Name,FullName 

akakho onqabela nalokhu:

wmic useraccount get Name,FullName > c:testusername.txt

Ngizosho zisuka nje ukuthi kwakunguLazaru owayenenkinga yokucubungula leli fayela, njengoba ngokuzenzakalelayo ukufakwa kwalo ngekhodi kuyi-UCS-2, ngakho-ke kwadingeka ngiliguqulele ngesandla libe yi-UTF-8 evamile. Kunamathebhu amaningi esakhiweni sefayela, noma kunalokho izikhala eziningi, okwanqunywa ukuthi zicutshungulwe ngokohlelo; ngokushesha noma kamuva inkinga yombhalo wekhodi izoxazululwa, futhi ifayela lizobuyekezwa ngokohlelo.

Ngakho-ke, umbono uwukuba nefolda efinyeleleka kubasebenzisi bohlelo, isibonelo c:test, lapho kuzoba khona amafayela angu-2: eyokuqala ngokungena ngemvume negama eligcwele, eyesibili nge-id_rdp nokungena kwabasebenzisi. Okulandelayo, sicubungula le datha ngokusemandleni ethu :).

Okwamanje, ukuze sihlotshaniswe nohlu lwamaseshini, sidlulisela lokhu okuqukethwe (igama eliphelele negama eliphelele) ohlwini:

procedure Tf_rdp.UserF2Array;
var 
  F:TextFile;   i:integer;   f1, line1:String;   fL: TStringList;
begin //f_d глобальный путь к размещению файлов 
f1:=f_d+'user_name.txt';     //задача считать в массив содержимое файла
fL := TStringList.Create; // строку подвергнем метамарфозам с разделителями
fL.Delimiter := '|'; fL.StrictDelimiter := True;
AssignFile(F,f1); 
try // Открыть файл для чтения
  reset(F); ReadLn(F,line1);
  i:=0;
while not eof(F) do // Считываем строки, пока не закончится файл
begin
ReadLn(F,line1);
line1:= StringReplace(line1, '  ', '|',[]); //заменяем первый попавш.2пробела разделителем |
// удаляем все двойные пробелы
while pos('  ',line1)>0 do line1:= StringReplace(line1, '  ', ' ', [rfReplaceAll]);
begin
if (pos('|',line1)>0) then
begin //если разделитель существует заносим его в массив
fL.DelimitedText :=line1; // разбиваем на столбцы
if (fL[0]<>'') then //если учетка имеет имя
begin //вносим ее в массив
 inc(i); // избавляемся от возможных одиночных пробелов в логине
 fam[0,i]:=StringReplace(fL[1],' ','',[rfReplaceall, rfIgnoreCase]);
 fam[1,i]:=fL[0];
 end;end;end;end; // Готово. Закрываем файл.
 CloseFile(F);
 Fl.Free;
 except
 on E: EInOutError do  ShowMessage('Ошибка обработки файла. Детали: '+E.Message);
 end;end;

Ngiyaxolisa "ngekhodi eningi", amaphuzu alandelayo azoba mfushane kakhudlwana.

2. Sisebenzisa indlela efanayo esigabeni esandulele, sifunda umphumela wokucubungula uhlu ku-elementi ye-StringGrid, kuyilapho ngizonikeza ingxenye yekhodi “ebalulekile”:

2.1 Sithola uhlu lwamanje lwezikhathi ze-RDP ngefayela:

f1:=f_d+'user.txt';
cmdline:='/c query user >'+ f1;
if ShellExecute(0,nil, PChar('cmd'),PChar(cmdline),nil,1)=0 then;
Sleep(500); // можно и подольше ждать пока файл для чтения создается

2.2 Lungisa ifayela (kukhonjiswa imigqa ebalulekile kuphela yekhodi):

StringGrid1.Cells[0,i]:=fL[1]; StringGrid1.Cells[2,i]:=fL[3]; //кидаем в цикле в StringGrid1
login1:=StringReplace(fL[1],' ','',[rfReplaceall, rfIgnoreCase]); //убираем из логина пробелы
if (SearchArr(login1)>=0) then //ищем в массиве из п1. логин и записываем в таблицу ФИО
StringGrid1.Cells[1,i]:=fam[1,SearchArr(login1)]
else StringGrid1.Cells[1,i]:='+'; // либо записываем плюсик:)
.... //в зависимости от выбора пользователя сортируем и форматируем по данным
if (b_id.Checked=true) then SortGrid(0) else SortGrid(1);
StringGrid1.AutoSizeColumn(0);StringGrid1.AutoSizeColumn(1); StringGrid1.AutoSizeColumn(2);  

3. Ukuxhumana okuqondile ngokwako ngokuchofoza kulayini onomsebenzisi nenombolo yakhe yeseshini:

  id:=(StringGrid1.Row);// узнаем номер строки  IntToStr(StringGrid1.Row)
  ids:=StringGrid1.Cells[2,id]; //получаем идентификатор rdp
  cmdline:='/c mstsc /shadow:'+ ids; //и подключаемся....
 if (b_rdp.Checked=True) then  if ShellExecute(0,nil, PChar('cmd'),PChar(cmdline),nil,1) =0 then;       

4. Imihlobiso embalwa eyengeziwe yenziwe, njengokuhlunga ngokuchofoza inkinobho yomsakazo, nemilayezo eya kumsebenzisi noma kubo bonke abasebenzisi.

→ Ikhodi yomthombo ogcwele ingabonwa lapha

III. Ukusebenzisa i-AdminLink - engikubonile:

I-AdminLink ikhiqiza isinqamuleli esikhomba indawo yokusetshenziswa admilaunch.exe, kanye nekhophi yomuntu siqu yesisetshenziswa sokuqalisa I-AdmiRun.Exe etholakala kufolda yomsebenzisi, isibonelo Vasya, uhlobo C:AbasebenzisivasyaWINDOWS. Ngokuvamile, akuyona yonke into embi kakhulu: ungadlala ngamalungelo okufinyelela kufayela lezinqamuleli nokunye ukuze usule unembeza wakho womphathi.

Source: www.habr.com