Rirọ

Mu ṣiṣẹ tabi mu Ẹṣọ Ijẹẹri ṣiṣẹ ni Windows 10

Gbiyanju Irinse Wa Fun AwọN IṣOro Imukuro





Pipa loriImudojuiwọn to kẹhin: Oṣu Kẹta Ọjọ 17, Ọdun 2021

Mu ṣiṣẹ tabi mu Ẹṣọ Ijẹẹri ṣiṣẹ ni Windows 10: Ẹṣọ Ijẹrisi Windows nlo aabo ti o da lori agbara lati ya sọtọ awọn aṣiri ki sọfitiwia eto ti o ni anfani nikan le wọle si wọn. Wiwọle laigba aṣẹ si awọn aṣiri wọnyi le ja si awọn ikọlu ole jija, gẹgẹbi Pass-the-Hash tabi Pass-The-Ticket. Ẹṣọ Ijẹrisi Windows ṣe idilọwọ awọn ikọlu wọnyi nipa idabobo awọn hashes ọrọ igbaniwọle NTLM, Awọn Tiketi Gbigba Tiketi Kerberos, ati awọn iwe-ẹri ti o fipamọ nipasẹ awọn ohun elo bi awọn iwe-ẹri agbegbe.



Mu ṣiṣẹ tabi mu Ẹṣọ Ijẹẹri ṣiṣẹ ni Windows 10

Nipa mimuuṣiṣẹpọ Oluṣọ Ijẹrisi Windows awọn ẹya wọnyi ati awọn ojutu ti pese:



Hardware aabo
Aabo-orisun foju
Idaabobo to dara julọ lodi si awọn irokeke itẹramọṣẹ ilọsiwaju

Bayi o mọ pataki ti Ẹri Ẹri, o yẹ ki o mu eyi ṣiṣẹ ni pato fun eto rẹ. Nitorinaa laisi jafara eyikeyi akoko jẹ ki a wo Bii o ṣe le mu ṣiṣẹ tabi mu ẹṣọ ijẹrisi ṣiṣẹ ni Windows 10 pẹlu iranlọwọ ti ikẹkọ ti a ṣe atokọ ni isalẹ.



Awọn akoonu[ tọju ]

Mu ṣiṣẹ tabi mu Ẹṣọ Ijẹẹri ṣiṣẹ ni Windows 10

Rii daju lati ṣẹda a pada ojuami o kan ni irú nkankan lọ ti ko tọ.



Ọna 1: Mu ṣiṣẹ tabi Mu Ẹṣọ Ijẹẹri ṣiṣẹ ni Windows 10 ni lilo Olootu Afihan Ẹgbẹ

Akiyesi: Ọna yii n ṣiṣẹ nikan ti o ba ni Windows Pro, Ẹkọ, tabi Ẹya Idawọlẹ. Fun Windows Home version awọn olumulo foo ọna yii ki o tẹle atẹle naa.

1.Tẹ Windows Key + R lẹhinna tẹ regedit ki o si tẹ Tẹ lati ṣii Ẹgbẹ Afihan Olootu.

Ṣiṣe aṣẹ regedit

2. Lilö kiri si ọna atẹle:

Iṣeto Kọmputa> Awọn awoṣe Isakoso> Eto> Ẹṣọ ẹrọ

3. Rii daju lati yan Oluso ẹrọ ju ni ọtun window PAN ni ilopo-tẹ lori Tan Aabo Da lori Foju eto imulo.

Tẹ lẹẹmeji lori Tan-an Ilana Aabo Da lori Ipilẹṣẹ

4.In awọn Properties window ti awọn loke imulo rii daju lati yan Ti ṣiṣẹ.

Ṣeto Tan-an Aabo Da lori Imudara lati Muu ṣiṣẹ

5.Bayi lati awọn Yan Ipele Aabo Platform silẹ-isalẹ yan Bata to ni aabo tabi Boot Secure ati DMA Idaabobo.

Lati Yan Ipele Aabo Platform ni jabọ-silẹ yan Ipamọ Boot tabi Boot Secure ati Idaabobo DMA

6.Next, lati Iṣeto ni oluso ẹrí silẹ-isalẹ yan Ti ṣiṣẹ pẹlu titiipa UEFI . Ti o ba fẹ paa Ẹṣọ Ijẹrisi latọna jijin, yan Ṣiṣẹ laisi titiipa dipo Mu ṣiṣẹ pẹlu titiipa UEFI.

7.Once pari, tẹ Waye atẹle nipa O dara.

8.Reboot rẹ PC lati fi awọn ayipada.

Ọna 2: Mu ṣiṣẹ tabi Mu Ẹṣọ Ijẹẹri ṣiṣẹ ni Windows 10 ni lilo Olootu Iforukọsilẹ

Ẹṣọ Ijẹri nlo awọn ẹya aabo ti o da lori agbara eyiti o ni lati muu ṣiṣẹ ni akọkọ lati ẹya Windows ṣaaju ki o to le mu ṣiṣẹ tabi mu Ẹri Ẹri ṣiṣẹ ni Olootu Iforukọsilẹ. Rii daju pe o lo ọkan ninu awọn ọna ti a ṣe akojọ si isalẹ lati mu awọn ẹya aabo ti o da lori agbara agbara ṣiṣẹ.

Ṣafikun awọn ẹya aabo ti o da lori agbara nipa lilo Awọn eto ati Awọn ẹya

1.Tẹ Windows Key + R lẹhinna tẹ appwiz.cpl ki o si tẹ Tẹ lati ṣii Eto ati Awọn ẹya ara ẹrọ.

tẹ appwiz.cpl ki o si tẹ Tẹ lati ṣii Awọn eto ati Awọn ẹya ara ẹrọ

2.Lati osi-ọwọ window tẹ lori Tan Awọn ẹya Windows tan tabi paa .

tan-an tabi pa awọn ẹya windows

3.Wa ati faagun Hyper-V lẹhinna bakanna faagun Hyper-V Platform.

4.Under Hyper-V Platform ayẹwo Hyper-V Hypervisor .

Labẹ Hyper-V Platform checkmark Hyper-V Hypervisor

5.Bayi yi lọ si isalẹ ati ṣayẹwo Ipo Olumulo Yasọtọ ki o si tẹ O DARA.

Ṣafikun awọn ẹya aabo ti o da lori agbara si aworan aisinipo nipa lilo DISM

1.Tẹ Windows Key + X lẹhinna yan Aṣẹ Tọ (Abojuto).

pipaṣẹ tọ pẹlu admin awọn ẹtọ

2.Tẹ aṣẹ wọnyi sinu cmd lati ṣafikun Hyper-V Hypervisor ki o tẹ Tẹ:

|_+__|

Ṣafikun awọn ẹya aabo ti o da lori agbara si aworan aisinipo nipa lilo DISM

3.Fi ẹya Ipo Olumulo Ya sọtọ nipa ṣiṣe pipaṣẹ wọnyi:

|_+__|

Ṣafikun ẹya Ipo Olumulo Ya sọtọ

4.Once pari, o le pa awọn pipaṣẹ tọ.

Mu ṣiṣẹ tabi mu Ẹṣọ Ijẹẹri ṣiṣẹ ni Windows 10

1.Tẹ Windows Key + R lẹhinna tẹ regedit ki o si tẹ Tẹ lati ṣii Olootu Iforukọsilẹ.

Ṣiṣe aṣẹ regedit

2.Lilö kiri si bọtini iforukọsilẹ atẹle:

HKEY_LOCAL_MACHINE SystemCurrentControlSet Iṣakoso DeviceGuard

3.Ọtun-tẹ lori DeviceGuard lẹhinna yan Tuntun> DWORD (32-bit) Iye.

Tẹ-ọtun lori DeviceGuard lẹhinna yan DWORD Tuntun (32-bit) Iye

4. Daruko DWORD tuntun ti a ṣẹda bi Muu VirtualizationBasedSecurity ṣiṣẹ ki o si tẹ Tẹ.

Lorukọ DWORD tuntun ti a ṣẹda bi EnableVirtualizationBasedSecurity ki o si tẹ Tẹ

5.Double-tẹ lori EnableVirtualizationBasedSecurity DWORD lẹhinna yi iye rẹ pada si:

Lati Mu Aabo ti o da lori Ipilẹṣẹ ṣiṣẹ: 1
Lati Mu Aabo ti o da lori Foju ṣiṣẹ: 0

Lati Mu Aabo ti o da lori Ipilẹṣẹ ṣiṣẹ yi iye DWORD pada si 1

6.Now lẹẹkansi ọtun-tẹ lori DeviceGuard lẹhinna yan Tuntun> DWORD (32-bit) Iye ki o si so yi DWORD bi RequirePlatformSecurity Awọn ẹya ara ẹrọ lẹhinna tẹ Tẹ.

Lorukọ DWORD yii bi RequirePlatformSecurityFeatures lẹhinna tẹ Tẹ

7.Double-tẹ lori RequirePlatformSecurityFeatures DWORD ati yi iye pada si 1 lati lo Boot Secure nikan tabi ṣeto si 3 lati lo Secure Boot ati DMA Idaabobo.

Yi pada

8. Bayi lilö kiri si bọtini iforukọsilẹ atẹle:

HKEY_LOCAL_MACHINE SystemCurrentControlSet Iṣakoso LSA

9.Right-tẹ lori LSA lẹhinna yan Tuntun> DWORD (32-bit) Iye lẹhinna so DWORD yii bi LsaCfgFlags ki o si tẹ Tẹ.

Tẹ-ọtun lori LSA lẹhinna yan Tuntun lẹhinna DWORD (32-bit) Iye

10.Double-tẹ lori LsaCfgFlags DWORD ki o yi iye rẹ pada gẹgẹbi:

Mu Oluso Ijẹri kuro: 0
Mu Ẹṣọ Ijẹri ṣiṣẹ pẹlu titiipa UEFI: 1
Mu Ẹṣọ Ijẹri ṣiṣẹ laisi titiipa: 2

Tẹ lẹẹmeji lori LsaCfgFlags DWORD ki o yi iye rẹ pada gẹgẹbi

11.Lọgan ti pari, pa Olootu Iforukọsilẹ.

Pa Ẹṣọ Ijẹri kuro ni Windows 10

Ti Ẹṣọ Ijẹri ṣiṣẹ laisi Titiipa UEFI lẹhinna o le Pa Windows Credential Guard lilo awọn Ẹṣọ Ẹrọ ati Ọpa imurasilẹ hardware Guard tabi ọna atẹle:

1.Tẹ Windows Key + R lẹhinna tẹ regedit ki o si tẹ Tẹ lati ṣii Olootu Iforukọsilẹ.

Ṣiṣe aṣẹ regedit

2.Lilö kiri ati paarẹ awọn bọtini iforukọsilẹ atẹle wọnyi:

|_+__|

Pa Windows Credential Guard

3. Pa awọn oniyipada EFI Ẹri Ẹri Windows rẹ nipa lilo bcdedit . Tẹ Windows Key + X lẹhinna yan Aṣẹ Tọ (Abojuto).

pipaṣẹ tọ pẹlu admin awọn ẹtọ

4.Tẹ aṣẹ wọnyi sinu cmd ki o tẹ Tẹ:

|_+__|

5.Once pari, sunmọ pipaṣẹ tọ ati atunbere rẹ PC.

6.Gba awọn tọ lati mu Windows ẹrí Guard.

Ti ṣe iṣeduro: