Soft

Gonesa kana Kudzima Credential Guard mukati Windows 10

Edza Chishandiso Chedu Kubvisa Matambudziko





Yakatumirwa paYakapedzisira kugadziridzwa: Kukadzi 17, 2021

Gonesa kana Kudzima Credential Guard mukati Windows 10: Windows Credential Guard inoshandisa virtualization-based chengetedzo kuparadzanisa zvakavanzika kuitira kuti chete rombo rakanaka system software ikwanise kuzviwana. Kuwanikwa kusingatenderwe kune izvi zvakavanzika kunogona kutungamira mukubirwa kwechokwadi, sePass-the-Hash kana Pass-The-Ticket. Windows Credential Guard inodzivirira kurwiswa uku nekuchengetedza NTLM password hashes, Kerberos Tiketi Kupa Matikiti, uye zvitupa zvakachengetwa nemaapplication sezita rezita.



Gonesa kana Kudzima Credential Guard mukati Windows 10

Nekugonesa Windows Credential Guard zvinotevera maficha uye mhinduro zvinopihwa:



Hardware kuchengetedza
Virtualization-yakavakirwa kuchengetedza
Dziviriro iri nani pakutyisidzira kunoramba kuchienderera mberi

Zvino iwe unoziva kukosha kweCredential Guard, iwe unofanirwa kugonesa izvi kune yako system. Saka pasina kutambisa chero nguva ngatione Maitiro Ekugonesa kana Kudzima Credential Guard mukati Windows 10 nerubatsiro rweiyo pazasi-yakanyorwa dzidziso.



Zviri mukati[ hide ]

Gonesa kana Kudzima Credential Guard mukati Windows 10

Ita shuwa gadzira nzvimbo yekudzorera kungoitira kana chimwe chinhu chisina kumira zvakanaka.



Method 1: Gonesa kana Bvisa Credential Guard mukati Windows 10 uchishandisa Group Policy Edhita

Cherechedza: Iyi nzira inoshanda chete kana uine Windows Pro, Dzidzo, kana Enterprise Edtion. Kune vashandisi veWindows Home vhezheni vanosvetuka nzira iyi uye tevera inotevera.

1.Press Windows Key + R wobva wanyora regedit wobaya Enter kuti uvhure Group Policy Editor.

Run command regedit

2.Famba uchienda kune inotevera nzira:

Kugadziriswa kweKombuta> Administrative templates> System> Device Guard

3.Iva nechokwadi chekusarudza Murindi wemudziyo pane pahwindo rekurudyi tinya kaviri Batidza Virtualization Yakavakirwa Chengetedzo policy.

Tinya kaviri Batidza Virtualization Based Security Policy

4.Muwindo reZvivakwa zvemutemo uri pamusoro ita chokwadi chekusarudza Yagoneswa.

Seta Batidza Virtualization Yakavakirwa Chengetedzo kuti Inogoneswa

5.Zvino kubva pa Sarudza Platform Security Level sarudza yekudonha-pasi Chengetedza Boot kana Chengetedza Boot uye DMA Dziviriro.

Kubva Sarudza Platform Security Level kudonha-pasi sarudza Chengetedza Boot kana Chengetedza Boot uye DMA Dziviriro

6.Next, kubva Credential Guard Configuration sarudza yekudonha-pasi Inogoneswa neUEFI kukiya . Kana iwe uchida kudzima Credential Guard uri kure, sarudza Inogoneswa isina kukiya pane Inogoneswa neUEFI lock.

7.Kana wapedza, tinya Nyorera uchiteverwa na OK.

8.Reboot PC yako kuchengetedza shanduko.

Method 2: Gonesa kana Kudzima Credential Guard mukati Windows 10 uchishandisa Registry Mharidzo

Credential Guard inoshandisa virtualization-yakavakirwa kuchengetedza maficha ayo anofanirwa kugoneswa kutanga kubva kuWindows chimiro usati wagonesa kana kudzima Credential Guard muRegistry Mharidzo. Ita shuwa kuti ungoshandisa imwe yeidzi pazasi-dzakanyorwa nzira dzekugonesa virtualization-yakavakirwa kuchengetedza maficha.

Wedzera iyo virtualization-yakavakirwa kuchengetedza maficha uchishandisa Zvirongwa uye Zvimiro

1.Press Windows Key + R wobva wanyora appwiz.cpl wobaya Enter kuti uvhure Chirongwa uye Zvimiro.

nyora appwiz.cpl worova Enter kuti uvhure Zvirongwa uye Zvimiro

2.Kubva pahwindo rekuruboshwe dzvanya pa Batidza kana kudzima Windows Features .

vhura kana kudzima mahwindo

3.Tsvaga uye uwedzere Hyper-V wobva wawedzerawo Hyper-V Platform.

4.Under Hyper-V Platform checkmark Hyper-V Hypervisor .

Pasi peHyper-V Platform chekimark Hyper-V Hypervisor

5.Zvino mupumburu pasi uye checkmark Isolated User Mode wobva wadzvanya OK.

Wedzera iyo virtualization-yakavakirwa chengetedzo maficha kumufananidzo wekunze nekushandisa DISM

1.Press Windows Key + X wobva wasarudza Command Prompt (Admin).

kuraira nekukurumidza nekodzero dze admin

2.Type murairo unotevera mu cmd kuwedzera Hyper-V Hypervisor uye rova ​​​​Enter:

|_+_|

Wedzera iyo virtualization-yakavakirwa chengetedzo maficha kumufananidzo wekunze uchishandisa DISM

3.Wedzera iyo Isolated User Mode chimiro nekumhanyisa unotevera kuraira:

|_+_|

Wedzera iyo Isolated User Mode chimiro

4.Kana wapedza, unogona kuvhara chirevo chekuraira.

Gonesa kana Kudzima Credential Guard mukati Windows 10

1.Press Windows Key + R wobva wanyora regedit wobaya Enter kuti uvhure Registry Editor.

Run command regedit

2.Navigate kune inotevera registry kiyi:

HKEY_LOCAL_MACHINESystemCurentControlSetControlDeviceGuard

3.Right-tinya pa DeviceGuard wobva wasarudza Nyowani > DWORD (32-bit) Kukosha.

Tinya-kurudyi paDeviceGuard wobva wasarudza Nyowani DWORD (32-bit) Kukosha

4.Zita iyi DWORD ichangogadzirwa se EnableVirtualizationBasedSecurity wobva warova Enter.

Ipa iyi DWORD ichangobva kugadzirwa se EnableVirtualizationBasedSecurity uye rova ​​​​Enter

5.Dzvanya kaviri pa EnableVirtualizationBasedSecurity DWORD wobva wachinja kukosha kwayo kuita:

Kugonesa Virtualization-yakavakirwa Chengetedzo: 1
Kudzima Virtualization-yakavakirwa Chengetedzo: 0

Kugonesa Virtualization-yakavakirwa Chengetedzo shandura kukosha kweDWORD kuenda ku1

6.Zvino zvakare tinya-kurudyi paDeviceGuard wozosarudza Nyowani > DWORD (32-bit) Kukosha uye zita DWORD iri se InodaPlatformSecurityFeatures wobva warova Enter.

Ipa iyi DWORD seRequirePlatformSecurityFeatures wobva warova Enter

7. Tinya kaviri pane InodaPlatformSecurityFeatures DWORD uye shandura kukosha kwayo ku1 kushandisa Chengetedza Boot chete kana isa ku3 kushandisa Yakachengeteka Boot uye DMA dziviriro.

Chinja

8.Zvino enda kune inotevera registry kiyi:

HKEY_LOCAL_MACHINESystemCurrentControlSetControlLSA

9.Baya-kurudyi paLSA wobva wasarudza Nyowani > DWORD (32-bit) Kukosha wozopa DWORD iyi sezita LsaCfgFlags wobva warova Enter.

Tinya-kurudyi paLSA wobva wasarudza Nyowani wobva wasarudza DWORD (32-bit) Kukosha

10.Dzvanya kaviri paLsaCfgFlags DWORD uye shandura kukosha kwayo zvichienderana ne:

Dzima Credential Guard: 0
Gonesa Credential Guard ine UEFI kukiya: 1
Gonesa Credential Guard isina kukiya: 2

Dzvanya kaviri paLsaCfgFlags DWORD uye shandura kukosha kwayo zvinoenderana

11.Kana wapedza, vhara Registry Editor.

Dzima Credential Guard mukati Windows 10

Kana Credential Guard yakagoneswa pasina UEFI Kiya saka unogona Dzima Windows Credential Guard kushandisa Murindi wemudziyo uye Credential Guard hardware yekugadzirira chishandiso kana nzira inotevera:

1.Press Windows Key + R wobva wanyora regedit wobaya Enter kuti uvhure Registry Editor.

Run command regedit

2.Navigate uye udzime makiyi ekunyoresa anotevera:

|_+_|

Dzima Windows Credential Guard

3. Bvisa iyo Windows Credential Guard EFI inosiyana nekushandisa bcdedit . Dzvanya Windows Key + X wobva wasarudza Command Prompt (Admin).

kuraira nekukurumidza nekodzero dze admin

4.Type murairo unotevera mu cmd uye rova ​​​​Enter:

|_+_|

5.Kana wapedza, vhara kuraira nekukurumidza uye reboot PC yako.

6.Gamuchira kukurumidza kudzima Windows Credential Guard.

Zvinokurudzirwa: