Ithambile

Nika amandla noma Khubaza I-Credential Guard ku Windows 10

Zama Ithuluzi Lethu Lokuqeda Izinkinga





Kuthunyelwe kuIgcine ukubuyekezwa: Februwari 17, 2021

Nika amandla noma Khubaza i-Credential Guard ku Windows 10: I-Windows Credential Guard isebenzisa ukuphepha okusekelwe ku-virtualization ukuze ihlukanise izimfihlo ukuze isofthiwe yesistimu enelungelo kuphela ifinyelele kuzo. Ukufinyelela okungagunyaziwe kulezi zimfihlo kungaholela ekuhlaselweni kobugebengu bemininingwane, njenge-Pass-the-Hash noma i-Pass-The-Ticket. I-Windows Credential Guard ivimbela lokhu kuhlasela ngokuvikela ama-hash ayimfihlo e-NTLM, Amathikithi Okunikeza Amathikithi e-Kerberos, kanye nemininingwane egcinwe izinhlelo zokusebenza njengezifakazelo zesizinda.



Nika amandla noma Khubaza I-Credential Guard ku Windows 10

Ngokunika amandla i-Windows Credential Guard izici ezilandelayo nezisombululo ziyanikezwa:



Ukuphepha kwezingxenyekazi zekhompyutha
Ukuvikeleka okusekelwe ekwenzeni izinto ezibonakalayo
Ukuvikeleka okungcono ezinsongweni eziqhubekayo eziqhubekayo

Manje usuyazi ukubaluleka kweCredential Guard, kufanele nakanjani uvule lokhu ohlelweni lwakho. Ngakho-ke ngaphandle kokumosha isikhathi ake sibone Indlela Yokuvumela Noma Ukukhubaza I-Credential Guard ku Windows 10 ngosizo lwesifundo esohlwini olungezansi.



Okuqukethwe[ fihla ]

Nika amandla noma Khubaza I-Credential Guard ku Windows 10

Qiniseka ukuthi dala iphoyinti lokubuyisela uma kwenzeka kukhona okungahambi kahle.



Indlela 1: Nika amandla noma Khubaza I-Credential Guard ku Windows 10 usebenzisa Isihleli Senqubomgomo Yeqembu

Qaphela: Le ndlela isebenza kuphela uma uneWindows Pro, Education, noma Enterprise Edtion. Kubasebenzisi benguqulo ye-Windows Home yeqa le ndlela bese ulandela elandelayo.

1.Cindezela i-Windows Key + R bese uthayipha regedit bese ucindezela u-Enter ukuze uvule Umhleli Wenqubomgomo Yeqembu.

Qalisa umyalo regedit

2. Zulazulela endleleni elandelayo:

Ukucushwa Kwekhompyutha > Izibonisi Zokuphatha > Uhlelo > Isigadi Sedivayisi

3.Qinisekisa ukuthi uyakhetha Isigadi Sedivayisi kunasefasiteleni elingakwesokudla chofoza kabili kulo Vula Ukuphepha Okusekelwe Ekusebenzeleni Okubonakalayo inqubomgomo.

Chofoza kabili Vula i-Virtualization Based Security Policy

4.Efasiteleni Lezakhiwo lenqubomgomo engenhla qiniseka ukuthi uyakhetha Inikwe amandla.

Setha Ukuvula Ukuphepha Okusekelwe Ekusebenzeni Okubonakalayo ukuze Kunikwe Amandla

5. Manje kusukela ku Khetha Ileveli Yokuphepha Yenkundla ukukhetha okudonsela phansi Ukuqalisa Okuvikelekile noma Ukubhukha Okuvikelekile kanye ne-DMA Ukuvikelwa.

Kusuka kokuthi Khetha I-Platform Security Level eyehlayo khetha i-Secure Boot noma Secure Boot kanye nokuvikelwa kwe-DMA

6.Okulandelayo, kusuka Ukulungiswa Konogada ukukhetha okudonsela phansi Inikwe amandla ngokukhiya kwe-UEFI . Uma ufuna ukuvala I-Credential Guard ukude, khetha okuthi Kunikwe amandla ngaphandle kokukhiya esikhundleni sokuthi Kunikwe amandla ngokhiye we-UEFI.

7.Uma usuqedile, chofoza okuthi Faka kulandele okuthi KULUNGILE.

8.Qalisa kabusha i-PC yakho ukuze ulondoloze izinguquko.

Indlela yesi-2: Nika amandla noma Khubaza i-Credential Guard ku Windows 10 usebenzisa i-Registry Editor

I-Credential Guard isebenzisa izici zokuphepha ezisekelwe ekubonweni okufanele zinikwe amandla kuqala kusici se-Windows ngaphambi kokuthi uvule noma ukhubaze i-Credential Guard ku-Registry Editor. Qiniseka ukuthi usebenzisa eyodwa kuphela yezindlela ezisohlwini olungezansi ukuze unike amandla izici zokuphepha ezisekelwe ekubonweni.

Engeza izici zokuphepha ezisekelwe ekubonweni ngokusebenzisa Izinhlelo nezici

1.Cindezela i-Windows Key + R bese uthayipha appwiz.cpl bese ucindezela u-Enter ukuze uvule Uhlelo kanye nezici.

thayipha i-appwiz.cpl bese ucindezela u-Enter ukuze uvule Izinhlelo nezici

2.Efasiteleni elingakwesokunxele chofoza Vula noma uvale Izici zeWindows .

vula noma vala izici zewindi

3.Thola futhi wandise I-Hyper-V bese unweba ngendlela efanayo I-Hyper-V Platform.

4.Ngaphansi kwe-Hyper-V Platform umaki wokuhlola I-Hyper-V Hypervisor .

Ngaphansi komaka we-Hyper-V Platform Hyper-V Hypervisor

5.Manje pheqela phansi bese umaka Imodi Yomsebenzisi Ehlukanisiwe bese uchofoza OK.

Engeza izici zokuphepha ezisekelwe ekubonweni kwesithombe esithombeni esingaxhunyiwe ku-inthanethi ngokusebenzisa i-DISM

1.Cindezela i-Windows Key + X bese ukhetha I-Command Prompt (Admin).

umyalo ohambisana namalungelo omlawuli

2.Thayipha umyalo olandelayo ku-cmd ukuze wengeze iHyper-V Hypervisor bese ushaya u-Enter:

|_+_|

Engeza izici zokuphepha ezisekelwe ekubonweni esithombeni esingaxhunyiwe ku-inthanethi ngokusebenzisa i-DISM

3.Engeza isici se-Isolated User Mode ngokusebenzisa umyalo olandelayo:

|_+_|

Engeza isici se-Isolated User Mode

4.Uma usuqedile, ungavala umyalo womyalo.

Nika amandla noma Khubaza I-Credential Guard ku Windows 10

1.Cindezela i-Windows Key + R bese uthayipha regedit bese ucindezela u-Enter ukuze uvule Registry Editor.

Qalisa umyalo regedit

2.Zulazulela kukhiye wokubhalisa olandelayo:

HKEY_LOCAL_MACHINESystemCurrentControlSetControlDeviceGuard

3.Chofoza kwesokudla I-DeviceGuard bese ukhetha Okusha > Inani le-DWORD (32-bit)

Chofoza kwesokudla ku-DeviceGuard bese ukhetha Inani Elisha le-DWORD (32-bit).

4.Qamba le DWORD esanda kwakhiwa njenge Nika amandla iVirtualizationBasedSecurity bese ucindezela u-Enter.

Yisho le DWORD esanda kwakhiwa njenge-EnableVirtualizationBasedSecurity bese ucindezela u-Enter

5.Chofoza kabili ku-EnableVirtualizationBasedSecurity DWORD bese ushintsha inani layo libe:

Ukunika amandla ukuphepha okusekelwe kwi-Virtualization: 1
Ukukhubaza Ukuphepha okusekelwe kwi-Virtualization: 0

Ukuze Unike Amandla Ukuvikeleka Okusekelwe Kwi-Virtualization shintsha inani le-DWORD libe ngu-1

6.Manje futhi chofoza kwesokudla ku-DeviceGuard bese ukhetha Okusha > Inani le-DWORD (32-bit) futhi uqambe le DWORD ngokuthi DingaPlatformSecurityFeatures bese ushaya u-Enter.

Yisho le DWORD njenge-RequirePlatformSecurityFeatures bese ucindezela u-Enter

7.Chofoza kabili ku-RequirePlatformSecurityFeatures DWORD kanye shintsha inani layo libe ngu-1 ukuze usebenzise i-Secure Boot kuphela noma isethe ku-3 ukuze usebenzise ukuvikelwa kwe-Secure Boot kanye ne-DMA.

Ishintshe

8.Manje zulazulela kukhiye wokubhalisa olandelayo:

HKEY_LOCAL_MACHINESystemCurrentControlSetControlLSA

9.Chofoza kwesokudla ku-LSA bese ukhetha Okusha > Inani le-DWORD (32-bit) bese uqamba le DWORD njenge I-LsaCfgFlags bese ucindezela u-Enter.

Chofoza kwesokudla ku-LSA bese ukhetha Ivelu Entsha bese i-DWORD (32-bit).

10.Chofoza kabili ku-LsaCfgFlags DWORD futhi uguqule inani layo ngokuya ngokuthi:

Khubaza Unogada Wokuqinisekisa: 0
Nika amandla i-Credential Guard nge-UEFI lock: 1
Nika amandla i-Credential Guard ngaphandle kokukhiya: 2

Chofoza kabili ku-LsaCfgFlags DWORD futhi ushintshe inani layo ngokuya ngokuthi

11.Uma usuqedile, vala i-Registry Editor.

Khubaza i-Credential Guard ku Windows 10

Uma i-Credential Guard inikwe amandla ngaphandle kwe-UEFI Lock ungakwazi Khubaza i-Windows Credential Guard usebenzisa i Ithuluzi Lokugada Idivayisi kanye nethuluzi lokulungela ihadiwe Lokugada noma indlela elandelayo:

1.Cindezela i-Windows Key + R bese uthayipha regedit bese ucindezela u-Enter ukuze uvule Registry Editor.

Qalisa umyalo regedit

2.Zulazula bese ususa okhiye bokubhalisa abalandelayo:

|_+_|

Khubaza i-Windows Credential Guard

3. Susa okuguquguqukayo kweWindows Credential Guard EFI ngokusebenzisa bcdedit . Cindezela Windows Key + X bese ukhetha I-Command Prompt (Admin).

umyalo ohambisana namalungelo omlawuli

4.Thayipha umyalo olandelayo ku-cmd bese ushaya u-Enter:

|_+_|

5.Uma usuqedile, vala umyalo bese uqalisa kabusha i-PC yakho.

6.Yamukela umyalo wokukhubaza I-Windows Credential Guard.

Kunconyiwe: