IWindows: thola ukuthi ubani ongene lapho

IWindows: thola ukuthi ubani ongene lapho
- O, akukho okungisebenzelayo, siza!
- Ungakhathazeki, sizolungisa yonke into manje. Nikeza igama lekhompyutha yakho...
(okwakudala kohlobo kusuka kumakholi kuya kusekelo lobuchwepheshe)

Kuhle uma unethuluzi i-la BgInfo noma abasebenzisi bakho bazi ngesinqamuleli se-Windows+Pause/Break futhi bazi ukuthi siyicindezela kanjani. Kukhona nezibonelo ezingavamile ezikwazile ukwazi igama lemoto yazo. Kodwa ngokuvamile oshaya ucingo, ngaphezu kwenkinga yakhe enkulu, uneyesibili: ukuthola igama/ikheli le-IP lekhompyutha. Futhi ngokuvamile kuthatha isikhathi esiningi ukuxazulula le nkinga yesibili kuneyokuqala (futhi ubudinga nje ukushintsha isithombe sangemuva noma ukubuyisela isinqamuleli esingekho :).
Kodwa kuhle kakhulu ukuzwa into efana nale:
- Tatyana Sergeevna, ungakhathazeki, sengivele ngixhuma ...


Futhi awudingi okuningi kulokhu.
Uchwepheshe wosekelo lwezobuchwepheshe udinga kuphela ukubamba ngekhanda amagama emishini futhi akhumbule ukuthi ubani osebenzela bani.
Ngaphambi kokuchaza isixazululo esisisebenzisayo njengamanje, ngizobheka kafushane ezinye izindlela ukuze ngibagxeke kuze kube sekupheleni futhi ngichaze ukukhetha kwami.

  1. BgInfo, Ulwazi Lwedeskithophu nokunye okunjalo. Uma kunemali eningi, kukhona abakhokhelwayo. Iphuzu liwukuthi ulwazi lobuchwepheshe luboniswa kudeskithophu: igama lomshini, ikheli le-IP, ukungena ngemvume, njll. Kulwazi Lwedeskithophu ungakwazi ngisho nokushutheka amagrafu okusebenza kuhhafu wesikrini.
    Engingakuthandi ukuthi ku-Bginfo efanayo, isibonelo, umsebenzisi udinga ukunciphisa amawindi ukuze abone idatha edingekayo. Mina nozakwethu siye sabona izikhathi ezingaphezu kwesisodwa e-BgInfo isici se-artifact, lapho umbhalo omusha uboniswa phezu komdala.
    Abanye abasebenzisi bacasulwa ukuthi ama-admins adweba u-192.168.0.123 ethusayo ebusweni bekati elelulwe kudeskithophu, onakalise ubuhle besithombe sangemuva, futhi, vele, lokhu kwehlisa kakhulu amandla futhi kubulala ngokuphelele umoya womsebenzi. .
  2. Ilebula ethi "Ngingubani" (ungazami ukwengeza uphawu lombuzo kuyo ekugcineni :). Isinqamuleli sakudala kudeskithophu, ngemuva esifihla umbhalo ococekile noma ongacocekile kangako obonisa ulwazi oludingekayo ngendlela yebhokisi lengxoxo. Kwesinye isikhathi, esikhundleni sesinqamuleli, babeka iskripthi uqobo kudeskithophu, okuyi-IMHO imikhuba emibi.
    Okubi ukuthi ukwethula isinqamuleli, njengasekuqaleni, udinga ukunciphisa wonke amafasitela avuliwe (asicabangi lezo zithandwa zenhlanhla ezinefasitela elilodwa le-solitaire elivuliwe emshinini wabo womsebenzi). Kodwa-ke, ingabe abasebenzisi bakho bayazi ukuthi bangachofoza kuphi ukuze banciphise wonke amawindi? Kunjalo, umunwe esweni admin.

I-cap iphinde iphakamise ukuthi zombili izindlela ezichazwe ngenhla zinokuhlehlisa okuyinhloko ukuthi umsebenzisi uhileleke ekutholeni ulwazi, okungenzeka abe yimpumputhe, iziphukuphuku, noma amanga.
Ngeke ngicabangele inketho yokwandisa ulwazi lwekhompyutha, lapho wonke umuntu azi ukuthi ku-Windows angabheka kuphi igama lomshini wabo: kuyimbangela enhle, kodwa enzima kakhulu. Futhi uma inkampani inenzuzo yabasebenzi, iyonakala ngokuphelele. Ngingathini, ezimweni eziningi abakhumbuli nokungena kwabo.

Ngithulule umphefumulo wami, futhi manje iphuzu.
Umbono womhlali waseKhabrov wathathwa njengesisekelo mittel kusuka ku Lesi sihloko.
Ingqikithi yombono ukuthi lapho umsebenzisi engena ku-Windows, umbhalo welogon ufaka ulwazi oludingekayo (isikhathi negama lomshini) kusibaluli esithile se-akhawunti yomsebenzisi. Futhi uma uphuma ohlelweni, iskripthi se-logoff esifanayo siyasetshenziswa.

Ngawuthanda umbono ngokwawo, kodwa kwakunezinto engangingajabule ngazo ekusetshenzisweni.

  1. Inqubomgomo yeqembu, ecacisa imibhalo yokungena ne-logoff yabasebenzisi, isebenza kuso sonke isizinda, ngakho-ke imibhalo izosebenza kunoma yimuphi umshini abasebenzisi abangena kuwo. Uma usebenzisa izixazululo zetheminali kanye nezindawo zokusebenza (isibonelo, iMicrosoft RDS noma imikhiqizo ye-Citrix), le ndlela izoba kabi.
  2. Idatha ifakwe kusibaluli soMnyango se-akhawunti yomsebenzisi, lapho umsebenzisi ojwayelekile akwazi ukufinyelela kuyo ukufunda kuphela. Ngokungeziwe kusibaluli se-akhawunti yomsebenzisi, umbhalo uphinde wenze izinguquko kusibaluli soMnyango se-akhawunti yekhompyutha, abasebenzisi abazenzakalelayo abangakwazi ukushintsha noma. Ngakho-ke, ukuze isisombululo sisebenze, umbhali uphakamisa ukushintsha izindinganiso zezilungiselelo zokuphepha zezinto ze-AD.
  3. Ifomethi yedethi incike kuzilungiselelo zokwenziwa kwendawo emshinini oqondiwe, ngakho-ke emshinini owodwa singathola 10 Novemba 2018 14:53, futhi kusukela komunye 11/10/18 2:53 pm

Ukuze kuqedwe lokhu kushiyeka, lokhu okulandelayo kwenziwa.

  1. I-GPO ayixhunyanisiwe nesizinda, kodwa ne-OU enemishini (ngihlukanisa abasebenzisi nemishini ngiyenze ama-OU ahlukene futhi ngeluleke abanye). Ngaphezu kwalokho, ngoba Imodi yokucubungula inqubomgomo ye-loopback imodi isethiwe hlanganisa.
  2. Umbhalo uzobhala kuphela idatha ku-akhawunti yomsebenzisi kusibaluli Info, umsebenzisi angakwazi ukuyishintsha ngokuzimele ku-akhawunti yakhe.
  3. Kushintshwe ucezu lwekhodi olukhiqiza inani lesibaluli

Manje imibhalo ibukeka kanje:
GcinaI-LogonInfoToAdUserAttrib.vbs

On Error Resume Next
Set wshShell = CreateObject("WScript.Shell")
strComputerName = wshShell.ExpandEnvironmentStrings("%COMPUTERNAME%")
Set adsinfo = CreateObject("ADSystemInfo")
Set oUser = GetObject("LDAP://" & adsinfo.UserName)
strMonth = Month(Now())
If Len(strMonth) < 2 then
  strMonth = "0" & strMonth
End If
strDay = Day(Now())
If Len(strDay) < 2 then
  strDay = "0" & strDay
End If
strTime = FormatDateTime(Now(),vbLongTime)
If Len(strTime) < 8 then
  strTime = "0" & strTime
End If
strTimeStamp = Year(Now()) & "/" & strMonth & "/" & strDay & " " & strTime
oUser.put "info", strTimeStamp & " <logon>" & " @ " & strComputerName
oUser.Setinfo

Londoloza iLogoffInfoToAdUserAttrib.vbs

On Error Resume Next
Set wshShell = CreateObject("WScript.Shell")
strComputerName = wshShell.ExpandEnvironmentStrings("%COMPUTERNAME%")
Set adsinfo = CreateObject("ADSystemInfo")
Set oUser = GetObject("LDAP://" & adsinfo.UserName)
strMonth = Month(Now())
If Len(strMonth) < 2 then
  strMonth = "0" & strMonth
End If
strDay = Day(Now())
If Len(strDay) < 2 then
  strDay = "0" & strDay
End If
strTime = FormatDateTime(Now(),vbLongTime)
If Len(strTime) < 8 then
  strTime = "0" & strTime
End If
strTimeStamp = Year(Now()) & "/" & strMonth & "/" & strDay & " " & strTime
oUser.put "info", strTimeStamp & " <logoff>" & " @ " & strComputerName
oUser.Setinfo

Noma ubani ongowokuqala ukuthola wonke umehluko phakathi kwemibhalo ye-Logon ne-Logoff uzothola ukuhlanganisa kwe-karma. πŸ™‚
Futhi, ukuze uthole ulwazi olubonakalayo, umbhalo omncane we-PS olandelayo wakhiwe:
Thola-UsersByPCsInfo.ps1

$OU = "OU=MyUsers,DC=mydomain,DC=com"
Get-ADUser -SearchBase $OU -Properties * -Filter * | Select-Object DisplayName, SamAccountName, info | Sort DisplayName | Out-GridView -Title "Π˜Π½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΡ ΠΏΠΎ Π»ΠΎΠ³ΠΎΠ½Π°ΠΌ" -Wait

Sekukonke, konke kulungiselelwe okukodwa-okubili-okuthathu:

  1. dala i-GPO enezilungiselelo ezidingekayo bese uyixhumanisa nomnyango nezindawo zokusebenza zabasebenzisi:
    IWindows: thola ukuthi ubani ongene lapho
  2. asihambe siphuze itiye (uma i-AD inenani elikhulu labasebenzisi, udinga itiye eliningi :)
  3. sebenzisa iskripthi se-PS futhi uthole umphumela:
    IWindows: thola ukuthi ubani ongene lapho
    Phezulu efasiteleni kukhona isihlungi esikahle ongakhetha kuso idatha ngokusekelwe kumanani enkambu eyodwa noma ngaphezulu. Ngokuchofoza amakholomu ethebula kuhlunga amarekhodi ngamavelu ezinkambu ezihambisanayo.

Singakwazi "ukupakisha" isisombululo sethu kahle.
IWindows: thola ukuthi ubani ongene lapho
Ukuze senze lokhu, sizokwengeza isinqamuleli sokuqalisa iskripthi sochwepheshe bosekelo lobuchwepheshe, abazoba nokuthile okufana nalokhu kunkambu "yento":
powershell.exe -NoLogo -ExecutionPolicy Bypass -File "servershareScriptsGet-UsersByPCsInfo.ps1"

Uma kunezisebenzi eziningi zosekelo lwezobuchwepheshe, ungasabalalisa isinqamuleli usebenzisa GPP.

Amazwana ambalwa okugcina.

  • Imojuli ye-Active Directory ye-PowerShell kufanele ifakwe emshinini okuqalwa kuwo umbhalo we-PS (ukwenza lokhu, vele wengeze amathuluzi okuphatha e-AD ezingxenyeni ze-Windows).
  • Ngokuzenzakalelayo, umsebenzisi akakwazi ukuhlela izici eziningi ze-akhawunti yakhe. Gcina lokhu engqondweni uma unquma ukusebenzisa isibaluli esingesona Info.
  • Yazisa bonke ozakwenu abathintekayo ukuthi iyiphi imfanelo ozoyisebenzisa. Ngokwesibonelo, okufanayo Info isetshenziselwa ukwengeza amanothi ngokuhlanganyela ebhokisini leposi lomsebenzisi kuphaneli yokulawula ye-Exchange Server futhi othile angayibhala phezu kwayo kalula, noma adabuke lapho ulwazi abalungezile lubhalwa ngaphezulu umbhalo wakho.
  • Uma unamasayithi amaningi e-Active Directory, bese uvumela ukubambezeleka kokuphindaphinda. Isibonelo, uma ufuna ukuthola ulwazi lwakamuva mayelana nabasebenzisi abavela kusayithi le-AD, futhi uqalise iskripthi emshinini osuka kusayithi B ye-AD, ungenza lokhu:
    Get-ADUser -Server DCfromSiteA -SearchBase $OU -Properties * -Filter * | Select-Object DisplayName, SamAccountName, info | Sort DisplayName | Out-GridView -Title "Π˜Π½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΡ ΠΏΠΎ Π»ΠΎΠ³ΠΎΠ½Π°ΠΌ" -Wait

    DCfromSiteA - igama lomlawuli wesizinda sesayithi A (ngokuzenzakalelayo, i-Get-AdUser cmdlet ixhuma kusilawuli sesizinda esiseduze)

IWindows: thola ukuthi ubani ongene lapho

Umthombo wesithombe

Ngingajabula uma ungathatha inhlolovo emfushane engezansi.

Abasebenzisi ababhalisiwe kuphela abangabamba iqhaza kuhlolovo. Ngena ngemvume, wamukelekile.

Usebenzisani?

  • bginfo, imininingwane yedeskithophu njll. (i-freeware)

  • ama-analogue akhokhelwe we-bginfo

  • Ngizokwenza njengoba kusihloko

  • akubalulekile, ngoba Ngisebenzisa i-VDI/RDS njll.

  • Angikasebenzisi lutho okwamanje, kodwa ngiyacabanga ngakho

  • Angidingi ukuqoqa idatha enjalo

  • okunye (yabelana kumazwana)

Bangu-112 abasebenzisi abavotile. Abasebenzisi abangu-39 bagobile.

Source: www.habr.com

Engeza amazwana