Zofewa

Yambitsani kapena Letsani Credential Guard mkati Windows 10

Yesani Chida Chathu Chothetsa Mavuto





Adalemba paKusinthidwa komaliza: February 17, 2021

Yambitsani kapena Letsani Credential Guard mkati Windows 10: Windows Credential Guard imagwiritsa ntchito chitetezo chokhazikika pakuyika zinsinsi kuti ndi pulogalamu yamwayi yokhayo yomwe ingathe kuzipeza. Kufikira kosaloledwa kwa zinsinsi izi kungayambitse ziwopsezo zakuba, monga Pass-the-Hash kapena Pass-The-Ticket. Windows Credential Guard imalepheretsa kuukira kumeneku poteteza ma hashes achinsinsi a NTLM, Tikiti Zopereka Tikiti za Kerberos, ndi zidziwitso zosungidwa ndi mapulogalamu ngati zidziwitso za domain.



Yambitsani kapena Letsani Credential Guard mkati Windows 10

Pothandizira Windows Credential Guard zotsatirazi ndi mayankho amaperekedwa:



Chitetezo cha Hardware
Chitetezo chozikidwa pa Virtualization
Kutetezedwa bwino ku ziwopsezo zapamwamba zosalekeza

Tsopano mukudziwa kufunikira kwa Credential Guard, muyenera kuloleza izi pamakina anu. Chifukwa chake osataya nthawi tiyeni tiwone Momwe Mungayambitsire kapena Kuletsa Credential Guard mkati Windows 10 mothandizidwa ndi maphunziro omwe ali pansipa.



Zamkatimu[ kubisa ]

Yambitsani kapena Letsani Credential Guard mkati Windows 10

Onetsetsani kuti pangani malo obwezeretsa kungoti china chake chalakwika.



Njira 1: Yambitsani kapena Letsani Credential Guard mkati Windows 10 pogwiritsa ntchito Gulu la Policy Editor

Zindikirani: Njirayi imagwira ntchito ngati muli ndi Windows Pro, Education, kapena Enterprise Edtion. Kwa ogwiritsa ntchito mtundu wa Windows Home kudumpha njirayi ndikutsatira yotsatira.

1.Press Windows Key + R ndiye lembani regedit ndikugunda Enter kuti mutsegule Gulu la Policy Editor.

Thamangani lamulo regedit

2. Yendetsani kunjira iyi:

Kukonzekera Pakompyuta> Ma templates Oyang'anira> Dongosolo> Chitetezo cha Chipangizo

3. Onetsetsani kuti mwasankha Chipangizo Choteteza kuposa pa zenera lakumanja dinani kawiri Yatsani Virtualization Based Security ndondomeko.

Dinani kawiri Yatsani Virtualization Based Security Policy

4.Pawindo la Properties la ndondomeko pamwambapa onetsetsani kuti mwasankha Yayatsidwa.

Khazikitsani Yatsani Virtualization Based Security kuti Muyatse

5. Tsopano kuchokera ku Sankhani Platform Security Level dontho-pansi kusankha Boot Yotetezedwa kapena Chitetezo Chotetezedwa ndi DMA Chitetezo.

Kuchokera ku Sankhani Platform Security Level dontho-pansi sankhani Safe Boot kapena Chitetezo Chotetezedwa ndi Chitetezo cha DMA

6.Chotsatira, kuchokera Kukonzekera kwa Credential Guard dontho-pansi kusankha Yathandizidwa ndi UEFI lock . Ngati mukufuna kuzimitsa Credential Guard patali, sankhani Kuyatsidwa popanda loko m'malo mwa Kuyatsidwa ndi loko ya UEFI.

7.Once anamaliza, alemba Ikani kutsatira Chabwino.

8.Reboot PC yanu kupulumutsa zosintha.

Njira 2: Yambitsani kapena Letsani Credential Guard mkati Windows 10 pogwiritsa ntchito Registry Editor

Credential Guard imagwiritsa ntchito zida zachitetezo zozikidwa pachitetezo zomwe zimayenera kuyatsidwa koyamba kuchokera pa Windows musanayambe kapena kuletsa Credential Guard mu Registry Editor. Onetsetsani kuti mukugwiritsa ntchito imodzi mwa njira zomwe zili pansipa kuti mutsegule mawonekedwe achitetezo ozikidwa pa virtualization.

Onjezani mawonekedwe achitetezo ozikidwa pa Virtualization pogwiritsa ntchito Mapulogalamu ndi Zinthu

1.Press Windows Key + R ndiye lembani appwiz.cpl ndikugunda Enter kuti mutsegule Pulogalamu ndi Mawonekedwe.

lembani appwiz.cpl ndikugunda Enter kuti mutsegule Mapulogalamu ndi Zinthu

2.Kuchokera kumanzere zenera dinani Yatsani kapena kuzimitsa Windows Features .

kuyatsa kapena kuzimitsa mawonekedwe a Windows

3.Pezani ndikukulitsa Hyper-V Kenako onjezeraninso Hyper-V Platform.

4.Pansi pa Hyper-V Platform chizindikiro Hyper-V Hypervisor .

Pansi pa Hyper-V Platform checkmark Hyper-V Hypervisor

5.Tsopano mpukutu pansi ndi chongani Isolated User Mode ndikudina Chabwino.

Onjezani mawonekedwe achitetezo ozikidwa pazithunzi pazithunzi zopanda intaneti pogwiritsa ntchito DISM

1.Press Windows Key + X ndiye sankhani Command Prompt (Admin).

kulamula mwachangu ndi ufulu wa admin

2.Typeni lamulo ili mu cmd kuti muwonjezere Hyper-V Hypervisor ndikugunda Enter:

|_+_|

Onjezani mawonekedwe achitetezo ozikidwa pazithunzi pazithunzi zopanda intaneti pogwiritsa ntchito DISM

3.Onjezani mawonekedwe a Isolated User Mode poyendetsa lamulo ili:

|_+_|

Onjezani mawonekedwe a Isolated User Mode

4.Mukamaliza, mukhoza kutseka mwamsanga.

Yambitsani kapena Letsani Credential Guard mkati Windows 10

1.Press Windows Key + R ndiye lembani regedit ndikugunda Enter kuti mutsegule Registry Editor.

Thamangani lamulo regedit

2.Navigete to the following registry key:

HKEY_LOCAL_MACHINESystemCurentControlSetControlDeviceGuard

3. Dinani pomwepo DeviceGuard ndiye sankhani Zatsopano> DWORD (32-bit) Mtengo.

Dinani kumanja pa DeviceGuard kenako sankhani Mtengo Watsopano wa DWORD (32-bit).

4.Tchulani DWORD yatsopanoyi ngati EnableVirtualizationBasedSecurity ndikugunda Enter.

Tchulani DWORD yomwe yangopangidwa kumeneyi ngati EnableVirtualizationBasedSecurity ndikugunda Enter

5.Dinani kawiri pa EnableVirtualizationBasedSecurity DWORD kenaka sinthani mtengo wake kukhala:

Kuthandizira Chitetezo Chokhazikika pa Virtualization: 1
Kuletsa Chitetezo Chochokera ku Virtualization: 0

Kuti Muyambitse Chitetezo Chochokera ku Virtualization sinthani mtengo wa DWORD kukhala 1

6.Now kachiwiri dinani kumanja pa DeviceGuard kenako sankhani Zatsopano> DWORD (32-bit) Mtengo ndikutchula DWORD iyi ngati RequirePlatformSecurityFeatures kenako dinani Enter.

Tchulani DWORD iyi ngati RequirePlatformSecurityFeatures ndiye dinani Enter

7. Dinani kawiri pa RequirePlatformSecurityFeatures DWORD ndi sinthani mtengo wake kukhala 1 kuti mugwiritse ntchito Chitetezo Chokhazikika chokha kapena ikani ku 3 kuti mugwiritse ntchito chitetezo cha Chitetezo cha Boot ndi DMA.

Sinthani

8.Now yendani ku kiyi yolembetsa ili pansipa:

HKEY_LOCAL_MACHINE System CurrentControlSet Control LSA

9.Dinani pomwe pa LSA kenako sankhani Zatsopano> DWORD (32-bit) Mtengo ndiye tchulani DWORD iyi ngati LsaCfgFlags ndikugunda Enter.

Dinani kumanja pa LSA kenako sankhani Chatsopano kenako DWORD (32-bit) Value

10.Dinani kawiri pa LsaCfgFlags DWORD ndikusintha mtengo wake molingana ndi:

Lemekezani Credential Guard: 0
Yambitsani Credential Guard yokhala ndi loko ya UEFI: 1
Yambitsani Credential Guard popanda loko: 2

Dinani kawiri LsaCfgFlags DWORD ndikusintha mtengo wake malinga ndi

11. Mukamaliza, tsekani Registry Editor.

Letsani Credential Guard mu Windows 10

Ngati Credential Guard idayatsidwa popanda UEFI Lock ndiye mutha Letsani Windows Credential Guard pogwiritsa ntchito Chipangizo cha Guard ndi Credential Guard chida chokonzekera hardware kapena njira iyi:

1.Press Windows Key + R ndiye lembani regedit ndikugunda Enter kuti mutsegule Registry Editor.

Thamangani lamulo regedit

2.Navigate ndi kuchotsa makiyi otsatirawa kaundula:

|_+_|

Letsani Windows Credential Guard

3. Chotsani zosintha za Windows Credential Guard EFI pogwiritsa ntchito bcdedit . Dinani Windows Key + X kenako sankhani Command Prompt (Admin).

kulamula mwachangu ndi ufulu wa admin

4.Typeni lamulo ili mu cmd ndikugunda Enter:

|_+_|

5.Mukamaliza, kutseka lamulo mwamsanga ndi kuyambiransoko PC wanu.

6.Landirani chenjezo loletsa Windows Credential Guard.

Alangizidwa: