Mai Laushi

Kunna ko Kashe Guard Guard a cikin Windows 10

Gwada Kayan Aikinmu Don Kawar Da Matsaloli





An bugaƘarshe da aka sabunta: Fabrairu 17, 2021

Kunna ko Kashe Tsaron Sabis a cikin Windows 10: Windows Credential Guard yana amfani da tushen tsaro na ƙirƙira don keɓe sirrin ta yadda software ɗin tsarin kawai ke iya samun damar su. Samun damar shiga waɗannan sirrin ba tare da izini ba na iya haifar da kai hari na sata, kamar Pass-the-Hash ko Pass-The-Ticket. Windows Credential Guard yana hana waɗannan hare-hare ta hanyar kare hashes na kalmar wucewa ta NTLM, Tikitin Ba da Tikitin Kerberos, da takaddun shaidar aikace-aikacen da aka adana azaman takaddun shaida na yanki.



Kunna ko Kashe Guard Guard a cikin Windows 10

Ta hanyar kunna Windows Credential Guard ana samar da fasali da mafita masu zuwa:



Tsaro na hardware
Tsaro na tushen hangen nesa
Kyakkyawan kariya daga ci-gaba barazanar barazana

Yanzu kun san mahimmancin Guard Guard, tabbas yakamata ku kunna wannan don tsarin ku. Don haka ba tare da ɓata kowane lokaci ba bari mu ga Yadda ake Kunnawa ko Kashe Tsaron Sabis a cikin Windows 10 tare da taimakon koyawa da aka jera a ƙasa.



Abubuwan da ke ciki[ boye ]

Kunna ko Kashe Guard Guard a cikin Windows 10

Tabbatar da haifar da mayar batu kawai idan wani abu ya faru.



Hanyar 1: Kunna ko Kashe Tsaron Sabis a cikin Windows 10 ta amfani da Editan Manufofin Rukuni

Lura: Wannan hanyar tana aiki ne kawai idan kuna da Windows Pro, Ilimi, ko Buga Kasuwanci. Ga masu amfani da sigar Gidan Gidan Windows sun tsallake wannan hanyar kuma bi ta gaba.

1. Danna Windows Key + R sannan ka rubuta regedit kuma danna Shigar don buɗewa Editan Manufofin Rukuni.

Run umurnin regedit

2. Kewaya zuwa hanya mai zuwa:

Kanfigareshan Kwamfuta > Samfuran Gudanarwa > Tsarin > Kariyar Na'ura

3. Tabbatar da zaɓi Na'ura Guard fiye da taga dama danna sau biyu Kunna Tsare Tsare Tsare-Tsare siyasa.

Danna sau biyu kan Kunna Manufofin Tsaro na Basira

4.A cikin Properties taga na sama manufofin tabbatar da zabi An kunna

Saita Kunna Tushen Tsaro don Kunnawa

5. Yanzu daga Zaɓi Matsayin Tsaro na Platform zažužžukan zaži Amintaccen Boot ko Amintaccen Boot da DMA Kariya.

Daga Zaɓi Matsayin Tsaro na Platform drop-saukar zaɓi Ƙaƙƙarfan Boot ko Amintaccen Boot da Kariyar DMA

6.Na gaba, daga Kanfigareshan Tsaro na Sabis zažužžukan zaži An kunna tare da kulle UEFI . Idan kana son kashe Tsaron Ƙirar Kariya daga nesa, zaɓi An kunna ba tare da kulle ba maimakon An kunna shi tare da kulle UEFI.

7.Da zarar an gama, danna Aiwatar da Ok.

8.Reboot your PC don ajiye canje-canje.

Hanyar 2: Kunna ko Kashe Tsaron Sabis a cikin Windows 10 ta amfani da Editan Rijista

Amintaccen Tsaro yana amfani da fasalulluka na tushen tsaro waɗanda dole ne a fara kunna su daga fasalin Windows kafin ku iya kunna ko musaki Mai Tsaron Aminci a Editan Rajista. Tabbatar yin amfani da ɗaya daga cikin hanyoyin da aka lissafa a ƙasa don ba da damar fasalin tsaro na tushen ganima.

Ƙara abubuwan da suka dogara da tsarin tsaro ta hanyar amfani da Shirye-shirye da Fasaloli

1. Danna Windows Key + R sannan ka rubuta appwiz.cpl kuma danna Shigar don buɗewa Shirin da Fasaloli.

rubuta appwiz.cpl kuma danna Shigar don buɗe Shirye-shirye da Features

2.Daga hagu na taga danna kan Kunna ko kashe Features na Windows .

kunna ko kashe fasalin windows

3. Nemo kuma fadada Hyper-V sannan haka nan fadada Hyper-V Platform.

4.Under Hyper-V Platform alamar tambaya Hyper-V Hypervisor .

Ƙarƙashin Hyper-V Platform checkmark Hyper-V Hypervisor

5. Yanzu gungura ƙasa kuma Alamar Keɓance Yanayin Mai amfani kuma danna Ok.

Ƙara fasalulluka na tushen tsaro na kama-da-wane zuwa hoton layi ta amfani da DISM

1. Danna Windows Key + X sannan ka zaba Umurnin Umurni (Admin).

umarni mai sauri tare da haƙƙin admin

2.Buga wannan umarni cikin cmd don ƙara Hyper-V Hypervisor kuma danna Shigar:

|_+_|

Ƙara fasalulluka na tushen tsarin tsaro zuwa hoton layi ta amfani da DISM

3.Ƙara fasalin Yanayin Mai amfani da keɓaɓɓe ta hanyar aiwatar da umarni mai zuwa:

|_+_|

Ƙara fasalin Yanayin Mai amfani keɓe

4.Da zarar gama, za ka iya rufe umurnin m.

Kunna ko Kashe Guard Guard a cikin Windows 10

1. Danna Windows Key + R sannan ka rubuta regedit kuma danna Shigar don buɗewa Editan rajista.

Run umurnin regedit

2. Kewaya zuwa maɓallin rajista mai zuwa:

HKEY_LOCAL_MACHINESystemCurrentControlSetControlDeviceGuard

3.Dama-dama DeviceGuard sannan ka zaba Sabon> Darajar DWORD (32-bit).

Danna-dama akan DeviceGuard sannan zaɓi Sabuwar DWORD (32-bit).

4.Sunan wannan sabuwar halitta DWORD azaman EnableVirtualizationBasedSecurity kuma danna Shigar.

Sunan wannan sabon ƙirƙira DWORD azaman EnableVirtualizationBasedSecurity kuma danna Shigar

5.Double-danna kan EnableVirtualizationBasedSecurity DWORD sannan canza darajarsa zuwa:

Don Kunna Tsaro na tushen ganima: 1
Don Kashe Tsaro na tushen ganima: 0

Don Kunna tushen Tsaro na Haɓakawa canza ƙimar DWORD zuwa 1

6.Yanzu kuma danna-dama akan DeviceGuard sannan zaɓi Sabon> Darajar DWORD (32-bit). kuma suna wannan DWORD a matsayin Ana buƙatarPlatformSecurityFeatures sannan danna Shigar.

Sunan wannan DWORD a matsayin RequirePlatformSecurityFeatures sannan danna Shigar

7.Double danna kan RequirePlatformSecurityFeatures DWORD da canza darajar zuwa 1 don amfani da Secure Boot kawai ko saita shi zuwa 3 don amfani da Secure Boot da kariyar DMA.

Canza shi

8. Yanzu kewaya zuwa maɓallin rajista mai zuwa:

HKEY_LOCAL_MACHINESystem CurrentControlSet ControlLSA

9.Dama akan LSA sannan ka zaba Sabon> Darajar DWORD (32-bit). sannan suna wannan DWORD a matsayin LsaCfgFlags kuma danna Shigar.

Danna-dama akan LSA sannan ka zaba New sannan ka zabi DWORD (32-bit) Value

10. Danna sau biyu akan LsaCfgFlags DWORD kuma canza ƙimarsa bisa ga:

Kashe Mai Tsaron Sabis: 0
Kunna Kariyar Tabbaci tare da kulle UEFI: 1
Kunna Tsaron Saji ba tare da kullewa ba: 2

Danna sau biyu akan LsaCfgFlags DWORD kuma canza ƙimar sa bisa ga

11.Da zarar an gama, rufe Registry Editan.

Kashe Guard Guard a cikin Windows 10

Idan an kunna Guard Guard ba tare da Kulle UEFI ba to zaku iya Kashe Windows Credential Guard amfani da Kayan aikin Guard na Na'ura da kayan aikin shirye-shiryen ƙwararrun Sabis ko kuma hanya mai zuwa:

1. Danna Windows Key + R sannan ka rubuta regedit kuma danna Shigar don buɗewa Editan rajista.

Run umurnin regedit

2. Kewaya kuma share waɗannan maɓallan rajista masu zuwa:

|_+_|

Kashe Windows Credential Guard

3. Share masu canji na Windows Credential Guard EFI ta amfani da bcdedit . Latsa Windows Key + X sannan zaɓi Umurnin Umurni (Admin).

umarni mai sauri tare da haƙƙin admin

4.Buga wannan umarni cikin cmd kuma danna Shigar:

|_+_|

5.Da zarar an gama, rufe umarni da sauri kuma sake yi PC ɗin ku.

6. Karɓi faɗakarwa don kashe Windows Credential Guard.

An ba da shawarar: