- Iphutha elithi 0xC000000D libangelwa isici sokuvikela umphathi ezinguqulweni zakamuva ze-Windows 11 ngemuva kokufaka izibuyekezo ezithile.
- Ithinta kakhulu abasebenzisi abangenawo amalungelo okuphatha abazama ukuxhuma kumakhompyutha aphethwe yi-Intune noma i-GPO.
- Isixazululo sesikhashana ukushintsha imodi yokugunyazwa komlawuli ibe yimodi ye-Legacy bese uqala kabusha uhlelo.
Uma uthole ngokuzumayo ukuthi i-Windows 11 Remote Desktop iyeke ukusebenza futhi iphonsa iphutha elisabekayo le-0xC000000D , ungalilahli ithemba. Leli phutha, elivame ukuhambisana nomyalezo obonisa ukuthi ithokheni elidluliselwe kumsebenzi alisebenzi , seliphenduke ikhanda elikhulu kwabaningi, ikakhulukazi ngemuva kokuvuselelwa kwesistimu kwakamuva okushintshe ezinye izici zokuphepha.
Into exakile kakhulu ukuthi, ezimweni eziningi, akunandaba nokufaka kwakho iphasiwedi engalungile noma ukungasebenzi kahle kwe-router yakho. Kuyingxabano yangaphakathi yobuchwepheshe ehlobene nokuphathwa kwezimvume kanye nokuvikelwa kwe-akhawunti, okuthinta kakhulu izindawo zenkampani noma izinhlelo eziphethwe ngobuchwepheshe, yize kungavela nasezimisweni zasekhaya uma izilungiselelo ezithile zishintshiwe.
Umbangela: Ukuvikelwa Kwabaphathi
Inkinga enkulu ivela kusici esibizwa ngokuthi i-Administrator Protection . Leli thuluzi lokuphepha lenzelwe ukuthi noma ngabe usebenzisa i-akhawunti enamalungelo aphezulu, i-Windows ikuphoqe ukuthi usebenze njengomsebenzisi ojwayelekile. Kuphela uma udinga ukwenza into "engathi sína," njengokufaka isofthiwe noma ukuguqula irejista, lapho uhlelo lukucela ukuthi uqinisekise ubuwena bakho usebenzisa i-Windows Hello ukuze ukhiqize ithokheni yesikhashana. Kuyisinyathelo esihle sokunqanda i-malware, kodwa kuvele ukuthi inomphumela ocasulayo nge-RDP.
Leli phutha livela lapho izici ezintathu ezithile zihlangana: ikhompyutha ozama ukuyifinyelela isebenzisa i -Windows 11 (izinguqulo 24H2, 25H2, noma 26H2) , inesibuyekezo se- KB5124010 noma esifakiwe kamuva , futhi ukuvikelwa komlawuli kuvuliwe. Imininingwane ebalulekile ukuthi iphutha lenzeka kuphela uma umuntu ozama ukuxhuma engenawo amalungelo omlawuli kukhompyutha ekude. Uma ungumlawuli, cishe uzokwazi ukuxhuma ngaphandle kwezinkinga.
Kumabhizinisi asebenzisa i-Microsoft Intune noma i-Group Policy Objects (GPOs) , ingozi inkulu, njengoba izisekelo zokuphepha ze-Microsoft zivame ukwenza lokhu kuvikelwa ngokuzenzakalela. Ngakho-ke, abasebenzisi abaningi bazithole bevaleleke kuma-PC abo ngaphandle kokushintsha lutho nhlobo, ngokusebenzisa nje ama-patch okuphepha anconyiwe .
Indlela yokulungisa iphutha 0xC000000D isinyathelo ngesinyathelo
Nakuba iMicrosoft ikhipha i-patch eqondile, okuwukuphela kwesixazululo ukusebenzisa i-technical solution ukukhubaza isici esiyinkinga. Uma uphatha amakhompyutha akho ehhovisi, unezinketho ezimbili kuye ngethuluzi lakho lokuphatha:
- Nge-Oda Yenqubomgomo Yeqembu (i-GPO): Udinga ukuya ku-Ukucushwa Kwekhompyutha > Izilungiselelo ze-Windows > Izilungiselelo Zokuphepha > Izinqubomgomo Zendawo > Izinketho Zokuphepha. Lapho, funa inketho Lungiselela uhlobo lwemodi yokugunyazwa komlawuli futhi uyishintshe ibe Imodi Yokuvunyelwa Komlawuli Wefa (Okuzenzakalelayo)Uma wenza lokhu kwi-PC ezimele, ungasebenzisa umyalo secpol.msc.
- Nge-Microsoft Intune: Kukhathalogi yokucushwa, kufanele usethe kabusha ipharamitha Uhlobo Lokulawula I-akhawunti Yomsebenzisi Lwemodi Yokuvunyelwa Komlawuli ngaphakathi kwezinketho zokuphepha kwenqubomgomo yendawo.
Kubalulekile ukukhumbula ukuqala kabusha ikhompyutha yakho ngemva kokwenza ushintsho, ngaphandle kwalokho uhlelo luzoqhubeka nokungazinaki izinguquko. Khumbula ukuthi ngokwenza lokhu, ikhompyutha yakho ilahlekelwa yileyo ngqimba yokuphepha eyengeziwe, ngakho-ke kungcono ukuthi uyisebenzise kuphela kuma-host athola ukuxhumana okuvela kubasebenzisi abavamile futhi aphinde ayisebenzise lapho kukhishwa isibuyekezo esisemthethweni.
Ezinye izimbangela ezingaba khona zokwehluleka kwe-Remote Desktop
Uma iphutha lingekho ku-0xC000000D, noma uma izinyathelo zangaphambilini zokuxazulula izinkinga zingasebenzi, ungase ubhekane nenkinga yokuxhumana evamile. Okokuqala, qiniseka ukuthi ikhompyutha ekude ine-Remote Desktop Protocol ( RDP) evuliwe kuzilungiselelo > Uhlelo > Remote Desktop. Ngezinye izikhathi, ukukhubaza okwesikhashana i-Network Level Authentication (NLA) kusiza ekuxilongeni ukuthi inkinga ihlobene yini neziqinisekiso.
Esinye isimo esivame kakhulu ezinkampanini ama -duplicate security identifiers (ama-SID) . Lokhu kwenzeka lapho imishini idalwa ngesithombe esihlanganisiwe ngaphandle kokusebenzisa inqubo ye-Sysprep ngenketho ethi /generalize . Uma ama-PC amabili ene-SID efanayo, uhlelo lokuqinisekisa lwe-Kerberos luyahluleka futhi luvimbele ukuxhumana. Isixazululo lapha ukusebenzisa i-sysprep.exe ku-C:\Windows\System32\Sysprep, maka ibhokisi elijwayelekile, bese uqala kabusha, yize lokhu kuzodinga ukujoyina kabusha umshini kusizinda.
Kuhle futhi ukuhlola isofthiwe yakho ye-Windows Firewall noma i-antivirus yomuntu wesithathu. Uma usola ukuthi i-port 3389 ivinjiwe, ungasebenzisa ithuluzi le -psping ukuhlola ukuthi ikhompyutha ekude iyaphendula yini. Uma ubona ukulahlekelwa okungu-100%, kungenzeka kakhulu ukuthi umthetho we-firewall uvimba ithrafikhi.
Ukuhlolwa kobuchwepheshe okuthuthukisiwe
Kulabo abafuna ukufika ngqo ephuzwini ngerejista noma ikhonsoli, kukhona ukuhlolwa okusheshayo. Ku-Registry Editor, hlola ukhiye we- fDenyTSConnections ku-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server. Uma inani lingu-1, i-RDP ikhutshaziwe; yishintshe ibe ngu -0 ukuze uyivumele . Futhi, qinisekisa ukuthi i -TermService (Remote Desktop Services) kanye nezinsizakalo ze -UmRdpService ziyasebenza.
Ezimweni ezimbi kakhulu, inkinga ingaba sesitifiketini esizisayinele sona se-RDP . Uma isitifiketi sonakele, ungasisusa ku-Certificates Console (MMC) kufolda ye-Remote Desktop bese uqala kabusha isevisi ukuze i-Windows ikhiqize entsha ngokuzenzakalelayo . Futhi, qiniseka ukuthi uhlola ukuthi ifolda ye -MachineKeys inezimvume ezifanele ukuze uhlelo lukwazi ukubhala lezi zitifiketi.
Ukuze kuxazululwe le nkinga, isinyathelo sokuqala ukuthola ukuthi inkinga ivela yini ekuvikelweni okusha komlawuli we-Windows 11, okudinga ukubuyela kwimodi yokuvunywa kwefa, noma uma ihlobene nezinkinga zenethiwekhi, izitifiketi, noma ama-SID aphindaphindayo ngenxa yokwenziwa kwesithombe. Ngenkathi iphutha elingu-0xC000000D lingancishiswa ngokulungisa izinqubomgomo zokulawula i-akhawunti yomsebenzisi, ukwehluleka kokuxhumeka okuvamile kuxazululwa ngokuhlola i-port 3389, ukunika amandla isevisi kurejista, nokuqinisekisa ukuthi i-firewall ayivimbi ukufinyelela.