Lego has released special slippers to save users from pain. What did you do, Microsoft?
On Windows 10 update (I now have build 1803) my heart stops every time - what will break this time. In order to share the pain and treatment, I collected the most frequent appeals from people in the last couple of months. In the bank: the termination of access to servers, application crashes and frankly strange glitches.
Do not allow to server
A nagging complaint. In March 2018, MS released an update covering the CredSSP vulnerability (security bulletin CVE-2018-0886 ). Those organizations that do not frequently update the servers and did not install this update before the beginning of May, faced a problem - the client updated computers stopped connecting to the terminal servers.
Because there is nothing to connect to non-upgraded servers.
The smart solution is to upgrade the server. Download updates directly from Microsoft ( CVE-2018-0886 ). If something terrible happens and access is already lost, you will have to configure client computers. Versions of Pro and above are easily configured via local group policies.
Behavior configuration occurs in Computer Configuration - Administrative Templates - System - Credential Transmission - Correction of the encryption oracle vulnerability (poor vulnerable Oracle). In order for the system to start up on a non-updated server, the value in the policy must be switched to “Leave a vulnerability”.
Setting Group Policy.
Since Home versions do not have Group Policy Management snap-in, you have to act through the registry. The following command is enough:
REG ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters /v AllowEncryptionOracle /t REG_DWORD /d 2
, — .
.
WIndows 10 SMBv1 , 15 , . - .
SMBv1 « Windows».
.
. . , ODBC SQL .
SMBv1 , . Windows Defender. , — , .
, «» . — .
.
, WIndows 2003 NAS — best practice. , , . , : «, ...! , !»
1C — ,
Windows 2008 RemoteApp — Citrix MetaFrame (XenApp). , 1 — , . , , RDP.
. , RemoteApp, . , - , , .
RemoteFX RemoteApp . « RemoteFX RemoteApp» GPO: — Windows — — — .
RemoteFX RemoteApp.
, GPU, . , RDP- .
:
- C:\windows\system32\mstsc.exe;
- C:\windows\system32\mstscax.dll.
Windows. :
regsvr32 C:\Windows\System32\mstscax.dll
RemoteApp.
400 Windows . «» OEM-. .
Windows, .
, Raid-0 SSD+HDD .
.
, , — . , , , « » . diskpart.exe:
- diskpart.
- list volume.
- select volume 2, 2 .
- remove letter=F. , , .
- exit.
.
. .
: , . , , « , ».
, Windows. GNU\Linux, 1 - .
, 1 , . Windows, .