{"id":121,"title":"Terminal Server (Remote Desktop Server) oturumu ba\u015flatt\u0131\u011f\u0131nda bu duvar ka\u011f\u0131d\u0131n\u0131n uygulanmamas\u0131","content":"Bu senaryoda hedefin, kullan\u0131c\u0131 kendi bilgisayar\u0131nda Active Directory (AD) \u00fczerinden uygulanan bir duvar ka\u011f\u0131d\u0131n\u0131 g\u00f6rmeye devam etmesi, ancak ayn\u0131 kullan\u0131c\u0131 bir Terminal Server (Remote Desktop Server)<\/strong> oturumu ba\u015flatt\u0131\u011f\u0131nda bu duvar ka\u011f\u0131d\u0131n\u0131n uygulanmamas\u0131<\/strong>. Bunu sa\u011flamak i\u00e7in a\u015fa\u011f\u0131daki y\u00f6ntemleri kullanabilirsin:

\u2705 1. GPO'yu OU (Organizational Unit) Bazl\u0131 Hedeflemek<\/h2> Y\u00f6ntem:<\/strong> Kullan\u0131c\u0131lar i\u00e7in uygulanan GPO\u2019yu sadece kendi bilgisayarlar\u0131n\u0131n bulundu\u011fu OU\u2019ya<\/strong> hedefleyerek, Terminal Server\u2019a uygulanmas\u0131n\u0131 engelle. Ad\u0131mlar:<\/strong>
  1. Kullan\u0131c\u0131lara duvar ka\u011f\u0131d\u0131 uygulayan mevcut GPO\u2019yu bul.<\/li>
  2. Bu GPO'nun Scope<\/code> k\u0131sm\u0131nda sadece kullan\u0131c\u0131lar\u0131n bilgisayarlar\u0131n\u0131n bulundu\u011fu OU<\/strong> hedeflendi\u011finden emin ol.<\/li>
  3. E\u011fer kullan\u0131c\u0131 Terminal Server\u2019da oturum a\u00e7\u0131yorsa ve bu GPO terminal server\u2019a da uygulan\u0131yorsa, bu GPO\u2019yu Terminal Server\u2019dan hari\u00e7 tut<\/strong>.<\/li> <\/ol>

    \u2705 2. GPO'da WMI Filter Kullanarak Bilgisayar T\u00fcr\u00fcne G\u00f6re Ay\u0131rma<\/h2> Y\u00f6ntem:<\/strong> GPO'ya bir WMI filter<\/strong> ekleyerek sadece belirli makinelerde uygulanmas\u0131n\u0131 sa\u011flayabilirsin. \u00d6rnek: Sadece Windows 10\/11 client makinelerde \u00e7al\u0131\u015fs\u0131n, serverlarda \u00e7al\u0131\u015fmas\u0131n.

    \u00d6rnek WMI Filter:<\/h3> 
    SELECT * FROM Win32_OperatingSystem WHERE ProductType = \"1\" <\/code><\/pre> A\u00e7\u0131klama:<\/strong> 
       
    • ProductType = 1<\/code> \u279c Client i\u015fletim sistemleri (Windows 10, 11 vb.)<\/li> 
    • ProductType = 2 veya 3<\/code> \u279c Server i\u015fletim sistemleri (Terminal Server dahil)<\/li> <\/ul> Nas\u0131l uygulan\u0131r:<\/strong> 
         
      1. Group Policy Management Console\u2019da (GPMC) WMI Filter sekmesine git.<\/li> 
      2. Yeni bir WMI Filter olu\u015ftur ve yukar\u0131daki sorguyu kullan.<\/li> 
      3. Duvar ka\u011f\u0131d\u0131 GPO\u2019suna bu filtreyi ba\u011fla.<\/li> <\/ol> 
         
        \u2705 3. Terminal Server i\u00e7in Ayr\u0131 GPO Ayar\u0131yla Duvar Ka\u011f\u0131d\u0131n\u0131 Kald\u0131rma<\/h2> Y\u00f6ntem:<\/strong> Terminal Server\u2019a \u00f6zel bir GPO olu\u015fturarak, duvar ka\u011f\u0131d\u0131n\u0131 engelle veya \u00fczerine yaz<\/strong>. Ad\u0131mlar:<\/strong> 
           
        1. Terminal Server\u2019\u0131n bulundu\u011fu OU\u2019ya \u00f6zel bir GPO olu\u015ftur.<\/li> 
        2. \u015eu ayarlar\u0131 yap\u0131land\u0131r:<\/li> <\/ol> 
          User Configuration \u2192 Administrative Templates \u2192 Desktop \u2192 Desktop \u2192 Desktop Wallpaper \u2192 Enabled, Path bo\u015f b\u0131rak\u0131labilir <\/code><\/pre> Veya: 
          User Configuration \u2192 Administrative Templates \u2192 Control Panel \u2192 Personalization \u2192 Prevent changing desktop background \u2192 Enabled <\/code><\/pre> Gerekirse: 
          Computer Configuration \u2192 Administrative Templates \u2192 System \u2192 Group Policy \u2192 Loopback Processing Mode \u2192 Enabled (Merge veya Replace olarak ayarla) <\/code><\/pre> 
           
          \u2733\ufe0f Not: Loopback Mode Kullan\u0131m\u0131<\/h2> E\u011fer kullan\u0131c\u0131 ayn\u0131 kullan\u0131c\u0131ysa ama farkl\u0131 bilgisayarlara oturum a\u00e7\u0131yorsa (\u00f6rne\u011fin bir client ve bir Terminal Server), Loopback Policy Processing<\/code> kullanmak faydal\u0131 olabilir. Yeri:<\/strong> 
          Computer Configuration \u2192 Administrative Templates \u2192 System \u2192 Group Policy \u2192 User Group Policy loopback processing mode \u2192 Enable <\/code><\/pre> 
             
          • Merge:<\/strong> Hem kullan\u0131c\u0131 hem bilgisayar ayarlar\u0131 birle\u015ftirilir, \u00e7ak\u0131\u015fmalarda bilgisayar ayarlar\u0131 bask\u0131n olabilir.<\/li> 
          • Replace:<\/strong> Kullan\u0131c\u0131ya, ba\u011fland\u0131\u011f\u0131 bilgisayar\u0131n GPO\u2019su uygulan\u0131r (kendi kullan\u0131c\u0131 GPO\u2019su de\u011fil).<\/li> <\/ul> 
             
            \u00d6zet:<\/h2> 
              
             Y\u00f6ntem<\/th> A\u00e7\u0131klama<\/th> <\/tr> <\/thead> 
             
             OU bazl\u0131 hedefleme<\/td> GPO sadece kullan\u0131c\u0131 bilgisayarlar\u0131n\u0131n oldu\u011fu OU\u2019ya uygulan\u0131r<\/td> <\/tr> 
             WMI Filter<\/td> GPO sadece client sistemlerde (ProductType=1) \u00e7al\u0131\u015f\u0131r<\/td> <\/tr> 
             Terminal Server i\u00e7in GPO<\/td> Server \u00fczerinde duvar ka\u011f\u0131d\u0131 uygulanmaz veya \u00fczerine yaz\u0131l\u0131r<\/td> <\/tr> 
             Loopback Processing<\/td> Kullan\u0131c\u0131 oturum a\u00e7t\u0131\u011f\u0131 bilgisayara g\u00f6re GPO al\u0131r<\/td> <\/tr> <\/tbody> <\/table> 
              ","excerpt":"Bu senaryoda hedefin, kullan\u0131c\u0131 kendi bilgisayar\u0131nda Active Directory (AD) \u00fczerinden uygulanan bir duvar ka\u011f\u0131d\u0131n\u0131 g\u00f6rmeye devam etmesi,...","created_at":"2025-04-14 00:40:17","updated_at":"2026-09-23 11:17:35","category_id":6,"view_count":675,"reading_time":3,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-14 00:40:17","featured_image":"resimyok.jpg","slug":"terminal-server-remote-desktop-server-oturumu-baslattiginda-bu-duvar-kagidinin-uygulanmamasi","category_name":"Sistem","category_slug":"sistem"}