U qoondee rukhsadaha galka iyo faylalka shaqada wada shaqayneed ee gudaha Windows 11

In la iska kaashado bilaa madax-xanuun Windows 11, waxa lama huraanka ah wadaaga galalka oo qoondee ogolaanshaha si sax ah: habkan qof kastaa u arko, wax ka beddelo, ama u tirtiro kaliya waxa ay tahay. Shabakadaha yaryar ama guriga, waxay ku shaqeysaa dhowr jeer, laakiin haddii aad rabto isku halaynta, waxqabadka iyo badbaadada, waxaa mudan in la barto SMB, NTFS, Isticmaalayaasha, Kooxaha, iyo Firewall-ka.

Hagahan waxaan ku soo aruurinay oo dib u qornay, si cad oo nidaamsan, wax kasta oo aad u baahan tahay: sida loo diyaariyo shabakada, samee xisaabaadka maxaliga ah, la wadaag "Isticmalayaasha Gaarka ah" ama " Wadaagista Sare ", hagaajiya oggolaanshaha NTFS, ka xidhid kombuyuutar kale (xitaa Ubuntu) iska ilaali furayaasha sirta ah ee soo noqnoqda iyada oo aan la lumin amniga, goorta (ma) la kicinayo SMB 1.0 iyo sida loo xalliyo khaladaadka caadiga ah sida 0x80070035. Aynu u samayno talaabo talaabo, laakiin isha ku hay dhaqanka wanaagsan.

Kahor intaadan bilaabin: diyaari shabakadaada iyo qalabkaaga

Marka hore hubi in xidhiidhku daaran yahay Shabakadda gaarka ah, sida ku jirta Daaqadaha Dadweynaha waxay xaddidaysaa aragga iyo wadaagga. Gudaha Windows 11, tag Start> Settings> Network & Internet, geli adabtarada oo dooro Primado.

Daar doorashada astaanta gaarka ah Helitaanka shabakada y Wadaagista faylka iyo daabacahaTani waxay kuu ogolaaneysaa in laga helo shabakada iyo kombuyuutarada kale si aad u gasho ilahaaga la wadaago iyada oo aan la xannibin.

Haddii aad isticmaalayso Koontaroolka caadiga ah: Control Panel> Network and Internet> Network and Sharing Center> Beddel goobaha wadaagga horumarsan. Waxa kale oo aad ku furi kartaa control /name Microsoft.NetworkAndSharingCenter ama si toos ah ugu tag bogga horumarsan leh control.exe /name Microsoft.NetworkAndSharingCenter /page Advanced.

Hubi firewall-kaaga: Daaqadaha waa inay ogoladaan SMB. Heerka shabakada, hubi in dekedaha TCP ay furan yihiin. 445, 139, 138 iyo 137. Taas la'aanteed, casharka ugu fiican kuma badbaadin doono. Ku soo celi dejintan on the kumbuyuutarka serverka (halka aad la wadaagto galka) iyo macmiilka (laga bilaabo meesha aad isku xirto).

Fikradaha degdega ah: a SMB server waa kooxda la wadaagta galka; a macmiilka SMB waa kan isku xira. Waxay ku jiri karaan isla kooxda shaqada, ka baxsan domainka, iyo gudaha subnet isku mid ah si loo fududeeyo daahfurka.

Abuuritaanka isticmaalayaasha maxalliga ah iyo kooxaha: saldhigga gelitaanka si wanaagsan loo xakameeyay

Ha ka tegin akoonkaaga gaarka ah si ay kuwa kale u helaan agabkaaga. Xirfadnimadu waa furaha. samee xisaabaadyo maxalli ah oo gaar ah iyo haddii dhowr qof ay u baahan yihiin inay helaan heer isku mid ah oo galaangal ah, u kooxi koox maxalli ah.

Ka fur console Management Computer ka menu macnaha guud ee PC-kan> Maamul (ama orod compmgmt.msc). Gudaha, gal Isticmaalayaasha iyo Kooxaha Maxaliga ah > Isticmaalayaasha oo ku abuur isticmaaleyaal cusub "Isticmaal Cusub".

Deji magaca iyo erayga sirta ah oo dib u eeg fursadaha akoonnada. Sida caadiga ah, waxay ku biiraan kooxda. Isticmaalayaasha, oo ah meel fiican oo laga bilaabo. Waxaad abuuri kartaa isticmaalayaasha sida “user11,” “user12,” iwm., si aad hadhow ugu meelayso ogolaansho granular ah.

Si aad ula wadaagto oggolaanshaha guud, samee a kooxda deegaankaIsticmaalayaasha gudaha iyo kooxaha>Kooxaha>Koox cusub. Tusaale ahaan, "sharegroup1". Guji Kudar, qor isticmaalayaasha oo isticmaal Hubi magacyada si loo xaqiijiyo inay jiraan. Markaa, adoo siinaya rukhsad kooxda, waxaad siisaa dhammaan xubnaha hal mar.

Wadaagista galka: hab degdeg ah iyo wadaagis horumarsan

Jidka gaaban ee Explorer, ku dhufo midigta faylka ama gal oo dooro Sii marin u helka > Isticmaalayaasha gaarka ah. Ama door shayga, fur tab share iyo, hoosta "La wadaag," dooro " Isticmaalayaasha gaarka ah."

Dooro qof gaar ah ama dooro oo dhan si ay u helaan shabakad guud (lama talinayo iyada oo aan xaddidnayn), oo deji heerkeeda (Akhri ama Akhriso/Qor). Haddii aad doorato faylal badan ama gal, waxaa lagu wadaagaa blocks; wax kasta oo ku jira gal la wadaago waxay dhaxlaan gelitaanka.

Haddii aad rabto in si fiican loo xakameeyo (oo lagu taliyay), isticmaal Wadaag heer sare ahMidig ku dhufo galka> Guryaha> Wadaagista tab> Wadaagista Sare> dooro "Share galkan." U qoondee magaca wadaaga (tusaale, "share01").

Guji Fasaxyada. Sida caadiga ah, "Dhammaan" waa la akhriyaa. Habka xirfadeed waa ka saar "Dhammaan", riix Kudar oo dooro kooxda saxda ah ama isticmaalayaasha (tusaale, "sharegroup1" oo leh kontorool buuxa iyo "user14" oo leh akhri kaliya). Sidan, waxaad xaddidi kartaa cidda geli karta iyo ilaa xadkee.

Talo: Waxaad ka maarayn kartaa agabka plugin-ka. Faylasha wadaaga ordaya fsmgmt.msc (ama Maaraynta Kumbuyuutarka> Qalabka Nidaamka> Folders La Wadaago). Loo isticmaalo abuurista, dib u eegista fadhiyada furan, iyo fiiri faylasha la isticmaalayo ama jooji kheyraadka la wadaago.

Ogolaanshaha NTFS (Amniga) iyo Oggolaanshaha SMB: Sida ay u wada shaqeeyaan

Kadib dejinta wadaagga (oggolaanshaha heerka SMB), waa waqtigii dib loo eegi lahaa Tab amniga ee galka (Ogolaanshaha NTFS). Ku laabo Guryaha> Amniga> Tafatir> Ku dar, oo ku dar isla kooxaha/ isticmaalayaasha (tusaale, "sharegroup1" iyo "user14").

Ku meelee Wadarta xakamaynta yaa maamula oo fasaxaya Akhrinta cid kasta oo u baahan in lagala tashado, waafaqsan waxa aad "Share" geliso. Xusuusnow: helitaanka waxtarka leh ayaa ah isgoys labada adduun; Haddii aad ku siiso Xakamaynta Buuxa ee SMB laakiin kaliya akhri Kontoroolka NTFS, Akhris ayaa guulaysan doona.

Markaad xirto, waxaad arki doontaa liiska ugu dambeeya ee galitaanka iyo dariiqa shabakada ee ilaha la wadaago ee hoos yimaada Amniga. Haddii magaca kombiyuuterku guuldareysto, waxaad isticmaali kartaa cinwaanka IP-ga. Tusaale ahaan, dariiqa UNC wuxuu noqon lahaa \\ Computer10 \\ share01 o \\192.168.101.212 \\ share01.

Haddii kale, waxaa jira "wadaagid fudud" (badhan wadaag). Way ku habboon tahay, laakiin waxay leedahay doorashooyin yarHabka sare waxa uu ku siinayaa cadaymo, miisaan, oo waxa ay yaraynaysaa yaabka leh ogolaanshaha.

Ka xidho kombiyuutarada kale (Windows iyo Ubuntu) iyo khariidad wadista

Gudaha Windows, fur Explorer oo isticmaal guddiga Red si loo ogaado kooxaha. Haddii aad rabto inaad si toos ah u gaadho barta, ku qor dariiqa soo socda barta ciwaanka: \\ 192.168.101.212 o \\ Computer10, ama jidka UNC oo buuxa \\ Computer10 \\ share01.

Haddii aad u baahan tahay inaad haysato "had iyo jeer gacanta", ku qor a wadista shabakadaMidig ku dhufo galka la wadaago> Map network drive> dooro xaraf oo dooro "Dib u xidhidhka logon." Meesha ayay ku jiri doontaa ilaa aad ka jarto.

Gudaha Ubuntu, fur Faylasha> Goobaha kale, iyo "Connect to server" ku qor smb://computer_IP (tusaale ahaan, smb://192.168.1.97). Geli magac isticmaale iyo erayga sirta ah oo sax ah; waxaad uga tagi kartaa kooxda shaqada si aan caadi ahayn.

Waxaad tilmaami kartaa haddii Ubuntu ay tahay olvidar erayga sirta ah ee ka bixida, xasuuso ilaa aad ka baxdo, ama xasuuso waligaa. Markaad taxdo ilaha Windows, waxaad arki doontaa saamiyada "caadiga ah" iyo maamul sida C$ ama ADMIN$ (la geli karo oo keliya mudnaanta maamulaha). Ubuntu inta badan waxay soo bandhigtaa iyaga, in kasta oo Windows ay ku qarsoon yihiin "$".

Gelida adiga oo aan waydiisan furaha sirta ah mar kasta: habka lagu taliyay iyo khataraha ilaalin la'aanta

Waxaa jirta hab sugan oo aad isaga ilaalin karto inaad ku qorto eraygaaga sirta ah mar kasta oo aad gasho: isticmaal kan akoon isku mid ah (magaca iyo erayga sirta ah) on server iyo macmiilka. Haddii "User1" oo wata "Password1" uu ku jiro labadaba oo aad ka soo gasho macmiilka sida "User1", xiriirku waa dhab ah oo kali ah.

Ka fogow curyaaminta wadaaga sirta ah ee la ilaaliyo. Markaad tan ku samayn karto Settings Advanced> All Networks, oo aad awood u siiso "Share si qof kasta oo haysta shabakadu uu wax u akhriyo oo u qoro dadweynaha," waa fikrad amni xumo xataa meelaha "lagu kalsoon yahay".

Waxa jira siyaasad kuu ogolaanaysa inaad "Qof walba" oggolaanshaha u isticmaasho isticmaalayaasha aan la garanayn: Tifaftiraha Siyaasadda (gpedit.msc>> Dejinta Windows> Dejinta Amniga> Siyaasadaha Maxaliga> Xulashooyinka Amniga> Helitaanka Shabakada. Awood u siinta waxay furaysaa albaabka gelitaanka aan la hubin.

Ku saabsan koontada isku dhafan Martida: Waa naafo. Laga bilaabo Windows 10 dhis 10159, koontada martida ee caadiga ah lama dami karo lamana abuuri karo. Ku qas geli gelida qarsoodiga ama martida. waxay si weyn u kordhisaa dusha weerarka.

SMB 1.0/2/3: Hubi noocyada, karti u yeelo marka ay habboon tahay, oo faham khataraha

Windows 10/11 waxay isticmaashaa SMB 3.x si caadi ah. Haddii aad ku xirto kombiyuutarada da'da ah (sida Windows XP) waxaa laga yaabaa inaad la kulanto arrimo sababtoo ah waxay u baahan yihiin SMB 1.0, naafo u ah amniga. Ku hubi noocyada PowerShell:

• SMB 1.0 ee Windows 10/8.1: Get-WindowsOptionalFeature -Online -FeatureName SMB1Protocol o Dism /online /Get-Features /format:table | find "SMB1Protocol"
• SMB 2 ee Windows 10/8.1: Get-SmbServerConfiguration | Select EnableSMB2Protocol
• Windows 7: Get-Item HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters | ForEach-Object {Get-ItemProperty $_.pspath}
• Fiiri SMB1 iyo SMB2 hal mar: Get-SmbServerConfiguration | select "*enablesmb*"

Si aad awood ugu siiso taageerada SMB 1.0 (kaliya haddii aad runtii u baahan tahay): Control Panel> Barnaamijyada iyo Astaamaha> Daar ama dami astaamaha Windows> hubi Taageerada SMB 1.0/CIFS wadaagista faylka. Fadlan ogow in Windows laga yaabo Si toos ah uga saar SMB 1.0 haddii aan la isticmaalin 15 maalmood gudahood (ilaa nooca 1709).

Waxa kale oo aad isticmaali kartaa PowerShell iyo qalabyada kale: Enable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol, Set-SmbServerConfiguration -sEnableSMB1Protocol $true, Install-WindowsFeature FS-SMB1, macmiilka kaliya: Enable-WindowsOptionalFeature -Online -FeatureName "SMB1Protocol-Client" -All, server kaliya: Enable-WindowsOptionalFeature -Online -FeatureName "SMB1Protocol-Server" -All.

Dami SMB 2 kaliya si gaar ah (oo fahan saamaynta): reg.exe add "HKLM\SYSTEM\CurrentControlSet\services\LanmanServer\Parameters" /v "SMB2" /t REG_DWORD /d "0" /f; sc.exe config lanmanworkstation depend= bowser/mrxsmb10/nsi; sc.exe config mrxsmb20 start=disabled. Si aad dib ugu noqotid, ku noqo awood SMB2 con Set-SmbServerConfiguration -EnableSMB2Protocol $true.

Indhaha amniga: ololayaasha sida WannaCry ama NotPetya ka faa'iidaysatay dayacanka SMBv1 (EternalBlue, iwm.). Haddii aadan u baahnayn SMB 1.0, ha kicin. Mudnaanta sii SMB 3.x mar kasta oo ay suurtagal tahay.

Oggolaanshaha iyo faylalka dadweynaha ee Muuqaalka: Tixraac waxtar leh ee Heerarka

Deegaannada iyagana laga maamulo galalka dadweynaha (sida Outlook), waxaad arki doontaa heerarka ogolaanshaha ee horay loo sii qeexay: laga bilaabo Mulkiilaha (dhammaan) ku Wadaxaajood (ugu yaraan). Marka la habeynayo sanduuqyada, "Heerka Oggolaanshaha" ayaa isbeddelaya Caado.

Socodka caadiga ah: midig-guji galka dadweynaha> Guryaha> tab Fasaxyada > dooro heerka, hagaajiso, oo leh Kudar Ku dar isticmaalayaasha ama kooxaha buug-yaraha caalamiga ah. Ku celi kooxo kala duwan oo ku xidh Aqbal.

Caqligan lakabkani waxa uu caawiyaa in la fahmo, is barbar dhig, sida loo cabbiro ogolaanshaha granular sidoo kale gudaha NTFS/SMB marka aad qorshaynayso gelitaanka doorarka iyo kooxaha.

Cilad-bixinta: Khaladaadka Caadiga ah iyo Sida Looga Baxo Jam

Haddii aad aragto "Windows ma gali karto \\ hostname \\ share"ama"Ma haysatid ogolaansho...", hubi in isticmaalaha/kooxda lagu daray ogolaanshaha share iyo tabka Amniga (NTFS).

Qalabka PowerShell: Get-SmbShareAccess -Name "share01" si aad u aragto ogolaanshaha SMB ee kheyraadka, iyo get-acl C:\\share01\\ | fl si aad u taxdo NTFS ACL. Hubi inaad isticmaasho magacaaga kheyraadka dhabta ah iyo dariiqaaga.

Haddii ay jiraan shakiyo leh caddayn, nadiifi gelinta hore ee gudaha Maamulaha aqoonsiga (Guddiga kantaroolka> Xisaabaadka Isticmaalaha> Maareeyaha Aqoonsiga) ama ku fur maamulaha caadiga ah rundll32.exe keymgr.dll,KRShowKeyMgr.

Hubi adeegyada: waa inay ku firfircoon yihiin server-ka faylka.Daabacaada ilaha si loo helo muujinta"Iyo"Feature Discovery Host Host", iyo guud ahaan adeegga Server. Waxa kale oo ay noqon kartaa fure"Caawiye TCP/IP NetBIOS".

Error 0x80070035 (Wadada shabakada lama helin): Tani waxay badanaa muujisaa iswaafajin la'aanta SMB ama xannibaadda. Hubi noocyada (SMB1/2/3) iyo in dab-darka iyo adeegyada aan soo sheegnay ay shaqaynayaan. Haddii aad ku adkaysato gelitaanka martida (lama talin), waxaa jira "Daar geli galitaanka martida aan ammaan ahayn"gudaha Habaynta Kombiyuutarka> Qaababka Maamulka> Shabakadda> Xarunta Shaqada ee Lanman iyo hagaajinta diiwaangelinta reg add HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters /v AllowInsecureGuestAuth /t reg_dword /d 00000001 /f.

Haddii digniintu soo baxdo marka dib loo xidhayo unugga nooca "Nidaamyadu waxay xannibaan gelitaanka martida aan la hubin", waa habdhaqanka tan iyo Windows 10 1709: SMB v1/v2 aan saxeexin waa ammaan. Xalka wanaagsan waa in la isticmaalo SMB v3 iyo isku xirka la xaqiijiyay.

Error 0x80004005: boodi kartaa marka SMB 1.0 wuu naafo yahay oo dhamaadka kale wuxuu ku hadlaa SMB1 oo kaliya. Dib u eeg qaybta SMB oo ka fiirso beddelaad sugan (sida ku habboon, cusboonaysii ama dib u habayn SMB 3.x).

Xadka Xiriirinta: Macmiilka Windows (7/10/11) waxaa jira a ugu badnaan 20 isku mar khayraadka la wadaago. Xaaladaha isticmaaleyaal badan, ku dheji adeegga Windows Server ama NAS diyaarsan.

Si aad dhakhso iyo ammaan ugu wadaagto gudaha Windows 11, u diyaari shabakadaada si wanaagsan isticmaalayaasha iyo kooxaha heeganka ah, isticmaal wadaagis horumarsan oo ku toosi ogolaanshaha SMB NTFS; ku xidho UNC, khariidado wadis haddii ay ku habboon tahay, ka fogow martida oo kaliya gal SMB 1.0 marka aanay jirin ikhtiyaar kale, ku tiirsan jeegag iyo tabaha mushkilad xalin si loo badbaadiyo waqtiga marka wax aan laga jawaabin.