{"id":1157,"date":"2026-09-01T09:57:06","date_gmt":"2026-09-01T01:57:06","guid":{"rendered":"https:\/\/www.x4s.cn\/?p=1157"},"modified":"2026-09-01T09:57:07","modified_gmt":"2026-09-01T01:57:07","slug":"%e9%92%88%e5%af%b9%e5%b1%80%e5%9f%9f%e7%bd%91%e8%bf%90%e7%bb%b4pc%e7%bb%88%e7%ab%af%e7%9a%84%e4%b8%80%e4%ba%9b%e7%bd%91%e7%bb%9c%e4%b8%8e%e5%ae%89%e5%85%a8%e9%85%8d%e7%bd%ae","status":"publish","type":"post","link":"https:\/\/www.x4s.cn\/?p=1157","title":{"rendered":"\u9488\u5bf9\u5c40\u57df\u7f51\u8fd0\u7ef4PC\u7ec8\u7aef\u7684\u4e00\u4e9b\u7f51\u7edc\u4e0e\u5b89\u5168\u914d\u7f6e"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u5728\u4f01\u4e1a\u6216\u5c40\u57df\u7f51\u73af\u5883\u4e2d\uff0c\u4e3a\u4e86\u8ba9\u540e\u7eed\u7684\u8fdc\u7a0b\u7ef4\u62a4\uff08\u5982 <code>PsExec<\/code>\u3001PowerShell \u8fdc\u7a0b\u7ba1\u7406\u3001WMI \u90e8\u7f72\uff09\u7545\u901a\u65e0\u963b\uff0c\u540c\u65f6\u53c8\u4e0d\u4f1a\u5c06\u7535\u8111\u5b8c\u5168\u66b4\u9732\u7ed9\u9ed1\u5ba2\u653b\u51fb\uff0c\u6211\u4eec\u9700\u8981\u9075\u5faa <strong>\u201c\u6700\u5c0f\u7279\u6743\u539f\u5219\u201d<\/strong> \u548c <strong>\u201c\u53d7\u4fe1\u4efb\u7ba1\u9053\u201d<\/strong> \u8fdb\u884c\u521d\u59cb\u5316\u914d\u7f6e\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u4e00\u3001\u9488\u5bf9\u65b0\u88c5\u7535\u8111\uff08Win10 \/ Win11\uff09\u6700\u63a8\u8350\u7684\u5e73\u8861\u914d\u7f6e\u65b9\u6848<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5efa\u8bae\u5c06\u7b56\u7565\u6253\u5305\u8fdb<strong>\u7cfb\u7edf\u955c\u50cf<\/strong>\u6216\u4f5c\u4e3a<strong>\u65b0\u673a\u4ea4\u4ed8\u811a\u672c<\/strong>\uff1a<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83d\udee1\ufe0f \u7b2c\u4e00\u6b65\uff1a\u89c4\u8303\u7ba1\u7406\u5458\u8d26\u53f7\uff08\u66ff\u4ee3\u76f4\u63a5\u6539\u540d\uff09<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u76f4\u63a5\u91cd\u547d\u540d\u5185\u7f6e <code>Administrator<\/code> \u867d\u7136\u80fd\u9632\u7b80\u5355\u7684\u66b4\u529b\u7834\u89e3\uff0c\u4f46\u4f1a\u5f15\u53d1\u8fdc\u7a0b\u8ba4\u8bc1\u5931\u8d25\uff08\u5982\u4f60\u672c\u6b21\u9047\u5230\u7684\u75db\u70b9\uff09\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u66f4\u4f18\u65b9\u6848<\/strong>\uff1a\n<ol class=\"wp-block-list\">\n<li><strong>\u5f7b\u5e95\u7981\u7528<\/strong> \u5185\u7f6e <code>Administrator<\/code>\u3002<\/li>\n\n\n\n<li><strong>\u65b0\u5efa\u4e00\u4e2a\u4e13\u5c5e\u7684\u8fd0\u7ef4\u7ba1\u7406\u5458\u8d26\u53f7<\/strong>\uff08\u5982 <code>itadmin<\/code>\uff09\uff0c\u8bbe\u7f6e 16 \u4f4d\u4ee5\u4e0a\u5f3a\u5bc6\u7801\u3002<\/li>\n\n\n\n<li>\u901a\u8fc7\u914d\u7f6e <strong>LAPS\uff08\u672c\u5730\u7ba1\u7406\u5458\u5bc6\u7801\u89e3\u51b3\u65b9\u6848\uff09<\/strong>\uff0c\u8ba9\u6bcf\u53f0\u7535\u8111\u7684\u8fd0\u7ef4\u5bc6\u7801\u968f\u673a\u4e14\u5b9a\u671f\u81ea\u52a8\u66f4\u6539\uff0c\u5f7b\u5e95\u9632\u8303\u5c40\u57df\u7f51\u6a2a\u5411\u79fb\u52a8\u653b\u51fb\u3002<\/li>\n<\/ol>\n<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83d\udd12 \u7b2c\u4e8c\u6b65\uff1a\u7cbe\u51c6\u5f00\u542f\u8fdc\u7a0b\u7ba1\u7406\u7b56\u7565<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u4fdd\u969c\u5b89\u5168\u7684\u524d\u63d0\u4e0b\uff0c\u5fc5\u987b\u5728\u6ce8\u518c\u8868\u4e2d\u6495\u5f00\u4e24\u4e2a\u7279\u5b9a\u7684\u3001\u53d7\u63a7\u7684\u53e3\u5b50\uff0c\u5141\u8bb8\u4e13\u7528\u8fd0\u7ef4\u8d26\u53f7\u5e26\u6743\u9650\u8bbf\u95ee\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4ee5\u7ba1\u7406\u5458\u8eab\u4efd\u6253\u5f00 PowerShell\uff0c\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">powershell<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># 1. \u5141\u8bb8\u975e\u5185\u7f6e\u7ba1\u7406\u5458\u8d26\u53f7\uff08\u5982 itadmin\uff09\u5728\u8fdc\u7a0b\u8fde\u63a5\u65f6\u4fdd\u6301\u5b8c\u6574\u7684\u7ba1\u7406\u5458\u6743\u9650\n# \u8fd9\u4e00\u6b65\u80fd\u5f7b\u5e95\u89e3\u51b3\u201c\u62d2\u7edd\u8bbf\u95ee\u201d\u548c\u201cWMI\/PsExec\u4ee4\u724c\u8fc7\u6ee4\u201d\u7684\u75db\u70b9\nNew-ItemProperty -Path \"HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\" -Name \"LocalAccountTokenFilterPolicy\" -Value 1 -PropertyType DWORD -Force\n\n# 2. \u663e\u5f0f\u542f\u7528\u9ed8\u8ba4\u7ba1\u7406\u5171\u4eab\uff08ADMIN$\u3001C$\uff09\uff0c\u65b9\u4fbf\u540e\u7eed\u8d44\u4ea7\u626b\u63cf\u548c\u6587\u4ef6\u63a8\u884c\nNew-ItemProperty -Path \"HKLM:\\SYSTEM\\CurrentControlSet\\Services\\LanmanServer\\Parameters\" -Name \"AutoShareWks\" -Value 1 -PropertyType DWORD -Force\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83d\udce1 \u7b2c\u4e09\u6b65\uff1a\u542f\u7528\u73b0\u4ee3\u5316\u7684\u8fdc\u7a0b\u7ba1\u7406\u7ba1\u9053 (WinRM)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u76f8\u6bd4\u4f20\u7edf\u7684 <code>PsExec<\/code>\uff08\u57fa\u4e8e\u9ad8\u5371\u7684 445\/SMB \u7aef\u53e3\uff0c\u6613\u88ab\u52d2\u7d22\u75c5\u6bd2\u5229\u7528\uff09\uff0c\u73b0\u4ee3 Windows \u8fd0\u7ef4\u66f4\u63a8\u8350\u4f7f\u7528 <strong>WinRM (PowerShell Remoting)<\/strong>\u3002\u5b83\u57fa\u4e8e HTTP\/HTTPS\uff0c\u652f\u6301\u5f3a\u52a0\u5bc6\u548c\u7cbe\u786e\u7684\u9632\u706b\u5899\u63a7\u5236\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">powershell<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># 1. \u5f00\u542f WinRM \u8fdc\u7a0b\u7ba1\u7406\u670d\u52a1\uff0c\u5e76\u81ea\u52a8\u914d\u7f6e\u6807\u51c6\u5165\u7ad9\u89c4\u5219\nEnable-PSRemoting -Force\n\n# 2. \u5b89\u5168\u52a0\u56fa\uff1a\u5982\u679c\u9700\u8981\uff0c\u53ef\u4ee5\u9650\u5236\u672c\u5730\u53ea\u4fe1\u4efb\u7279\u5b9a\u7f51\u6bb5\u7684\u8fd0\u7ef4\u673a\uff08\u53ef\u9009\uff09\n# Set-Item WSMan:\\localhost\\Client\\TrustedHosts -Value \"192.168.1.*\" -Force\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83e\uddf1 \u7b2c\u56db\u6b65\uff1a\u9ad8\u7ea7\u9632\u706b\u5899\u7b56\u7565\uff08\u5173\u952e\uff1a\u9650\u5b9a\u6765\u6e90 IP\uff09<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u201c\u65e2\u4fbf\u6377\u3001\u53c8\u5b89\u5168\u201d\u7684\u5173\u952e\u5728\u4e8e\u9632\u706b\u5899\u3002<\/strong> \u5f00\u542f\u4e86\u4e0a\u8ff0\u670d\u52a1\u540e\uff0c\u7edd\u4e0d\u80fd\u5bf9\u5168\u7f51\u653e\u884c\u3002\u5fc5\u987b\u5728 Windows \u9632\u706b\u5899\u4e2d\u8bbe\u7f6e\uff1a<strong>\u4ec5\u5141\u8bb8\u7279\u5b9a\u8fd0\u7ef4\u673a\u6216\u8fd0\u7ef4\u7f51\u6bb5\u8bbf\u95ee\u8fd9\u4e9b\u9ad8\u5371\u7aef\u53e3\u3002<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8bf7\u5728\u672c\u5730\u8fd0\u884c\u4ee5\u4e0b\u811a\u672c\uff0c\u5bf9\u8fdc\u7a0b\u684c\u9762\uff08RDP\uff09\u3001\u6587\u4ef6\u5171\u4eab\uff08SMB\uff09\u548c\u8fdc\u7a0b\u7ba1\u7406\uff08WinRM\uff09\u8fdb\u884c<strong>\u6765\u6e90 IP \u9501\u5b9a<\/strong>\uff08\u8bf7\u5c06 <code>192.168.1.100\/24<\/code> \u66ff\u6362\u4e3a\u4f60\u4eec IT \u8fd0\u7ef4\u529e\u516c\u5ba4\u7684\u5b9e\u9645\u7f51\u6bb5\uff09\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">powershell<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>$AdminIPs = \"192.168.1.100\/24\" # \u9650\u5236\u53ea\u6709\u8fd9\u4e2a\u7f51\u6bb5\u80fd\u8fdc\u7a0b\u7ba1\u7406\u8fd9\u53f0\u673a\u5668\n\n# \u9501\u5b9a\u8fdc\u7a0b\u684c\u9762 (3389)\nSet-NetFirewallRule -DisplayGroup \"\u8fdc\u7a0b\u684c\u9762\" -RemoteAddress $AdminIPs -Enabled True\n\n# \u9501\u5b9a\u6587\u4ef6\u548c\u6253\u5370\u673a\u5171\u4eab (445 \/ ADMIN$)\nSet-NetFirewallRule -DisplayGroup \"\u6587\u4ef6\u548c\u6253\u5370\u673a\u5171\u4eab\" -RemoteAddress $AdminIPs -Enabled True\n\n# \u9501\u5b9a PowerShell \u8fdc\u7a0b\u7ba1\u7406 (5985 \/ WinRM)\nSet-NetFirewallRule -DisplayGroup \"Windows \u8fdc\u7a0b\u7ba1\u7406\" -RemoteAddress $AdminIPs -Enabled True\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u8bf7\u8c28\u614e\u4f7f\u7528\u6b64\u7c7b\u4ee3\u7801\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u5b89\u5168\u6548\u679c<\/strong>\uff1a\u6b64\u65f6\uff0c\u5373\u4f7f\u9ed1\u5ba2\u5728\u5c40\u57df\u7f51\u5185\u62ff\u5230\u4e86\u4f60\u7684\u5bc6\u7801\uff0c\u7531\u4e8e\u4ed6\u7684 IP \u4e0d\u5728 <code>192.168.1.100\/24<\/code> \u5185\uff0c\u4ed6\u7684\u4efb\u4f55 <code>PsExec<\/code> \u6216 <code>RDP<\/code> \u8bf7\u6c42\u5728\u7f51\u7edc\u5c42\u5c31\u4f1a\u88ab\u8fd9\u53f0\u7535\u8111\u76f4\u63a5\u4e22\u5f03\uff0c\u5b89\u5168\u7cfb\u6570\u6781\u9ad8\u3002<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83d\udcdd \u603b\u7ed3\uff1a\u65b0\u673a\u4e00\u952e\u90e8\u7f72\u201c\u9ec4\u91d1\u811a\u672c\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u53ef\u4ee5\u5c06\u4ee5\u4e0b\u5185\u5bb9\u4fdd\u5b58\u4e3a <code>New_PC_Init.bat<\/code>\uff0c\u5728\u65b0\u7535\u8111\u88c5\u597d\u7cfb\u7edf\u540e\uff0c<strong>\u53f3\u952e\u4ee5\u7ba1\u7406\u5458\u8eab\u4efd\u8fd0\u884c\u4e00\u6b21<\/strong>\u3002\u5b83\u5c06\u5b8c\u7f8e\u5e73\u8861<strong>\u540e\u7eed\u7ef4\u62a4\u7684\u4fbf\u6377\u6027<\/strong>\u4e0e<strong>\u4f01\u4e1a\u5185\u7f51\u5b89\u5168\u6027<\/strong>\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">cmd<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>@echo off\n:: \u81ea\u52a8\u8bf7\u6c42\u7ba1\u7406\u5458\u6743\u9650\n%1 mshta vbscript:CreateObject(\"Shell.Application\").ShellExecute(\"cmd.exe\",\"\/c %~s0 ::\",\"\",\"runas\",1)(window.close)&amp;&amp;exit\n\necho &#91;1\/4] \u6b63\u5728\u914d\u7f6e\u8fdc\u7a0b\u7ba1\u7406\u6ce8\u518c\u8868\u7b56\u7565...\nreg add \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\" \/v LocalAccountTokenFilterPolicy \/t REG_DWORD \/d 1 \/f\nreg add \"HKLM\\SYSTEM\\CurrentControlSet\\Services\\LanmanServer\\Parameters\" \/v AutoShareWks \/t REG_DWORD \/d 1 \/f\n\necho &#91;2\/4] \u6b63\u5728\u6fc0\u6d3b WinRM \u8fdc\u7a0b\u7ba1\u7406\u670d\u52a1...\npowershell -Command \"Enable-PSRemoting -Force\"\n\necho &#91;3\/4] \u6b63\u5728\u914d\u7f6e\u9632\u706b\u5899\u7b56\u7565\uff08\u653e\u884c\u57fa\u7840\u7ba1\u7406\uff09...\npowershell -Command \"Set-NetFirewallRule -DisplayGroup '\u8fdc\u7a0b\u684c\u9762' -Enabled True\"\npowershell -Command \"Set-NetFirewallRule -DisplayGroup '\u6587\u4ef6\u548c\u6253\u5370\u673a\u5171\u4eab' -Enabled True\"\n\necho &#91;4\/4] \u5efa\u8bae\uff1a\u8bf7\u624b\u52a8\u6216\u901a\u8fc7\u9632\u706b\u5899\u9ad8\u7ea7\u8bbe\u7f6e\uff0c\u5c06\u4e0a\u8ff0\u89c4\u5219\u7684\u201c\u8fdc\u7a0b IP \u5730\u5740\u201d\u9650\u5236\u4e3a\u60a8\u7684\u8fd0\u7ef4\u7f51\u6bb5\uff01\necho \u914d\u7f6e\u5b8c\u6210\uff01\npause\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u4e8c\u3001\u9488\u5bf9\u57df\u63a7 GPO \u6279\u91cf\u4e0b\u53d1\u4e0e\u65e0\u57df\u5c01\u88c5\u955c\u50cf\uff08Sysprep\uff09\u4f18\u5316<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u4f01\u4e1a\u7ea7 IT \u8fd0\u7ef4\u5b9e\u73b0\u6807\u51c6\u5316\u3001\u81ea\u52a8\u5316\u7684\u89c6\u89d2\u4e2d\u5206\u522b\u7ed9\u51fa\u8fd9\u4e24\u79cd\u573a\u666f\u4e0b\u7684\u53ef\u843d\u5730\u914d\u7f6e\u6307\u5357\uff1a<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\u7b2c\u4e00\u90e8\u5206\uff1a\u57df\u63a7\uff08Active Directory\uff09\u65e0\u4eba\u503c\u5b88\u7ec4\u7b56\u7565\uff08GPO\uff09\u914d\u7f6e<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u57df\u73af\u5883\u4e0b\uff0c\u60a8\u4e0d\u9700\u8981\u5230\u6bcf\u4e00\u53f0\u7535\u8111\u4e0a\u8fd0\u884c\u811a\u672c\u3002\u53ea\u8981\u5c06\u65b0\u7535\u8111\u52a0\u5165\u57df\uff0c\u5e76\u653e\u5165\u5bf9\u5e94\u7684\u7ec4\u7ec7\u5355\u4f4d\uff08OU\uff09\uff0c\u7ec4\u7b56\u7565\u5c31\u4f1a\u81ea\u52a8\u3001\u5f3a\u5236\u5730\u5c06\u8fdc\u7a0b\u7ef4\u62a4\u901a\u9053\u5b89\u5168\u5730\u6253\u5f00\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. \u81ea\u52a8\u4e0b\u53d1\u6ce8\u518c\u8868\u7b56\u7565\uff08\u89e3\u51b3 UAC \u4ee4\u724c\u4e0e\u9ed8\u8ba4\u5171\u4eab\u75db\u70b9\uff09<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u6253\u5f00\u57df\u63a7\u4e0a\u7684 <strong>\u7ec4\u7b56\u7565\u7ba1\u7406<\/strong> (<code>gpmc.msc<\/code>)\u3002<\/li>\n\n\n\n<li>\u53f3\u952e\u76ee\u6807 OU\uff0c\u9009\u62e9 <strong>\u201c\u5728\u6b64\u57df\u4e2d\u521b\u5efa GPO \u5e76\u5728\u6b64\u5904\u94fe\u63a5\u201d<\/strong>\uff0c\u547d\u540d\u4e3a <code>IT-RemoteManagement-Policy<\/code>\u3002<\/li>\n\n\n\n<li>\u53f3\u952e\u8be5 GPO \u70b9\u51fb <strong>\u7f16\u8f91<\/strong>\uff0c\u5b9a\u4f4d\u5230\uff1a<br><code>\u8ba1\u7b97\u673a\u914d\u7f6e<\/code> -> <code>\u9996\u9009\u9879<\/code> -> <code>Windows \u8bbe\u7f6e<\/code> -> <code>\u6ce8\u518c\u8868<\/code>\u3002<\/li>\n\n\n\n<li><strong>\u65b0\u5efa\u6ce8\u518c\u8868\u9879 1\uff08\u89e3\u51b3\u8fdc\u7a0b UAC\uff09<\/strong>\uff1a\n<ul class=\"wp-block-list\">\n<li><strong>\u64cd\u4f5c<\/strong>\uff1a\u66f4\u65b0<\/li>\n\n\n\n<li><strong>\u8702\u5de2<\/strong>\uff1a<code>HKEY_LOCAL_MACHINE<\/code><\/li>\n\n\n\n<li><strong>\u952e\u8def\u5f84<\/strong>\uff1a<code>SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System<\/code><\/li>\n\n\n\n<li><strong>\u503c\u540d\u79f0<\/strong>\uff1a<code>LocalAccountTokenFilterPolicy<\/code><\/li>\n\n\n\n<li><strong>\u503c\u7c7b\u578b<\/strong>\uff1a<code>REG_DWORD<\/code><\/li>\n\n\n\n<li><strong>\u503c\u6570\u636e<\/strong>\uff1a<code>1<\/code><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>\u65b0\u5efa\u6ce8\u518c\u8868\u9879 2\uff08\u786e\u4fdd\u9ed8\u8ba4\u5171\u4eab\u5f00\u542f\uff09<\/strong>\uff1a\n<ul class=\"wp-block-list\">\n<li><strong>\u64cd\u4f5c<\/strong>\uff1a\u66f4\u65b0<\/li>\n\n\n\n<li><strong>\u8702\u5de2<\/strong>\uff1a<code>HKEY_LOCAL_MACHINE<\/code><\/li>\n\n\n\n<li><strong>\u952e\u8def\u5f84<\/strong>\uff1a<code>SYSTEM\\CurrentControlSet\\Services\\LanmanServer\\Parameters<\/code><\/li>\n\n\n\n<li><strong>\u503c\u540d\u79f0<\/strong>\uff1a<code>AutoShareWks<\/code><\/li>\n\n\n\n<li><strong>\u503c\u7c7b\u578b<\/strong>\uff1a<code>REG_DWORD<\/code><\/li>\n\n\n\n<li><strong>\u503c\u6570\u636e<\/strong>\uff1a<code>1<\/code><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">2. \u6279\u91cf\u5f00\u542f WinRM (PowerShell \u8fdc\u7a0b\u7ba1\u7406)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u540c\u4e00\u4e2a GPO \u7f16\u8f91\u5668\u4e2d\uff1a<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u5b9a\u4f4d\u5230\uff1a<code>\u8ba1\u7b97\u673a\u914d\u7f6e<\/code> -> <code>\u7b56\u7565<\/code> -> <code>\u7ba1\u7406\u6a21\u677f<\/code> -> <code>Windows \u7ec4\u4ef6<\/code> -> <code>Windows \u8fdc\u7a0b\u7ba1\u7406(WinRM)<\/code> -> <code>WinRM \u670d\u52a1\u5668<\/code>\u3002<\/li>\n\n\n\n<li>\u53cc\u51fb <strong>\u201c\u5141\u8bb8\u901a\u8fc7 WinRM \u8fdb\u884c\u8fdc\u7a0b\u670d\u52a1\u5668\u7ba1\u7406\u201d<\/strong>\uff0c\u8bbe\u7f6e\u4e3a <strong>\u5df2\u542f\u7528<\/strong>\u3002<\/li>\n\n\n\n<li>\u5728 IPv4 \u548c IPv6 \u7b5b\u9009\u5668\u4e2d\u8f93\u5165 <code>*<\/code>\uff08\u6216\u8f93\u5165\u60a8\u7279\u5b9a\u7684 IT \u8fd0\u7ef4\u7f51\u6bb5\uff0c\u5982 <code>192.168.1.0\/24<\/code> \u6765\u505a\u7b2c\u4e00\u5c42\u8fc7\u6ee4\uff09\u3002<\/li>\n\n\n\n<li><strong>\u8bbe\u7f6e\u670d\u52a1\u5f00\u673a\u81ea\u542f<\/strong>\uff1a\u5b9a\u4f4d\u5230 <code>\u8ba1\u7b97\u673a\u914d\u7f6e<\/code> -> <code>\u7b56\u7565<\/code> -> <code>Windows \u8bbe\u7f6e<\/code> -> <code>\u5b89\u5168\u8bbe\u7f6e<\/code> -> <code>\u7cfb\u7edf\u670d\u52a1<\/code>\u3002\u627e\u5230 <code>Windows Remote Management (WS-Management)<\/code>\uff0c\u5c06\u5176\u542f\u52a8\u6a21\u5f0f\u914d\u7f6e\u4e3a <strong>\u81ea\u52a8<\/strong>\u3002<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">3. \u9ad8\u7ea7\u9632\u706b\u5899\u7b56\u7565\uff08\u7cbe\u51c6\u9650\u5236 IT \u8fd0\u7ef4\u6e90 IP\uff09<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e3a\u4e86\u9632\u6b62\u5c40\u57df\u7f51\u5185\u7684\u6728\u9a6c\u6a2a\u5411\u79fb\u52a8\uff0c\u5229\u7528 GPO \u7684\u9632\u706b\u5899\u89c4\u5219\u9501\u5b9a\u53ea\u6709 IT \u529e\u516c\u5ba4\u80fd\u591f\u8fdc\u7a0b\u8fde\u63a5\uff1a<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u5b9a\u4f4d\u5230\uff1a<code>\u8ba1\u7b97\u673a\u914d\u7f6e<\/code> -> <code>\u7b56\u7565<\/code> -> <code>Windows \u8bbe\u7f6e<\/code> -> <code>\u5b89\u5168\u8bbe\u7f6e<\/code> -> <code>\u5177\u6709\u9ad8\u7ea7\u5b89\u5168\u6027\u7684 Windows \u9632\u706b\u5899<\/code>\u3002<\/li>\n\n\n\n<li>\u53f3\u952e <strong>\u5165\u7ad9\u89c4\u5219<\/strong> -> <strong>\u65b0\u5efa\u89c4\u5219<\/strong> -> \u9009\u62e9 <strong>\u9884\u5b9a\u4e49<\/strong>\uff1a\n<ul class=\"wp-block-list\">\n<li>\u5206\u522b\u521b\u5efa\uff1a<strong>\u8fdc\u7a0b\u684c\u9762<\/strong>\u3001<strong>\u6587\u4ef6\u548c\u6253\u5370\u673a\u5171\u4eab<\/strong>\u3001<strong>Windows \u8fdc\u7a0b\u7ba1\u7406<\/strong>\u3002<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>\u89c4\u5219\u521b\u5efa\u5b8c\u6210\u540e\uff0c\u53cc\u51fb\u6253\u5f00\u8be5\u89c4\u5219\uff0c\u5207\u6362\u5230 <strong>\u4f5c\u7528\u57df<\/strong> \u9009\u9879\u5361\u3002<\/li>\n\n\n\n<li>\u5728 <strong>\u8fdc\u7a0b IP \u5730\u5740<\/strong> \u4e2d\uff0c\u9009\u62e9 \u201c\u4e0b\u5217 IP \u5730\u5740\u201d\uff0c\u6dfb\u52a0 <strong>IT \u8fd0\u7ef4\u7684\u4e13\u5c5e\u7f51\u6bb5\u6216\u56fa\u5b9a IP<\/strong>\uff08\u4f8b\u5982 <code>192.168.10.0\/24<\/code>\uff09\u3002<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\u7b2c\u4e8c\u90e8\u5206\uff1a\u65e0\u57df\uff08\u5de5\u4f5c\u7ec4\uff09\u73af\u5883\u4e0b\u7684\u955c\u50cf\u5c01\u88c5\uff08Sysprep\uff09\u4f18\u5316<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u975e\u57df\u73af\u5883\u4e2d\uff0c\u6700\u5b8c\u7f8e\u7684\u529e\u6cd5\u662f\u5728\u4f7f\u7528 <strong>Sysprep<\/strong> \u5c01\u88c5 Windows \u955c\u50cf\uff08\u5236\u4f5c WIM\/ISO \u955c\u50cf\uff09\u4e4b\u524d\uff0c\u5c06\u7b56\u7565\u548c\u65e0\u4eba\u503c\u5b88\u811a\u672c\uff08<code>unattend.xml<\/code>\uff09\u76f4\u63a5\u6ce8\u5165\u7cfb\u7edf\u4e2d\uff0c\u786e\u4fdd\u65b0\u673a\u88c5\u5b8c\u7cfb\u7edf\u5c31\u5df2\u7ecf\u5177\u5907\u8fdc\u7a0b\u7ef4\u62a4\u80fd\u529b\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. \u955c\u50cf\u5c01\u88c5\u524d\uff08Audit Mode \u5ba1\u8ba1\u6a21\u5f0f\uff09\u7684\u914d\u7f6e\u5efa\u8bae<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u7cfb\u7edf\u5b89\u88c5\u5230 OOBE \u754c\u9762\uff08\u9009\u62e9\u8bed\u8a00\u754c\u9762\uff09\u65f6\uff0c\u6309\u4e0b <code>Ctrl + Shift + F3<\/code> \u8fdb\u5165<strong>\u5ba1\u8ba1\u6a21\u5f0f<\/strong>\u3002\u5728\u6b64\u72b6\u6001\u4e0b\u8fdb\u884c\u4ee5\u4e0b\u4f18\u5316\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u6267\u884c\u4e00\u952e\u5408\u89c4\u811a\u672c<\/strong>\uff1a\u4ee5\u7ba1\u7406\u5458\u8eab\u4efd\u8fd0\u884c\u60a8\u4e4b\u524d\u4fdd\u5b58\u7684 <code>.bat<\/code> \u521d\u59cb\u5316\u811a\u672c\uff0c\u786e\u4fdd <code>LocalAccountTokenFilterPolicy<\/code>\u3001<code>AutoShareWks<\/code> \u548c <code>WinRM<\/code> \u670d\u52a1\u5168\u90e8\u914d\u7f6e\u5230\u4f4d\u3002<\/li>\n\n\n\n<li><strong>\u7edf\u4e00\u521b\u5efa IT \u672c\u5730\u7ba1\u7406\u5458\u8d26\u53f7<\/strong>\uff1a\u521b\u5efa\u4e00\u4e2a\u4e13\u95e8\u7528\u4e8e\u8fdc\u7a0b\u8fd0\u7ef4\u7684\u672c\u5730\u8d26\u6237\uff08\u5982 <code>itroot<\/code>\uff09\uff0c\u8d4b\u4e88 Administrators \u7ec4\u6743\u9650\u3002<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">2. \u7f16\u5199 <code>unattend.xml<\/code> \u65e0\u4eba\u503c\u5b88\u5e94\u7b54\u6587\u4ef6\uff08\u7ec8\u6781\u81ea\u52a8\u5316\uff09<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sysprep \u5728\u5c01\u5305\u65f6\u4f1a\u6e05\u9664\u5f88\u591a\u4e2a\u6027\u5316\u8bbe\u7f6e\u3002\u4e3a\u4e86\u4fdd\u8bc1\u7cfb\u7edf\u90e8\u7f72\uff08OOBE\uff09\u5b8c\u6210\u540e\uff0c\u8fdc\u7a0b\u901a\u9053\u4f9d\u7136\u5b8c\u597d\u5e76\u81ea\u52a8\u653e\u884c\uff0c\u9700\u8981\u5229\u7528 <code>unattend.xml<\/code> \u5728\u7cfb\u7edf\u9996\u6b21\u767b\u5f55\u65f6\u81ea\u52a8\u6267\u884c\u547d\u4ee4\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u5e94\u7b54\u6587\u4ef6\u7684 <code>oobeSystem<\/code> \u9636\u6bb5\uff08<code>Microsoft-Windows-Shell-Setup<\/code> \u6a21\u5757\u4e0b\uff09\uff0c\u6dfb\u52a0 <code>FirstLogonCommands<\/code>\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">xml<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;FirstLogonCommands&gt;\n    &lt;!-- 1. \u786e\u4fdd\u6bcf\u6b21\u90e8\u7f72\u5b8c\u90fd\u5f3a\u5236\u5199\u5165\u8fdc\u7a0bUAC\u8c41\u514d\u6ce8\u518c\u8868 --&gt;\n    &lt;SynchronousCommand wcm:action=\"add\"&gt;\n        &lt;Order&gt;1&lt;\/Order&gt;\n        &lt;CommandLine&gt;reg add \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\" \/v LocalAccountTokenFilterPolicy \/t REG_DWORD \/d 1 \/f&lt;\/CommandLine&gt;\n        &lt;Description&gt;Enable Remote UAC&lt;\/Description&gt;\n    &lt;\/SynchronousCommand&gt;\n    \n    &lt;!-- 2. \u5f3a\u5236\u5f00\u542f WinRM \u8fdc\u7a0b\u7ba1\u9053 --&gt;\n    &lt;SynchronousCommand wcm:action=\"add\"&gt;\n        &lt;Order&gt;2&lt;\/Order&gt;\n        &lt;CommandLine&gt;powershell.exe -Command \"Enable-PSRemoting -Force\"&lt;\/CommandLine&gt;\n        &lt;Description&gt;Enable WinRM&lt;\/Description&gt;\n    &lt;\/SynchronousCommand&gt;\n\n    &lt;!-- 3. \u914d\u7f6e\u9632\u706b\u5899\uff1a\u9650\u5236\u8fdc\u7a0b\u684c\u9762\u4ec5\u5141\u8bb8IT\u7f51\u6bb5 --&gt;\n    &lt;SynchronousCommand wcm:action=\"add\"&gt;\n        &lt;Order&gt;3&lt;\/Order&gt;\n        &lt;CommandLine&gt;powershell.exe -Command \"Set-NetFirewallRule -DisplayGroup '\u8fdc\u7a0b\u684c\u9762' -RemoteAddress '192.168.1.0\/24' -Enabled True\"&lt;\/CommandLine&gt;\n        &lt;Description&gt;Secure RDP Firewall&lt;\/Description&gt;\n    &lt;\/SynchronousCommand&gt;\n&lt;\/FirstLogonCommands&gt;\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u8bf7\u8c28\u614e\u4f7f\u7528\u6b64\u7c7b\u4ee3\u7801\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">3. \u6267\u884c\u5c01\u88c5<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u51c6\u5907\u5c31\u7eea\u540e\uff0c\u5728 <code>C:\\Windows\\System32\\Sysprep<\/code> \u76ee\u5f55\u4e0b\uff0c\u4f7f\u7528\u547d\u4ee4\u884c\u6267\u884c\u5c01\u88c5\uff08\u5f15\u5165\u5e94\u7b54\u6587\u4ef6\uff09\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">cmd<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sysprep.exe \/generalize \/oobe \/shutdown \/unattend:D:\\unattend.xml\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u8bf7\u8c28\u614e\u4f7f\u7528\u6b64\u7c7b\u4ee3\u7801\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83d\udcc8 \u603b\u7ed3\u4e0e\u6f14\u8fdb\u5efa\u8bae<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u57df\u73af\u5883<\/strong> \u9760 <strong>GPO \u8054\u52a8\u9ad8\u7ea7\u9632\u706b\u5899\u4f5c\u7528\u57df<\/strong>\uff0c\u65e2\u80fd\u5b9e\u73b0\u65e0\u6b7b\u89d2\u6279\u91cf\u63a7\u5236\uff0c\u53c8\u80fd\u9632\u6b62\u9ed1\u5ba2\u5229\u7528 445\/5985 \u7aef\u53e3\u5728\u5185\u7f51\u6a2a\u5411\u6269\u6563\u3002<\/li>\n\n\n\n<li><strong>\u5de5\u4f5c\u7ec4\u73af\u5883<\/strong> \u9760 <strong>Sysprep \u6ce8\u5165 <code>FirstLogonCommands<\/code><\/strong>\uff0c\u5b9e\u73b0\u65b0\u673a\u5f00\u7bb1\u5373\u7528\uff0c\u907f\u514d\u4e86\u201c\u6539\u8ba1\u7b97\u673a\u540d\u540e\u8fde\u63a5\u4e2d\u65ad\u3001\u8d26\u53f7\u88ab\u4ee4\u724c\u964d\u7ea7\u201d\u7684\u6b7b\u5faa\u73af\u3002<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\u5728\u4f01\u4e1a\u6216\u5c40\u57df\u7f51\u73af\u5883\u4e2d\uff0c\u4e3a\u4e86\u8ba9\u540e\u7eed\u7684\u8fdc\u7a0b\u7ef4\u62a4\uff08\u5982 PsExec\u3001PowerShell \u8fdc\u7a0b\u7ba1\u7406\u3001WMI \u90e8\u7f72\uff09\u7545<br \/><a class=\"moretag\" href=\"https:\/\/www.x4s.cn\/?p=1157\">+ Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":1151,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1157","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-it"],"_links":{"self":[{"href":"https:\/\/www.x4s.cn\/index.php?rest_route=\/wp\/v2\/posts\/1157","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.x4s.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.x4s.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.x4s.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.x4s.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1157"}],"version-history":[{"count":2,"href":"https:\/\/www.x4s.cn\/index.php?rest_route=\/wp\/v2\/posts\/1157\/revisions"}],"predecessor-version":[{"id":1159,"href":"https:\/\/www.x4s.cn\/index.php?rest_route=\/wp\/v2\/posts\/1157\/revisions\/1159"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.x4s.cn\/index.php?rest_route=\/wp\/v2\/media\/1151"}],"wp:attachment":[{"href":"https:\/\/www.x4s.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1157"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.x4s.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1157"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.x4s.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1157"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}