{"id":208533,"date":"2024-01-18T14:32:34","date_gmt":"2024-01-18T14:32:34","guid":{"rendered":"https:\/\/www.ninjaone.com\/script-hub\/automatisches-sperren-von-windows-nach-inaktivitaet-mit-powershell\/"},"modified":"2024-03-04T18:46:16","modified_gmt":"2024-03-04T18:46:16","slug":"automatisches-sperren-von-windows-nach-inaktivitaet-mit-powershell","status":"publish","type":"script_hub","link":"https:\/\/www.ninjaone.com\/de\/script-hub\/automatisches-sperren-von-windows-nach-inaktivitaet-mit-powershell\/","title":{"rendered":"Automatisches Sperren von Windows nach Inaktivit\u00e4t mit PowerShell"},"content":{"rendered":"

Das Sperren eines Computers nach einer gewissen Zeit der Inaktivit\u00e4t ist eine wichtige Sicherheitsma\u00dfnahme, die jeder IT-Experte kennt. Vor allem in gemeinsam genutzten oder \u00f6ffentlichen Umgebungen stellt dies sicher, dass ein unbeaufsichtigter Arbeitsplatz nicht zu einer offenen T\u00fcr f\u00fcr b\u00f6sartige Aktivit\u00e4ten wird. PowerShell, das R\u00fcckgrat vieler IT-Vorg\u00e4nge in Windows-Umgebungen, bietet eine vielseitige M\u00f6glichkeit zum Festlegen eines Inaktivit\u00e4tszeitlimits.\u00a0<\/strong><\/p>\n

Hintergrund<\/h2>\n

Bei Inaktivit\u00e4ts-Timeouts geht es nicht nur um Sicherheit, sondern auch um die Verwaltung von Ressourcen. IT-Experten und Managed Service Provider (MSPs<\/a> ) implementieren diese Funktionen h\u00e4ufig, um Strom zu sparen, den Verschlei\u00df der Hardware zu verringern und eine erste Sicherheitsstufe zu schaffen. Das zur Verf\u00fcgung gestellte Skript taucht tief in die Welt der Automatisierung dieses Prozesses ein und erm\u00f6glicht einen „Set-it-and-forget-it“-Ansatz.<\/p>\n

Das Skript<\/h2>\n
#Requires -Version 5.1\r\n\r\n<#\r\n.SYNOPSIS\r\n    Set the Inactivity(Lock Computer) timeout time if it already isn't set.\r\n.DESCRIPTION\r\n    Set the Inactivity(Lock Computer) timeout time if it already isn't set.\r\n    Can be set regardless if the -Force parameter is used.\r\n.EXAMPLE\r\n     -Minutes 5\r\n    This set the Inactivity(Lock Computer) timeout to 5 minutes, does not change if already set.\r\n.EXAMPLE\r\n     -Minutes 5 -Force\r\n    This set the Inactivity(Lock Computer) timeout to 5 minutes, and forces the change if already set.\r\n.EXAMPLE\r\n    PS C:> Set-IdleLock.ps1 -Minutes 5\r\n    This set the Inactivity(Lock Computer) timeout to 5 minutes\r\n.OUTPUTS\r\n    None\r\n.NOTES\r\n    Minimum OS Architecture Supported: Windows 10, Windows Server 2016\r\n    Release Notes: Renamed script and added Script Variable support, updated Set-ItemProp\r\nBy using this script, you indicate your acceptance of the following legal terms as well as our Terms of Use at https:\/\/www.ninjaone.com\/terms-of-use.\r\n    Ownership Rights: NinjaOne owns and will continue to own all right, title, and interest in and to the script (including the copyright). NinjaOne is giving you a limited license to use the script in accordance with these legal terms. \r\n    Use Limitation: You may only use the script for your legitimate personal or internal business purposes, and you may not share the script with another party. \r\n    Republication Prohibition: Under no circumstances are you permitted to re-publish the script in any script library or website belonging to or under the control of any other software provider. \r\n    Warranty Disclaimer: The script is provided \u201cas is\u201d and \u201cas available\u201d, without warranty of any kind. NinjaOne makes no promise or guarantee that the script will be free from defects or that it will meet your specific needs or expectations. \r\n    Assumption of Risk: Your use of the script is at your own risk. You acknowledge that there are certain inherent risks in using the script, and you understand and assume each of those risks. \r\n    Waiver and Release: You will not hold NinjaOne responsible for any adverse or unintended consequences resulting from your use of the script, and you waive any legal or equitable rights or remedies you may have against NinjaOne relating to your use of the script. \r\n    EULA: If you are a NinjaOne customer, your use of the script is subject to the End User License Agreement applicable to you (EULA).\r\n.COMPONENT\r\n    LocalUserAccountManagement\r\n#>\r\n\r\n[CmdletBinding()]\r\nparam (\r\n    [Parameter()]\r\n    [int]$Minutes,\r\n    [switch]$Force = [System.Convert]::ToBoolean($env:force)\r\n)\r\n\r\nbegin {\r\n    if ($env:minutes -and $env:minutes -notlike \"null\") {\r\n        $Minutes = $env:minutes\r\n    }\r\n    \r\n    if(-not ($Minutes)){\r\n        Write-Error \"Minutes is required!\"\r\n        exit 1\r\n    }\r\n\r\n    if($Minutes -gt 9999 -or $Minutes -lt 0){\r\n        Write-Error \"Minutes must be between 0 and 9999 (including 0 and 9999).\"\r\n        exit 1\r\n    }\r\n\r\n    function Test-IsElevated {\r\n        $id = [System.Security.Principal.WindowsIdentity]::GetCurrent()\r\n        $p = New-Object System.Security.Principal.WindowsPrincipal($id)\r\n        if ($p.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator))\r\n        { Write-Output $true }\r\n        else\r\n        { Write-Output $false }\r\n    }\r\n    function Set-ItemProp {\r\n        param (\r\n            $Path,\r\n            $Name,\r\n            $Value,\r\n            [ValidateSet(\"DWord\", \"QWord\", \"String\", \"ExpandedString\", \"Binary\", \"MultiString\", \"Unknown\")]\r\n            $PropertyType = \"DWord\"\r\n        )\r\n        # Do not output errors and continue\r\n        $ErrorActionPreference = [System.Management.Automation.ActionPreference]::SilentlyContinue\r\n        if (-not $(Test-Path -Path $Path)) {\r\n            # Check if path does not exist and create the path\r\n            New-Item -Path $Path -Force | Out-Null\r\n        }\r\n        if ((Get-ItemProperty -Path $Path -Name $Name)) {\r\n            # Update property and print out what it was changed from and changed to\r\n            $CurrentValue = Get-ItemProperty -Path $Path -Name $Name\r\n            try {\r\n                Set-ItemProperty -Path $Path -Name $Name -Value $Value -Force -Confirm:$false -ErrorAction Stop | Out-Null\r\n            }\r\n            catch {\r\n                Write-Error $_\r\n            }\r\n            Write-Host \"$Path$Name changed from $CurrentValue to $(Get-ItemProperty -Path $Path -Name $Name)\"\r\n        }\r\n        else {\r\n            # Create property with value\r\n            try {\r\n                New-ItemProperty -Path $Path -Name $Name -Value $Value -PropertyType $PropertyType -Force -Confirm:$false -ErrorAction Stop | Out-Null\r\n            }\r\n            catch {\r\n                Write-Error $_\r\n            }\r\n            Write-Host \"Set $Path$Name to $(Get-ItemProperty -Path $Path -Name $Name)\"\r\n        }\r\n        $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Continue\r\n    }\r\n}\r\nprocess {\r\n    if (-not (Test-IsElevated)) {\r\n        Write-Error -Message \"Access Denied. Please run with Administrator privileges.\"\r\n        exit 1\r\n    }\r\n    \r\n    $Path = \"HKLM:SOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem\"\r\n    $IdleName = \"InactivityTimeoutSecs\"\r\n    $Seconds = $Minutes * 60\r\n    # Override \"Check if already set\"\r\n    if (-not $Force) {\r\n        # Check if already set\r\n        if ($(Get-ItemProperty -Path $Path | Select-Object -Property $IdleName -ExpandProperty $IdleName -ErrorAction SilentlyContinue)) {\r\n            $CurrentIdleSeconds = $(Get-ItemPropertyValue -Path $Path -Name $IdleName)\r\n            # If value already set, do nothing.\r\n            if ($CurrentIdleSeconds) { exit 0 }\r\n        }\r\n    }\r\n\r\n    # Sets InactivityTimeoutSecs to $Minutes\r\n    try {\r\n        Set-ItemProp -Path $Path -Name $IdleName -Value $Seconds\r\n        Write-Host \"Set the Inactivity to $($Seconds\/60) minutes.\"\r\n    }\r\n    catch {\r\n        Write-Error $_\r\n        exit 1\r\n    }\r\n}\r\nend {\r\n    \r\n    \r\n    \r\n}<\/pre>\n
 <\/p>\n\n
Zugriff auf \u00fcber 300 Skripte im NinjaOne Dojo<\/p>\n
Zugang erhalten<\/a><\/p>\n<\/div>\n
Detailansicht<\/h2>\n
Dieses PowerShell-Skript zielt darauf ab, das Inaktivit\u00e4ts-Timeout unter Windows festzulegen. Und so funktioniert es:<\/p>\n