æ³åããŠã¿ãŠãã ãããèªå®
ããè·å Žã®PCã«æ¥ç¶ããããšãããšãããçªç¶ãWindows 11ãã·ã³ã«ãã€ãããªã¢ãŒããã¹ã¯ãããã²ãŒããŠã§ã€ãšã©ãŒã衚瀺ãããã¢ã¯ã»ã¹ããããã¯ãããŠããŸããŸããã€ã©ã€ã©ããŸãããïŒð© ãå¿é
ãªããWindows 11ãªã¢ãŒããã¹ã¯ãããã§ãããããã®åé¡ã¯ãå€ãã®å Žåãããã€ãã®é©åãªæé ã§è§£æ±ºã§ããŸãããã®ã¬ã€ãã§ã¯ããªã¢ãŒããã¹ã¯ãããã²ãŒããŠã§ã€ãšã©ãŒã®ãã©ãã«ã·ã¥ãŒãã£ã³ã°ãå¹ççã«é²ããæéããããã«å¶åŸ¡ãåãæ»ããæ¥ç¶ã§ããããã«ãæäŒãããŸãããããæ©éå§ããŸãããïŒ
Windows 11 ã®ãªã¢ãŒã ãã¹ã¯ããã ã²ãŒããŠã§ã€ ãšã©ãŒãšã¯äœã§ãã?
ãªã¢ãŒããã¹ã¯ãããã²ãŒããŠã§ã€ãšã©ãŒã¯ãéåžžããªã¢ãŒããã¹ã¯ããããããã³ã«ïŒRDPïŒã䜿çšããŠã²ãŒããŠã§ã€ãµãŒããŒçµç±ã§ãªã¢ãŒããã·ã³ã«æ¥ç¶ããéã«çºçããŸãããã®ãšã©ãŒïŒå€ãã®å Žåã0x3000064ãªã©ã®ã³ãŒãã§è¡šç€ºãããŸãïŒã¯ãèªèšŒå€±æããããã¯ãŒã¯ãããã¯ãæ§æãã¹ãªã©ã®åé¡ã瀺ããŠããŸããWindows 11ã§ã¯ãTLSèŠä»¶ã®å³æ Œåããã¡ã€ã¢ãŠã©ãŒã«ã«ãŒã«ã®æŽæ°ãªã©ãã»ãã¥ãªãã£æ©èœã匷åãããŠããããããã®ãšã©ãŒãããé »ç¹ã«çºçããããã«ãªã£ãŠããŸãã
ããããçç¶ãšããŠã¯ãæ¥ç¶ã¿ã€ã ã¢ãŠãããæ¥ç¶ããããšããŠãããªã¢ãŒãã³ã³ãã¥ãŒã¿ã«ã¯ãããã¯ãŒã¯ã¬ãã«èªèšŒïŒNLAïŒãå¿
èŠã§ãããšããã¡ãã»ãŒãžãã²ãŒããŠã§ã€ããã®å®å
šãªæåŠãªã©ããããŸãããã®ãããªçç¶ã衚瀺ãããå Žåãéåžžã¯ã·ã¹ãã é害ã§ã¯ãªããèšå®ã調æŽããããšã§è§£æ±ºã§ããŸããä»åŸã®ä¿®æ£æ¹æ³ã¯ç°¡åã§å¹æçã§ãã®ã§ããã®ãŸãŸèªã¿é²ããŠãã ãããâ
Windows 11 ãªã¢ãŒã ãã¹ã¯ããã ã²ãŒããŠã§ã€ ãšã©ãŒã®ãã©ãã«ã·ã¥ãŒãã£ã³ã°æé
ãŸãã¯åºæ¬çãªåé¡ããå§ããŠãé«åºŠãªåé¡è§£æ±ºãžãšãšã¹ã«ã¬ãŒã·ã§ã³ãé²ããŠãããŸããæè¯ã®çµæãåŸãã«ã¯ã以äžã®æé ã«åŸã£ãŠãã ããããã³ãïŒå€§ããªå€æŽãå ãããã³ã«PCãåèµ·åããŠæ¥ç¶ããã¹ãããŠãã ãããæºåã¯ããã§ããïŒãã©ãã«ã·ã¥ãŒãã£ã³ã°ãå§ããŸãããïŒ
1ïžâ£ ãããã¯ãŒã¯æ¥ç¶ãšãã¡ã€ã¢ãŠã©ãŒã«ã®èšå®ã確èªãã
ãªã¢ãŒããã¹ã¯ãããã²ãŒããŠã§ã€ãšã©ãŒã¯ãå€ãã®å Žåããããã¯ãŒã¯ã®äžå
·åãåå ã§ããå®å®ããWi-FiãŸãã¯ã€ãŒãµãããæ¥ç¶ããå©çšãã ãããWindows 11ã§ã¯ããèšå®ã>ããããã¯ãŒã¯ãšã€ã³ã¿ãŒãããã>ãç¶æ
ãã«ç§»åãããã©ãã«ã·ã¥ãŒãã£ã³ã°ããŒã«ãå®è¡ããŠãã ããã
次ã«ããã¡ã€ã¢ãŠã©ãŒã«ã®ãããã¯ãäž»ãªåå ãšèããããŸããWindows Defenderãã¡ã€ã¢ãŠã©ãŒã«ãRDPãã©ãã£ãã¯ïŒRDPã®å Žåã¯ããŒã3389ãã²ãŒããŠã§ã€HTTPSã®å Žåã¯ããŒã443ïŒãå¶éããŠããå¯èœæ§ããããŸããä¿®æ£ããã«ã¯ã以äžã®æé ãå®è¡ããŠãã ããã
- Windows ã»ãã¥ãªãã£ãéããŸã (ã¹ã¿ãŒã ã¡ãã¥ãŒã§æ€çŽ¢)ã
- ããã¡ã€ã¢ãŠã©ãŒã«ãšãããã¯ãŒã¯ä¿è·ãã«ç§»åããŸãã
- ããã¡ã€ã¢ãŠã©ãŒã«ãä»ããã¢ããªã®èš±å¯ããã¯ãªãã¯ãããã©ã€ããŒã ãããã¯ãŒã¯ãšãããªã㯠ãããã¯ãŒã¯ã®äž¡æ¹ã§ããªã¢ãŒã ãã¹ã¯ããããããã§ãã¯ãããŠããããšã確èªããŸãã
NortonãMcAfeeãªã©ã®ãµãŒãããŒãã£è£œãã¡ã€ã¢ãŠã©ãŒã«ããå©çšã®å Žåã¯ãäžæçã«ç¡å¹ã«ããŠãã¹ãããŠãã ãããäŒæ¥ç°å¢ã§ã¯ãVPNèŠä»¶ã«ã€ããŠIT管çè
ã«ã確èªãã ãããå€ãã®ãªã¢ãŒããã¹ã¯ãããã²ãŒããŠã§ã€ãšã©ãŒã¯ãäŒæ¥VPNã«æ¥ç¶ãããšè§£æ¶ãããŸããèªä¿¡ãã€ããŸãããïŒãããç¶ããŸãããïŒð
2ïžâ£ãªã¢ãŒããã¹ã¯ãããã®è³æ Œæ
å ±ãšæš©éã確èªãã
ãããã®ãšã©ãŒã®çŽ40%ã¯èªèšŒã®äžäžèŽãåå ã§ãããŠãŒã¶ãŒåããã¹ã¯ãŒãããã¡ã€ã³ãå確èªããŠãã ããããªã¢ãŒããã¹ã¯ãããæ¥ç¶ã¢ããªã§ïŒ
- å®å
šãªè³æ Œæ
å ±ãå
¥åããŸã (äŸ: DOMAIN\username)ã
- ã詳现èšå®ãã¿ãã§ãããããã® RD ã²ãŒããŠã§ã€ ãµãŒããŒèšå®ã䜿çšããããã²ãŒããŠã§ã€ ãµãŒããŒã®ååãŸã㯠IP ã§æ£ããæ§æãããŠããããšã確èªããŸãã
- 該åœããå Žåã¯ãããªã¢ãŒã ã³ã³ãã¥ãŒã¿ãŒã« RD ã²ãŒããŠã§ã€ã®è³æ Œæ
å ±ã䜿çšãããã«ãã§ãã¯ãå
¥ããŸãã
察象ãã·ã³ïŒã¢ã¯ã»ã¹ã§ããå ŽåïŒã§ããªã¢ãŒããã¹ã¯ããããæå¹ã«ãªã£ãŠããããšã確èªããŠãã ããããèšå®ã>ãã·ã¹ãã ã>ããªã¢ãŒããã¹ã¯ãããã>ããªã¢ãŒããã¹ã¯ããããæå¹ã«ãããããŸãããã³ã³ãã¥ãŒã¿ãŒã®ç®¡çãã§ããŠãŒã¶ãŒã¢ã«ãŠã³ããããªã¢ãŒããã¹ã¯ããããŠãŒã¶ãŒãã°ã«ãŒãã«å±ããŠããããšã確èªããŠãã ããããã®æé ã ãã§ãWindows 11ã®ãªã¢ãŒããã¹ã¯ãããã²ãŒããŠã§ã€ãšã©ãŒã®å€ãã解決ã§ããŸãããã€ã¿ããïŒâ
3ïžâ£ Windows 11 ãšãªã¢ãŒã ãã¹ã¯ããã ã³ã³ããŒãã³ããæŽæ°ãã
å€ããœãããŠã§ã¢ã¯ãæãã¬ãšããã§æªè³ªãªæ»æè
ã«ãªããããŸãããWindows 11ã®ææ°ã¢ããããŒãã§ã¯ãRDPã®è匱æ§ãé »ç¹ã«ä¿®æ£ãããŠããŸãããèšå®ã>ãWindows Updateã>ãæŽæ°ããã°ã©ã ã®ç¢ºèªãã«ç§»åããå©çšå¯èœãªæŽæ°ããã°ã©ã ããã¹ãŠã€ã³ã¹ããŒã«ããŠãã ãããã²ãŒããŠã§ã€ã®æ©èœã«åœ±é¿ãäžããããã.NET Frameworkã®ãªãã·ã§ã³ã®æŽæ°ããã°ã©ã ãšã»ãã¥ãªãã£ãããã«éç¹ã眮ããŸãããã
ãªã¢ãŒããã¹ã¯ãããã¢ããªã¯ãMicrosoft Storeããã¢ããããŒãããŠãã ãããããªã¢ãŒããã¹ã¯ãããããæ€çŽ¢ãããã¢ããããŒãããã¯ãªãã¯ããŠãã ãããWebã¯ã©ã€ã¢ã³ãããå©çšã®å Žåã¯ããã©ãŠã¶ïŒEdgeãŸãã¯ChromeïŒãææ°çã§ããããšã確èªããŠãã ããããããã®ã¢ããããŒãã«ãããæè¿ã®Windows 11ãã«ãã§çºçããŠããã²ãŒããŠã§ã€ãšã©ãŒãä¿®æ£ãããŠããŸããåžžã«ææ°ã®ç¶æ
ã«ä¿ã£ãŠãã ããïŒð
4ïžâ£ ã°ã«ãŒãããªã·ãŒãšã¬ãžã¹ããªèšå®ã調æŽãã
ããæ·±å»ãªåé¡ã®å Žåã¯ãããªã·ãŒã調æŽããŠãã ãããæ³šïŒãŸãã¬ãžã¹ããªãããã¯ã¢ããããŠãã ããïŒãregeditããæ€çŽ¢ > ãã¡ã€ã« > ãšã¯ã¹ããŒãïŒãProãšãã£ã·ã§ã³ããå©çšã®å Žåã¯ãã°ã«ãŒãããªã·ãŒãšãã£ã¿ãŒïŒgpedit.mscïŒãéããŸãã
- [ã³ã³ãã¥ãŒã¿ãŒã®æ§æ] > [管ççšãã³ãã¬ãŒã] > [Windows ã³ã³ããŒãã³ã] > [ãªã¢ãŒã ãã¹ã¯ããã ãµãŒãã¹] > [ãªã¢ãŒã ãã¹ã¯ããã ã»ãã·ã§ã³ ãã¹ã] > [ã»ãã¥ãªãã£] ã«ç§»åããŸãã
- ããããã¯ãŒã¯ ã¬ãã«èªèšŒã䜿çšããŠãªã¢ãŒãæ¥ç¶ã«ãŠãŒã¶ãŒèªèšŒãèŠæ±ããããç¡å¹ã«èšå®ããŸã (æ
éã«ãã¹ãããŠãã ãã)ã
- ããªã¢ãŒã ãã¹ã¯ããã ã²ãŒããŠã§ã€ãã§ãããªã·ãŒãæ¥ç¶æ¹æ³ãèš±å¯ããŠããããšã確èªããŸãã
ã¬ãžã¹ã㪠ãšãã£ã¿ãŒã®å Žå:
| ããŒãã¹ |
èšå®ããå€ |
ç®ç |
| HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp |
ãŠãŒã¶ãŒèªèšŒ = 0 (DWORD) |
ãã¹ãçšã«NLAãç¡å¹ã«ãã |
| HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\ã¿ãŒããã«ãµãŒãã¹ |
fDenyTSConnections = 0 (DWORD) |
RDPæ¥ç¶ãæå¹ã«ãã |
ãªã¢ãŒããã¹ã¯ããããµãŒãã¹ãåèµ·åããŸããservices.msc ãå®è¡ããããªã¢ãŒããã¹ã¯ããããµãŒãã¹ããèŠã€ããŠåèµ·åããŠãã ããããã®æ¹æ³ã§ãæ°ãåããªãã»ã©å€ãã®ãŠãŒã¶ãŒããªã¢ãŒããã¹ã¯ãããã²ãŒããŠã§ã€ã®ãšã©ãŒããæãããŸãããããŸãããã°ãæåã§ãïŒð
5ïžâ£ é«åºŠãªä¿®æ£: èšŒææžãããŒãããµãŒããŒåŽã®ãã§ãã¯
åºæ¬çãªæé ã倱æããå Žåã¯ãèšŒææžã確èªããŠãã ããããªã¢ãŒããã¹ã¯ãããã²ãŒããŠã§ã€ã¯æå¹ãªSSL/TLSèšŒææžã«äŸåããŠããŸããRDã²ãŒããŠã§ã€ãããŒãžã£ãŒïŒç®¡çè
æš©éãããå ŽåïŒã§ããµãŒããŒèšŒææžã®æå¹æéãåããŠããªãããšã確èªããŠãã ãããå¿
èŠã«å¿ããŠãCAçµç±ã§èšŒææžãæŽæ°ããŠãã ããã
ããŒã転éã«åé¡ããããŸããïŒç®¡çè
ãšããŠã³ãã³ãããã³ãããèµ·åããnetstat -an | find "3389"ããŒã3389ããªãã¹ã³ããŠãããã©ããã確èªããŠãã ãããã«ã¹ã¿ã ããŒãã®å Žåã¯ãã¬ãžã¹ããªã®ãRDP-Tcp > PortNumberããç·šéããŠãã ããã
ãµãŒããŒåŽïŒã²ãŒããŠã§ã€ãµãŒããŒã§ãRDã²ãŒããŠã§ã€ã®åœ¹å²ãã€ã³ã¹ããŒã«ãããŠããããšã確èªããŠãã ããïŒãµãŒããŒãããŒãžã£ãŒ > 圹å²ã®è¿œå ïŒãã€ãã³ããã¥ãŒã¢ãŒïŒeventvwr.mscïŒã®ãã¢ããªã±ãŒã·ã§ã³ãšãµãŒãã¹ãã° > Microsoft > Windows > TerminalServicesãã§ãšã©ãŒã³ãŒãã確èªããŠãã ããã詳现ã«ã€ããŠã¯ãMicrosoftã®å
¬åŒããã¥ã¡ã³ããMicrosoft ãªã¢ãŒããã¹ã¯ãããã®ãã©ãã«ã·ã¥ãŒãã£ã³ã°ããã芧ãã ããã
ãŸã åé¡ã解決ããªãå Žåã¯ãå
èµã®ãã©ãã«ã·ã¥ãŒãã£ã³ã°ããŒã«ãå®è¡ããŠãã ããïŒèšå® > ã·ã¹ãã > ãã©ãã«ã·ã¥ãŒãã£ã³ã° > ãã®ä»ã®ãã©ãã«ã·ã¥ãŒãã£ã³ã° > ãªã¢ãŒããã¹ã¯ããããããã§Windows 11ã®ãªã¢ãŒããã¹ã¯ãããã²ãŒããŠã§ã€ãšã©ãŒãããã«è§£æ±ºããŸããð
Windows 11 ã§å°æ¥ã®ãªã¢ãŒã ãã¹ã¯ããã ã²ãŒããŠã§ã€ãšã©ãŒãé²ã
ä¿®æ£åŸã¯ãäºé²ãéµãšãªããŸããèªåã¢ããããŒããæå¹ã«ããå®å
šãªæ¥ç¶ã®ããã«åŒ·åãªVPNã䜿çšãããã¡ã€ã¢ãŠã©ãŒã«ã«ãŒã«ã宿çã«ç¢ºèªããŠãã ãããMicrosoftã®ãªã¢ãŒããã¹ã¯ãããWebã¢ã¯ã»ã¹ãªã©ã®ããŒã«ã掻çšããŠç®¡çã容æã«ããããšãæ€èšããŠãã ãããç©æ¥µçã«å¯Ÿçãè¬ããããšã§ããããã®ãšã©ãŒãåé¿ããåžžã«ã¹ã ãŒãºãªãªã¢ãŒãã»ãã·ã§ã³ãå®çŸã§ããŸãã
ããã§ã Windows 11 ã®ãªã¢ãŒã ãã¹ã¯ããã ã²ãŒããŠã§ã€ ãšã©ãŒã解決ããããã®å®å
šãªããŒããããã宿ããŸããããããã®æé ã詊ããŠãåé¡ã解決ããªãå Žåã¯ãMicrosoft ãµããŒããŸãã¯ãããã¯ãŒã¯ç®¡çè
ã«ãåãåãããã ãããããã§è§£æ±ºã§ãïŒæ¥ç¶ã楜ãã¿ãŸãããïŒð