суббота, 29 февраля 2020 г.

Очистка временных файлов, powershell

Когда сроки выполнения задачи 3-5 минут.

Remove-Item "$env:USERPROFILE\appdata\roaming\1C\Файлы\УправлениеТорговлей\*" -force -recurse
Remove-Item "$env:USERPROFILE\appdata\local\1C\1cv8\*" -force -recurse
Remove-Item "$env:temp\*" -force -recurse

среда, 19 февраля 2020 г.

Kaspersky Endpoint. Kavremover. Local users and groups = error loading type library dll

Использование kavremover актуальной версии приводит к тому, что локальные пользователи и группы более невозможно открыть через mmc.

Что помогло:

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\TypeLib\{97d25db0-0363-11cf-abc4-02608c9e7553}]

[HKEY_CLASSES_ROOT\TypeLib\{97d25db0-0363-11cf-abc4-02608c9e7553}\1.0]

@="Active DS Type Library"

[HKEY_CLASSES_ROOT\TypeLib\{97d25db0-0363-11cf-abc4-02608c9e7553}\1.0\0]

[HKEY_CLASSES_ROOT\TypeLib\{97d25db0-0363-11cf-abc4-02608c9e7553}\1.0\0\win32]

@="C:\\WINDOWS\\System32\\activeds.tlb"

[HKEY_CLASSES_ROOT\TypeLib\{97d25db0-0363-11cf-abc4-02608c9e7553}\1.0\FLAGS]

@="0"

[HKEY_CLASSES_ROOT\TypeLib\{97d25db0-0363-11cf-abc4-02608c9e7553}\1.0\HELPDIR]

@="C:\\WINDOWS\\System32"

Спасибо:
http://forum.oszone.net/thread-134442.html
https://forum.kasperskyclub.ru/index.php?showtopic=64552
https://community.kaspersky.com/produkty-kaspersky-dlya-biznesa-31/ne-udalyaetsya-kes-11-shtatnym-instrumentom-posle-ispolzovaniya-kavremvr-ne-dostupna-osnastka-local-user-and-groups-6821

суббота, 15 февраля 2020 г.

IPsec between pfSense and Kerio Control

Kerio Control side:
Passive.
Type:IPsec.
Preshared key: pfsense random key.
Local ID: Kerio Control external IP address.
Remote ID: pfSense external IP address.
Phase 1: 3des-sha1-modp1536 - change to more stronger and repeat with pfSense.
Phase 2: aes128-sha1 - change to more stronger and repeat with pfSense.
Remote networks: pfSense local networks.
Local networks: Kerio Control local networks.
Confirure traffic policy.

pfSense side:
Phase1:
Key Exchange version: IKEv1.
Internet Protocol: IPv4.
Interface: WAN.
Remote Gateway: Kerio Connect external IP address.
Authentication Method: Mutural PSK.
Negotiation mode: Main.
My identifier: My IP address.
Peer identifier: My IP address.
Pre-Shared Key: generate random Key.
Encryption Algoritm: 3DES - SHA1 - 5(1536 bit) - select more stronger, like in Kerio Control.
Lifetime (Seconds): 10800.
Disable rekey:No.
Margintime: Empty.
Responder Only: empty (if Kerio will active, select this checkbox).
NAT Traversal: Auto.
Dead Peer Detection: No.
Phase2:
Mode: Tunnel IPv4.
Local Network: Address/Subnet за pfSense.
NAT/BINAT translation: None.
Remote Network: Network/Address за Kerio Control.
Protocol: ESP
Encryption Algoritms: AES128 - SHA1 - select more stronger, like in Kerio Control.
PFSkey group: Off.
Lifetime: 3600.
Automatically ping host: IP address behind Kerio, if needed.
Status - IPsec - Connect.
Configure NAT (if manual) and firewall (if needed).