I-Enterprise State Roaming: Uzivumelanisa Kanjani Izilungiselelo Phakathi Kwamadivayisi ane-Azure

Namuhla, ukuphathwa kahle kwezilungiselelo zomsebenzisi nedatha sekuyinto ehamba phambili kumabhizinisi asebenzisa amadivaysi amaningi e-Windows. I-Enterprise State Roaming (ESR) ene-Azure kuvela njengesixazululo esibalulekile esivumela izinhlangano ukuthi zivumelanise izilungiselelo nezintandokazi phakathi kwamadivaysi ahlukene, ukuqinisekisa ukuzizwisa okungaguquki nokonga isikhathi sokusetha amadivayisi amasha.

Kulesi sihloko, sizochaza ngendlela ephelele nengokwemvelo ukuthi lesi sici se-Microsoft siqukethe ini. Kusuka kokuthi ungayisebenzisa kanjani ibe yizinzuzo zayo, imikhawulo, imininingwane yezobuchwepheshe mayelana isitoreji kanye nokugcinwa kwedatha, izinkinga ezivamile ongase uhlangabezane nazo, kanye nezincomo zokuzuza okuningi kuzo. Uma unamadivayisi aphethwe ku-Azure AD noma unentshisekelo yokuthuthukisa ukuhamba kwabasebenzisi bakho, nali lonke ulwazi oludingayo, oluqoqwe futhi lwachazwa ngokucacile.

Iyini i-Enterprise State Roaming futhi ikwenzelani?

I-Enterprise State Roaming Kuyisici esithuthukisiwe esinikezwa yiMicrosoft ezinkampanini ezisebenzisayo I-Azure Active Directory (i-Azure AD, manje eyaziwa ngokuthi i-Microsoft Access ID). Inhloso yayo eyinhloko Vumelanisa ngokuzenzakalelayo izilungiselelo zesistimu nokunye okuthandwayo kohlelo lokusebenza umsebenzisi, egcina lolu lwazi ngokuphephile efwini le-Azure. Ngale ndlela, abasebenzi bangajabulela ulwazi olufanayo lomsebenzisi kunoma iyiphi idivayisi ye-Windows exhunywe ku-akhawunti yabo yebhizinisi, ngaphandle kokuthi balungise yonke into kusukela ekuqaleni isikhathi ngasinye.

Lesi sici sethulwa ekuqaleni kubasebenzisi basekhaya ku-Windows 8, kodwa ngokufika kwe-Azure AD, amabhizinisi angazuza ekuphathweni okulawulwayo kakhulu nochwepheshe okuthi yiziphi izilungiselelo ezivumelaniswayo futhi ngaphansi kwaziphi izimo.

Izinzuzo zokusebenzisa i-Enterprise State Roaming enhlanganweni yakho

Ukusebenzisa i-ESR ku-Azure kunikeza izinzuzo zamasu amaningana kumabhizinisi nabaphathi be-IT:

• Okuhlangenwe nakho okufanayo: Abasebenzisi bathola ukubukeka nomuzwa ofanayo kuwo wonke amadivayisi abo e-Windows. Uma ushintsha ikhompuyutha yakho noma wengeza entsha, izilungiselelo zizolandela.
• Isikhathi esincane ekusetheni kokuqala: Isikhathi esiningi sigcinwa lapho kusethwa okokusebenza okusha, njengoba okuthandwayo njengolimi, ingemuva ledeskithophu, kanye nenye idatha yohlelo lokusebenza idluliselwa ngokuzenzakalelayo.
• Ukuphatha okumaphakathiAbalawuli bangachaza, bakhawule, noma banwebe ububanzi bokuvumelanisa idatha futhi babuke isimo samadivayisi nabasebenzisi kusukela kukhonsoli ye-Azure.
• Ukuphepha nokuhambisana: Yonke idatha evumelanisiwe igcinwa ezifundeni ze-Azure ezihlangabezana nezindinganiso zomhlaba wonke zokuvikeleka nobumfihlo.

Izimfuneko zokunika amandla i-Enterprise State Roaming

Ukuze wenze kusebenze futhi ujabulele i-ESR, kuyadingeka ukuthobela ezinye izidingo zobuchwepheshe kanye nelayisensi:

• Ukukhipha: Inhlangano yakho kufanele ibe nayo Amalayisensi e-Microsoft Faka i-ID P1 noma i-P2, noma kuphakheji I-Enterprise Mobility + Security (EMS) lokho kubandakanya noma iyiphi yalezi zindlela.
• Isistimu yokusebenza ebuyekeziwe: Amadivayisi kufanele asebenze Windows 10 inguqulo 21H2 noma kamuva, noma Windows 11. Ngokufanelekile, kufanele uhlale unesibuyekezo sakamuva, njengoba izici nokulungiswa kwezokuphepha kusesikhathini samanje.
• Amadivayisi axhunywe ku-Entra ID: Kubalulekile ukuthi Isikhumulo ihlanganiswe ne-Azure AD (Microsoft Entra). Uma usebenzisa indawo eyingxube enohlu lwemibhalo olusebenzayo endaweni, uzodinga ukulungisa ukujoyina okuyingxube ukuze kusebenze kahle.
• I-akhawunti yomsebenzisi efanele: : Izosebenza kuphela kubasebenzisi abanokunyakaza nokuvumelanisa okunikwe amandla ngezinqubomgomo ezibekwe umlawuli.

Kuhle ukukhumbula ukuthi i-ESR iyisici ozikhethela sona, asivulwa ngokuzenzakalelayo futhi sidinga i- ukulungiswa kwangaphambili kusuka kukhonsoli yokuphatha kusuka e-Azure.

Ngiyenza kanjani i-Enterprise State Roaming isebenze isinyathelo ngesinyathelo?

Ukwenza kusebenze i-ESR kubhalwe kahle futhi kuyinqubo noma yimuphi umlawuli we-Azure global angayenza kalula ngamalayisense afanelekile. Izinyathelo eziyinhloko yilezi:

1. Finyelela ifayela le- Isikhungo sokuphatha se-Microsoft Ngena ngemvume njengomlawuli womhlaba.
2. Zulazulela emzileni Iya ku-ID > Amadivayisi > Ulwazi Olujwayelekile > I-Enterprise State Roaming.
3. Yenza kusebenze inketho "Vumela abasebenzisi ukuthi bavumelanise izilungiselelo zohlelo lokusebenza kanye nedatha kuwo wonke amadivayisi". Ungakwenza lokhu kubo bonke abasebenzisi noma amaqembu athile nje, kuye ngezidingo zakho.
4. Kumadivayisi aku-Active Directory esendaweni kuphela, lungiselela ukujoyina kwe-hybrid ukuze babone i-Azure AD futhi babambe iqhaza ekuvumelaneni.
5. Kubalulekile ukuthi amatheminali aqalise kabusha futhi abasebenzisi bangene futhi ukuze izilungiselelo ziqale ukusebenza.

Ngemva kokuqeda lezi zinyathelo, abasebenzisi abagunyaziwe bazokwazi ukujabulela ukuvumelanisa isimo sebhizinisi kumadivayisi abo asekelwe.

Iluphi uhlobo lolwazi oluvunyelaniswa ne-ESR?

Omunye wemibuzo emikhulu evelayo ukuthi iluphi uhlobo lwedatha olungavumelaniswa yi-ESR. IMicrosoft, emibhalweni yayo, iyakucacisa lokho Kokubili izilungiselelo zesistimu yokusebenza nezinye izintandokazi zohlelo lokusebenza ziyavumelaniswa. Ezinye izibonelo ezisebenzayo:

• Ingemuva ledeskithophu (isithombe nendawo)
• Izintandokazi zesiyingi (ulimi, idethi kanye nefomethi yesikhathi, njll.)
• Isakhiwo sebha yomsebenzi
• Amaphasiwedi e-Wi-Fi (uma evunyelwe inhlangano)
• Izilungiselelo eziqondene nohlelo lokusebenza ezisekelwayo
• Ezinye izinketho zangokwezifiso ezilungiswe umsebenzisi futhi ezisekela ukuzulazula

Uhlu lwezilungiselelo ezithile lungahluka kuye ngenguqulo ye-Windows nemikhawulo yenkampani. Ngumlawuli, ngezinqubomgomo, onquma ngokuqondile ukuthi yini evunyelwe ukuvumelanisa futhi yini engavumelaniswa.

Igcinwa kuphi futhi kanjani idatha evumelanisiwe?

Isitoreji esivikelekile siyingxenye ebalulekile ye-Enterprise State Roaming. Lonke ulwazi oluvumelanisiwe luhlala kungqalasizinda ye-Azure futhi isingathwa ngokucabangela indawo yendawo echazwe inkampani lapho idala isibonelo sayo se-Entra ID.

I-Microsoft ihlukanisa isitoreji ezindaweni ezintathu ezibanzi: INyakatho Melika, i-EMEA (iYurophu, iMpumalanga Ephakathi, ne-Afrika), kanye ne-APAC (Asia-Pacific). Isibonelo, uma inkampani yakho ise-Spain, idatha izoba sezikhungo zedatha zase-Europe futhi Ngeke ziphindaphindwe kwezinye izifunda, ngaphandle kwezizathu ezizwakalayo..

Le ndlela iqinisekisa ukuthi ukuhambisana nemithetho yendawo yokuvikela idatha (njenge-GDPR) igcinwa ngokuqinile. Inani lezwe noma lesifunda lichazwa ngesikhathi sokudalwa kohla lwemibhalo futhi ayikwazi ukushintshwa ngemuva. Uma unemibuzo mayelana nendawo yedatha yakho noma udinga imininingwane enemininingwane, ungavula ithikithi losekelo e-Azure.

Idatha ihlala isikhathi esingakanani ivumelanisiwe e-Azure?

Ukugcinwa kwedatha ku-Enterprise State Roaming kuchazwe kahle futhi kusabela kukho kokubili ukusebenza kahle nemibandela yobumfihlo:

• ukususwa ngesandlaUma umlawuli esusa umsebenzisi noma uhla lwemibhalo, idatha yalo exhunyiwe iyasuswa phakathi kwezinsuku ezingu-90 kuya kwezingu-180. Ukususwa mathupha nakho kungacelwa kumsebenzisi othile.
• Idatha ephelelwe yisikhathi: Uma ukucushwa okuthile kungakaze kusetshenziswe noma kufinyelelwe okungenani unyaka owodwa, kuyacatshangelwa ayisasebenzi futhi ingase ikhishwe efwini phakathi nenkathi engengaphansi kwezinsuku ezingu-90 ezengeziwe.
• Ukuvalwa komhlaba jikelele: Uma i-ESR ikhutshaziwe kulo lonke uhla lwemibhalo, zonke izilungiselelo zomsebenzisi ziyayeka ukuvumelanisa futhi zibhekwa njengezingasasebenzi ngemva kwesikhathi esincane sokugcinwa.

Uma idatha isisusiwe efwini, alikho ithuba lokuzibuyisa. Nokho, uma noma iyiphi idivayisi isenokulungiselelwa endaweni futhi ibuya ku-inthanethi, ingalayishwa ngokuzenzakalelayo ibuyele emafini.

Uzixazulula kanjani izinkinga ezivamile ze-Enterprise State Roaming

Nakuba ukusebenza kuqinile, ekusebenzeni zingavela izingqinamba zesikhathi. I-Microsoft igcizelela ukubukeza amaphuzu alandelayo noma nini uma kwenzeka izigameko:

• Hlola izinguqulo zesistimu: Qinisekisa ukuthi idivayisi isebenzisa inguqulo encane (Windows 10 22H2 noma ngaphezulu).
• Hlola ukubophezela kokuthi Faka i-ID: Kubalulekile ukuthi idivayisi ihlanganiswe kahle ne-Azure AD noma indawo evunyiwe ye-hybrid.
• Amalayisensi: Qinisekisa ukuthi umsebenzisi unelayisensi ye-Entra ID P1 noma i-P2 evumelekile.
• Izinqubomgomo ezisetshenzisiwe: I-ESR kufanele inikwe amandla kumsebenzisi othintekayo noma iqembu.
• Qala kabusha: Ngemva kwezinguquko noma izinkinga, ukuqala kabusha ikhompuyutha yakho nokungena futhi futhi kuvame ukulungisa izinkinga eziningi ezincane.

Ngaphezu kwalokho, ukuhlola ukuvumelanisa okulungile kanye ne-akhawunti esetshenziswayoSincoma ukuthi uye kokuthi Izilungiselelo > Ama-akhawunti > Vumelanisa Izilungiselelo futhi uhlole ukuthi i-akhawunti yakho yebhizinisi isohlwini. Kungumqondo omuhle futhi ukwenza izinguquko ezilula (njengokushintsha ulimi) futhi ubone ukuthi ziyenziwa yini kukhompuyutha yesibili ngemva kwemizuzu embalwa.

Ukuhlaziywa okuningiliziwe kwezinkinga ezivame kakhulu nezisombululo zazo

Empilweni yangempela, kuphakama izinkinga eziqondile ezingavimbela i-ESR ukuthi isebenze. Ezinye ezivame kakhulu zihlobene nalokhu:

• Idivayisi ixhunyiwe kodwa ayivumelanisi. Lokhu kuvame ukuthi kungenxa yokuthi inqubomgomo ayikaqaliswa, okungathatha amahora ezindaweni zezinkampani eziyinkimbinkimbi.
• Izimvume ezingekho, amalayisense, noma isabelo somsebenzisi esifanele.
• Ikhasi elithi “Izilungiselelo Zokuvumelanisa” libonisa imilayezo njengokuthi “Ezinye izici zitholakala kuphela ngomsebenzi noma nge-akhawunti ye-Microsoft.” Kulokhu kungase kube ngenxa yokuntuleka kokuqinisekisa okusebenzayo ngokumelene ne-Entra ID.
• Izinkinga zokubhaliswa kwedivayisi ku-Azure AD, engatholwa ngomyalo othi "dsregcmd.exe /status" ovela I-CMD. Uma amanani e-AzureAdJoined kanye ne-WamDefaultSet esethelwe ku-"CHA", isimo kuzodingeka sihlaziywe futhi, uma kufaneleka, kwenziwe ukubhaliswa ngesandla noma okuphoqelelwe.

Ezimweni eziningi zalezi zimo, umlawuli angakwazi ukuxazulula inkinga ngokukhubaza futhi anike amandla kabusha ukuvumelanisa, ukuqala kabusha ikhompuyutha, kanye nokuqinisekisa ukuthi izifakazelo nokuqinisekiswa kwezinto eziningi (i-MFA) kulungiselelwe ngendlela efanele.

Ukuvumelanisa kwezinto eziningi kanye nokuqinisekisa: ubudlelwano nemikhawulo

Iphuzu elibalulekile elikhonjiwe ukusebenzisana phakathi kwe-Enterprise State Roaming kanye nezinhlelo zokuqinisekisa izinto eziningi (MFA). Uma i-MFA idingeka ekungeneni, izilungiselelo zingase zingavumelanisi kahle uma ungena ngephasiwedi evamile. Lokhu kwenzeka ngoba isistimu ivimbela izinqubo ezizenzakalelayo ezingakwazi ukuqedela ukuqinisekiswa okwengeziwe.

Kubaphathi, isixazululo esinconyiwe ukuthi abasebenzisi basebenzise ama-PIN afana neWindows Hello noma baqedele inqubo ye-MFA lapho bengena kwezinye izinsiza ze-Azure, njenge I-Microsoft 365. Ukwengeza, uma izinqubomgomo zokufinyelela ezinemibandela ezithuthukisiwe zisetshenziswa nge-Active Directory Federation Services (AD FS) futhi lezi zenza amathokheni okufinyelela aphelelwe yisikhathi, kubalulekile ukuthi uphume futhi ungene futhi usebenzisa i-PIN noma uqedele inqubo eyengeziwe yokuqinisekisa ku-inthanethi.

I-athikili ehlobene:

Uzilungisa kanjani izinkinga zokuvumelanisa ezivamile ku-Microsoft Teams

Isaka

Umbhali oshisekayo ngomhlaba wamabhayithi nobuchwepheshe ngokujwayelekile. Ngiyathanda ukwabelana ngolwazi lwami ngokubhala, futhi yilokho engizokwenza kule bhulogi, ngikubonise zonke izinto ezithakazelisayo kakhulu ngamagajethi, isofthiwe, ihadiwe, izitayela zobuchwepheshe, nokuningi. Inhloso yami ukukusiza ukuthi uzulazule emhlabeni wedijithali ngendlela elula nejabulisayo.