Ultimate Basic Hardening Guide for Windows 11: Amaqhinga Abalulekile Okuqinisa Uhlelo Lwakho

Isibuyekezo sokugcina: 09/05/2025
Author: Isaka
  • Lungiselela izici zokuphepha ezithuthukisiwe njenge TPM, I-Secure Boot kanye ne-VBS ithuthukisa ubuqotho besistimu.
  • Izinhlelo zokusebenza zamahhala ezifana ne-Hardentools noma i-Hard Configurator zenza ukuqina kube lula ngokuchofoza okumbalwa nje.
  • Ukukhubaza izinsizakalo ezingadingekile kanye nokuqinisa imithetho ye-firewall kunciphisa indawo yokuhlasela.
  • I-Microsoft Defender ne-BitLocker zakha umugqa wokuqala wokuzivikela lapho zilungiselelwe kahle.

ukuqinisa amaqhinga ku Windows 11

Windows 11 ilethe nentuthuko ephawulekayo ekusebenzeni, ukuklama nokuphepha. Kodwa-ke, njenganoma iyiphi isistimu yokusebenza yesimanje, isavezwa ezinhlobonhlobo zezinsongo ze-cyber. Ukuqina, noma ukuqiniswa kwesistimu, kuba inqubo ebalulekile yokuqinisa isivikelo ekufinyeleleni okungagunyaziwe, I-malware kanye nokuba sengozini.

Lesi sihloko sinikeza iqoqo eliphelele lamasu asebenzayo, ukucushwa namathuluzi okwenza ukuqina kwe Windows 11. Kusukela ezindleleni ezakhelwe ohlelweni ngokwalo kuya ezinsizakalweni zangaphandle ezenza imisebenzi yezokuphepha ibe lula, umgomo uwukufinyelela a imvelo ye-Windows enamandla kakhulu ngaphandle kokudela ukusetshenziswa.

Kuyini ukuqina kweWindows 11?

Leli gama lukhuni ibhekisela ekulungiseni nasezinyathelweni ezisetshenziswayo ukuze kuncishiswe indawo yokuhlasela yesistimu. Ku Windows 11, lokhu kuhilela ukumisa kahle imisebenzi efana nale isilawuli se-akhawunti, ukubethela, i-firewall futhi ususe izici ezingadingekile ezingaba amasango ohlelo olungayilungele ikhompuyutha noma abahlaseli.

Yehlisa ubungozi Akukhona nje ukufaka i-antivirus noma ukwenza izipele. Kubandakanya futhi ukukhawulela izinsizakalo zangemuva, ukulungisa amazinga elungelo lomsebenzisi, ukudala izinqubomgomo zokulawula izinhlelo zokusebenza, kanye nokuvumela ubuchwepheshe obufana no. TPM, I-Boot evikelekile y VBS (Ukuphepha Okusekelwe Ngokubonakalo), phakathi kokunye.

Ukuqalisa: Buyekeza futhi Vikela Uhlelo Lwakho

Ngaphambi kokuthi uqale ukulungisa izilungiselelo ezithuthukile, kubalulekile ukugcina isistimu yakho yokusebenza nesofthiwe kusesikhathini. I-Windows Update ayigcini nje ngokungeza izici ezintsha, kodwa futhi iyasebenza iziqephu zokuphepha ezilungisa amaphutha abalulekile. Ungahlola ukuthi ungagcina kanjani isistimu yakho ivikelekile kulo mhlahlandlela ophelele izilungiselelo zokuphepha ku-Windows.

  • Vula izibuyekezo ezizenzakalelayo kokuthi Qala > Izilungiselelo > I-Windows Update futhi uhlole izibuyekezo ozikhethele.
  • Dala iphoyinti lokubuyisela isistimu ukubuyisela izinguquko uma kuphakama izinkinga ngemva kokulungiswa.
  • Buyekeza abashayeli futhi abashayeli kusuka kuphaneli ye-Windows Update, njengoba umshayeli osephelelwe yisikhathi angavula izimbobo ezibalulekile.
  Amathiphu okugwema ama-tolls nemigwaqo emikhulu usebenzisa i-Apple Maps ku-iPhone yakho

Misa kahle i-Microsoft Defender Antivirus

Windows 11 ihlanganisa Isivikeli magciwane seMicrosoft Defender, ithuluzi eliqinile eliye lathuthuka kakhulu eminyakeni yamuva. Ukuze uthole okuningi kuyo, ungaphinda uhlole lo mhlahlandlela Ukuxazulula izinkinga zedivayisi ku-Windows. Gcina i-Defender isebenza futhi iqiniswe ngokucushwa okungokwezifiso.

  • Ukufinyelela ku- Izilungiselelo > Ukuvikeleka kweWindows > Ukuvikelwa kwegciwane nosongo.
  • Yenza kusebenze ukuvikela kwesikhathi sangempela futhi ibuyekeza izincazelo zegciwane ngezikhathi ezithile.
  • "Kokulawula Uhlelo Lokusebenza Nesiphequluli," ungaphatha izici ezifana ne-SmartScreen nokuhlukaniswa kwefayela okusolisayo.
  • Kusuka kokuthi "Izinketho zokuskena," hlela ukuskena kwesistimu okujwayelekile.

Gcina i-Defender isebenza futhi uyiqinise ngezilungiselelo ngokwezifiso kusiza ukuvimbela izinkinga eziningi ngaphandle kwesidingo sesofthiwe eyengeziwe. Uma usebenzisa enye i-antivirus, khubaza i-Defender ukugwema izingxabano; Nokho, ezimweni eziningi, ukuvikelwa okwakhelwe ngaphakathi kwanele.

Sebenzisa ukubethela kwe-BitLocker

El ukubethela kwedatha Kuyisendlalelo esibalulekile ekuvikelweni kolwazi olubucayi noma lochwepheshe. Idrayivu Yobhalomfihlo i ikuvumela ukuthi ubethele wonke ama-hard drive ku-Windows. Uma udinga usizo ngokwenza kusebenze, ungaphinda uhlole lesi sifundo ku Ukubethela kusebenza kanjani ku-Windows.

Ukuyisebenzisa:

  • Finyelela ifayela le- Iphaneli Yokulawula > Uhlelo Nokuphepha > Ukubethelwa KweDrayivu Ye-BitLocker.
  • Khetha idrayivu ofuna ukuyibethela bese ulandela imiyalelo esesikrinini.
  • Gcina ifayili le- ukhiye wokutakula endaweni ephephile, njenge-a USB ngaphandle noma ephepheni eligcinwe ngokomzimba.

Uma isibetheliwe, idatha yakho izohlala ivikelekile ngisho noma idivayisi yebiwa noma othile ezama ukuyifinyelela kusukela kwenye isistimu. Izinhlelo zasekhaya zeWindows azifaki i-BitLocker ephelele, kodwa kunezinye izindlela ezifana ne-VeraCrypt yokubethela kwamahhala.

I-TPM 2.0 kanye ne-Secure Boot: Izinsika Zohlelo

Enye yezidingo zobuchwepheshe ze-Windows 11 ubukhona be I-TPM 2.0 futhi isebenze I-Boot evikelekile. Lobu buchwepheshe buqinisekisa ukuthi isoftware ilayishiwe ngesikhathi sohlelo ibhuthini ayizange iphazanyiswe. Ungahlola isimo sayo emiyalweni enemininingwane kulokhu.

  "I-Instagram iyalayisha futhi ayingivumeli ukuthi ngilayishe izithombe" Isixazululo esisheshayo

Ukuhlola ukuthi ayasebenza yini:

  • Vula msinfo32 kusuka kumenyu yokuqala.
  • Bheka okuthi “Secure Boot” kanye “ne-TPM” ukuze uhlole isimo sazo.
  • Uma zikhutshaziwe, finyelela i-BIOS/UEFI usebenzisa ukhiye ohambisanayo ebhuthini (F2, Del, Esc…) futhi uzisebenzise lapho.

I-Secure Boot ivimbela amasistimu angagunyaziwe ekulayisheningenkathi I-TPM iqinisa ukuvikeleka kokubethela futhi isitoreji umshwalense wokuqinisekisa. Zombili izici ziqinisa isistimu ngokumelene nama-rootkits kanye ne-malware eqhubekayo.

Ukuvikeleka okusekelwe kwi-Virtualization: vumela i-VBS ne-HVCI

Windows 11 ihlanganisa ubuchwepheshe be ukuphepha okusekelwe kwi-virtualization (VBS) y I-Hypervisor-Protected Code Integrity (HVCI). Ungathola eminye imininingwane lapha. Lezi zindlela zisebenzisa i-virtualization ye hardware ukuhlukanisa izinqubo ezibucayi.

Izinyathelo zokuvumela lezi zici:

  • Vula Umhleli Wenqubomgomo Yeqembu Lendawo: gpedit.msc.
  • Iya kokuthi Ukucushwa Kwekhompyutha > Izifanekiso Zokulawula > Isistimu > Ukuqapha Kwedivayisi.
  • Nika amandla izinketho ze-“Virtualization-based Security” kanye “ne-HVCI Code Integrity”.

Kubalulekile ukuqaphela ukuthi ukunika amandla lezi zici kungase kube nomthelela omncane ekusebenzeni uma ihadiwe yakho ikhawulelwe. Kodwa-ke, izinzuzo zokuvikela ekuxhashazweni kwe-kernel nokuhlaselwa okuyinkimbinkimbi zinkulu.

Ukulawulwa kwe-akhawunti yomsebenzisi (UAC)

shintsha uhlobo lwe-akhawunti yomsebenzisi

I-UAC isebenza njengesihlangu esicela ukuqinisekiswa noma nini lapho uhlelo luzama ukwenza izinguquko ezinkulu ohlelweni. Ungafunda kabanzi mayelana nokucushwa kwayo kulesi sihloko dala ama-backups ku-Windows. Nakuba kungase kubonakale kucasula, ivimbela ukufakwa nokulungiswa okungagunyaziwe.

Kunconywa ukuyibeka ezingeni eliphakathi nendawo eliphezulu:

  • Iyafuna "Shintsha Izilungiselelo Zokulawula I-akhawunti Yomsebenzisi” ku-Start menu.
  • Setha isilayidi ukuze sithi “Ngazise kuphela uma izinhlelo zokusebenza zizama ukwenza izinguquko kukhompuyutha yami".

Ukunciphisa noma ukukhubaza i-UAC iye kumazinga aphansi kwandisa ingcuphe yokuthi uhlelo olungayilungele ikhompuyutha yenze izinguquko ngaphandle kwesixwayiso, ngakho-ke akunconywa.

Ukufinyelela okulawulwayo kumafolda

I-Microsoft Defender ihlanganisa Ukufinyelela okulawulwayo kumafolda, isici esiklanyelwe ukuvikela ngokumelene ne-ransomware. Ivimbela izinhlelo zokusebenza ezingagunyaziwe ekuguquleni amafayela kumafolda abalulekile njengamadokhumenti, Izithombe, noma Ideskithophu. Ukuze uthole imininingwane ethuthukisiwe ekuvikelweni kwefayela, ungaphinda ubhekisele kulokhu .

  Indlela yokwehlisa i-macOS: Buyela enguqulweni yangaphambilini isinyathelo ngesinyathelo

Ukuyisebenzisa:

  • Iya ku-Windows Security> Ukuvikelwa kwe-Ransomware> Phatha ukuvikelwa kwe-ransomware.
  • Vula “Ukufinyelela kwefolda elawulwayo” bese ukhetha amafolda ofuna ukuwavikela.
  • Esimeni sokuphozithiza okungamanga, kuvumela izinhlelo zokusebenza ezisemthethweni ezingase zivinjwe kungahlosiwe.

Uma selucushiwe, uzothola izaziso uma uhlelo luzama ukushintsha amafayela ngaphandle kokugunyazwa., okusiza ukutholwa kusenesikhathi kwezinsongo ezingaba khona kanye nokuvikelwa kwedatha yakho.

I-athikili ehlobene:
Ukulungisa Okuphelele KweWindows Security Lawa mafayela awakwazi ukuvulwa ngawo Windows 10