{"id":395199,"date":"2024-12-18T15:51:49","date_gmt":"2024-12-18T15:51:49","guid":{"rendered":"https:\/\/www.ninjaone.com\/?post_type=script_hub&p=395199"},"modified":"2024-12-18T15:52:18","modified_gmt":"2024-12-18T15:52:18","slug":"antivirus-override-mit-powershell-festlegen","status":"publish","type":"script_hub","link":"https:\/\/www.ninjaone.com\/de\/script-hub\/antivirus-override-mit-powershell-festlegen\/","title":{"rendered":"Hinzuf\u00fcgen und Verwalten von Antivirus-\u00dcberschreibungen mit PowerShell\u00a0"},"content":{"rendered":"

Die Virenschutzverwaltung ist ein wichtiger Aspekt der IT-Verwaltung, insbesondere f\u00fcr Managed Service Provider (MSPs)<\/a> und IT-Experten, die mit der \u00dcberwachung gro\u00dfer Ger\u00e4teflotten betraut sind. Die effiziente Konfiguration oder das Au\u00dferkraftsetzen von Antiviren-Einstellungen auf mehreren Endger\u00e4ten kann Zeit sparen, die Einhaltung von Vorschriften gew\u00e4hrleisten und die Sicherheit aufrechterhalten. Das mitgelieferte PowerShell-Skript<\/a> bietet eine robuste L\u00f6sung f\u00fcr das strukturierte und automatisierte Festlegen von Antiviren-\u00dcberschreibungen oder das Entfernen vorhandener \u00dcberschreibungen.<\/p>\n

Kontext<\/h2>\n

In IT-Umgebungen sind Administratoren h\u00e4ufig mit Szenarien konfrontiert, in denen sie Antiviren-Konfigurationen f\u00fcr alle Endger\u00e4te standardisieren m\u00fcssen. Dies kann die Angabe von Antiviren-Versionen, -Status und -Stand umfassen, um den tats\u00e4chlichen Sicherheitsstatus von Ger\u00e4ten wiederzugeben oder um gemeldete Informationen aus Gr\u00fcnden der Compliance zu \u00fcberschreiben. Das Skript dient als Werkzeug, um entweder Antiviren-Details hinzuzuf\u00fcgen oder zu aktualisieren oder \u00dcberschreibungen ganz zu entfernen. Es ist besonders n\u00fctzlich f\u00fcr MSPs, die verschiedene Kundenumgebungen mit Tools wie NinjaOne verwalten.<\/p>\n

Durch die Nutzung von PowerShell optimiert dieses Skript die Abl\u00e4ufe, beseitigt manuelle Fehler und sorgt f\u00fcr Konsistenz bei der Virenschutzverwaltung. Seine F\u00e4higkeit, \u00dcberschreibungen programmatisch zu verarbeiten, macht es zu einem Vorteil f\u00fcr IT-Experten, die zahlreiche Ger\u00e4te verwalten oder unternehmensweite Sicherheitsstandards durchsetzen wollen.<\/p>\n

Das Skript zur Optimierung der Hintergrund-Verwaltung<\/h2>\n
#Requires -Version 5.1\r\n\r\n<#\r\n.SYNOPSIS\r\n    Add an antivirus to the device details or override the existing antivirus information.\r\n.DESCRIPTION\r\n    Add an antivirus to the device details or override the existing antivirus information.\r\n\r\n    By using this script, you indicate your acceptance of the following legal terms as well as our Terms of Use at https:\/\/www.ninjaone.com\/terms-of-use.\r\n    Ownership Rights: NinjaOne owns and will continue to own all right, title, and interest in and to the script (including the copyright). NinjaOne is giving you a limited license to use the script in accordance with these legal terms. \r\n    Use Limitation: You may only use the script for your legitimate personal or internal business purposes, and you may not share the script with another party. \r\n    Republication Prohibition: Under no circumstances are you permitted to re-publish the script in any script library or website belonging to or under the control of any other software provider. \r\n    Warranty Disclaimer: The script is provided \u201cas is\u201d and \u201cas available\u201d, without warranty of any kind. NinjaOne makes no promise or guarantee that the script will be free from defects or that it will meet your specific needs or expectations. \r\n    Assumption of Risk: Your use of the script is at your own risk. You acknowledge that there are certain inherent risks in using the script, and you understand and assume each of those risks. \r\n    Waiver and Release: You will not hold NinjaOne responsible for any adverse or unintended consequences resulting from your use of the script, and you waive any legal or equitable rights or remedies you may have against NinjaOne relating to your use of the script. \r\n    EULA: If you are a NinjaOne customer, your use of the script is subject to the End User License Agreement applicable to you (EULA).\r\n.EXAMPLE\r\n    -AntivirusName \"My AV\" -AntivirusVersion \"1.0.1\" -AntivirusStatus \"Out-of-Date\" -AntivirusState \"ON\"\r\n\r\n    Creating customization folder.\r\n\r\n\r\n        Directory: C:\\ProgramData\\NinjaRMMAgent\r\n\r\n\r\n    Mode                 LastWriteTime         Length Name                                                                 \r\n    ----                 -------------         ------ ----                                                                 \r\n    d-----         6\/19\/2024   4:09 PM                Customization                                                        \r\n    Successfully created customization folder.\r\n\r\n    Applying override.\r\n    Successfully applied override.\r\n\r\nPARAMETER: -AntivirusName \"ReplaceMeWithNameOfAnAntivirus\"\r\n    Name of the antivirus you would like to appear in the device details.\r\n\r\nPARAMETER: -AntivirusVersion \"1.0.2\"\r\n    Specify the version number of the antivirus.\r\n\r\nPARAMETER: -AntivirusStatus \"Up-to-Date\"\r\n    Specify whether the antivirus definitions are up-to-date, out-of-date, or unknown.\r\n\r\nPARAMETER: -AntivirusState \"ON\"\r\n    Specify the current status of the antivirus.\r\n\r\nPARAMETER: -Append\r\n    Append or update an existing override.\r\n    \r\nPARAMETER: -RemoveOverride\r\n    Remove all existing overrides.\r\n\r\n.NOTES\r\n    Minimum OS Architecture Supported: Windows 10, Windows Server 2016\r\n    Release Notes: Initial Release\r\n#>\r\n\r\n[CmdletBinding()]\r\nparam (\r\n    [Parameter()]\r\n    [String]$AntivirusName,\r\n    [Parameter()]\r\n    [String]$AntivirusVersion,\r\n    [Parameter()]\r\n    [String]$AntivirusStatus,\r\n    [Parameter()]\r\n    [String]$AntivirusState,\r\n    [Parameter()]\r\n    [Switch]$Append = [System.Convert]::ToBoolean($env:append),\r\n    [Parameter()]\r\n    [Switch]$RemoveOverride = [System.Convert]::ToBoolean($env:removeOverride)\r\n)\r\n\r\nbegin {\r\n    # Replace command line paramets with the form variables if used.\r\n    if ($env:avName -and $env:avName -notlike \"null\") { $AntivirusName = $env:avName }\r\n    if ($env:avVersion -and $env:avVersion -notlike \"null\") { $AntivirusVersion = $env:avVersion }\r\n    if ($env:avStatus -and $env:avStatus -notlike \"null\") { $AntivirusStatus = $env:avStatus }\r\n    if ($env:avState -and $env:avState -notlike \"null\") { $AntivirusState = $env:avState }\r\n\r\n    # Check if RemoveOverride is set and any of the other parameters are also set\r\n    if ($RemoveOverride -and ($AntivirusState -or $AntivirusStatus -or $AntivirusVersion -or $AntivirusName -or $Append)) {\r\n        Write-Host -Object \"[Error] Cannot remove an override and add an override at the same time.\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if AntivirusName is not provided and RemoveOverride is not set\r\n    if (!$AntivirusName -and !$RemoveOverride) {\r\n        Write-Host $RemoveOverride\r\n        if ($Append) {\r\n            Write-Host -Object \"[Error] Antivirus name was not given. The antivirus name is required when updating or adding a new override!\"\r\n        }\r\n        else {\r\n            Write-Host -Object \"[Error] Antivirus name was not given. Antivirus name, state, and status are required when adding a new override!\"\r\n        }\r\n\r\n        exit 1\r\n    }\r\n\r\n    # Validate AntivirusVersion for invalid characters\r\n    if ($AntivirusVersion -and $AntivirusVersion -match '[^0-9\\.]') {\r\n        Write-Host -Object \"[Error] The antivirus version given contains an invalid character. Only the following characters are allowed: '0-9' and '.'\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if AntivirusStatus is not provided and neither RemoveOverride nor Append is set\r\n    if (!$AntivirusStatus -and !$RemoveOverride -and !$Append) {\r\n        Write-Host -Object \"[Error] Antivirus status was not given. Antivirus name, state, and status are required!\"\r\n        exit 1\r\n    }\r\n\r\n    # Define valid antivirus statuses\r\n    $ValidStatus = \"Up-to-Date\", \"Out-of-Date\", \"Unknown\"\r\n    # Check if the provided AntivirusStatus is valid\r\n    if ($AntivirusStatus -and $ValidStatus -notcontains $AntivirusStatus) {\r\n        Write-Host -Object \"[Error] An invalid antivirus status was given. Only the following statuses are valid: 'Up-to-Date', 'Out-of-Date', and 'Unknown'.\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if AntivirusState is not provided and neither RemoveOverride nor Append is set\r\n    if (!$AntivirusState -and !$RemoveOverride -and !$Append) {\r\n        Write-Host -Object \"[Error] Antivirus state was not given. Antivirus name, state, and status are required!\"\r\n        exit 1\r\n    }\r\n\r\n    # Define valid antivirus states\r\n    $ValidState = \"ON\", \"OFF\", \"EXPIRED\", \"SNOOZED\", \"UNKNOWN\"\r\n    # Check if the provided AntivirusState is valid\r\n    if ($AntivirusState -and $ValidState -notcontains $AntivirusState) {\r\n        Write-Host -Object \"[Error] An invalid antivirus state was given. Only the following states are valid: 'ON', 'OFF', 'EXPIRED', 'SNOOZED', and 'UNKNOWN'.\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if the NinjaRMMAgent directory exists\r\n    if (!(Test-Path -Path \"$env:ProgramData\\NinjaRMMAgent\")) {\r\n        Write-Host -Object \"[Error] Ninja Agent is not present at '$env:ProgramData\\NinjaRMMAgent'.\"\r\n        exit 1\r\n    }\r\n\r\n    # Function to check if the script is running with elevated privileges\r\n    function Test-IsElevated {\r\n        $id = [System.Security.Principal.WindowsIdentity]::GetCurrent()\r\n        $p = New-Object System.Security.Principal.WindowsPrincipal($id)\r\n        $p.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator)\r\n    }\r\n\r\n    # Set ExitCode to 0 if it is not already set\r\n    if (!$ExitCode) {\r\n        $ExitCode = 0\r\n    }\r\n}\r\nprocess {\r\n    # Check if the script is running with elevated privileges\r\n    if (!(Test-IsElevated)) {\r\n        Write-Host -Object \"[Error] Access denied. Please run with administrator privileges.\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if RemoveOverride is set\r\n    if ($RemoveOverride) {\r\n        # Check if the antivirus override file exists\r\n        if (Test-Path -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -ErrorAction SilentlyContinue) {\r\n            Write-Host -Object \"Removing $env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json file.\"\r\n\r\n            # Attempt to remove the antivirus override file\r\n            try {\r\n                Remove-Item -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -ErrorAction Stop\r\n            }\r\n            catch {\r\n                Write-Host -Object \"[Error] Failed to remove antivirus override.\"\r\n                Write-Host -Object \"[Error] $($_.Exception.Message)\"\r\n                exit 1\r\n            }\r\n        }\r\n        else {\r\n            Write-Host -Object \"Antivirus override is not currently set.\"\r\n        }\r\n\r\n        exit $ExitCode\r\n    }\r\n\r\n    # Check if the Customization directory exists, if not, create it\r\n    if (!(Test-Path -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\" -ErrorAction SilentlyContinue)) {\r\n        try {\r\n            Write-Host -Object \"Creating customization folder.\"\r\n            New-Item -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\" -ItemType Directory -Force -ErrorAction Stop\r\n            Write-Host -Object \"Successfully created customization folder.`n\"\r\n        }\r\n        catch {\r\n            Write-Host -Object \"[Error] Unable to create customization folder.\"\r\n            Write-Host -Object \"[Error] $($_.Exception.Message)\"\r\n            exit 1\r\n        }\r\n    }\r\n\r\n    # Initialize a list to hold antivirus overrides\r\n    $AntivirusOverrides = New-Object System.Collections.Generic.List[Object]\r\n\r\n    # If Append is set and the antivirus override file exists, retrieve current overrides\r\n    if ($Append -and (Test-Path -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -ErrorAction SilentlyContinue)) {\r\n        try {\r\n            $CurrentOverrides = Get-Content -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -ErrorAction Stop | ConvertFrom-Json -ErrorAction Stop | Select-Object -ExpandProperty \"av_override\" -ErrorAction Stop\r\n        }\r\n        catch {\r\n            Write-Host -Object \"[Error] Failed to retrieve current overrides.\"\r\n            Write-Host -Object \"[Error] $($_.Exception.Message)\"\r\n            exit 1\r\n        }\r\n\r\n        # Iterate over current overrides to update or add new overrides\r\n        $CurrentOverrides | ForEach-Object {\r\n            if ($AntivirusName -notmatch [Regex]::Escape($_.av_name)) {\r\n                $AntivirusOverrides.Add($_)\r\n                return\r\n            }\r\n\r\n            Write-Host -Object \"An existing antivirus with the same name was detected. Updating the existing entry.`n\"\r\n\r\n            $AntivirusOverrides.Add(\r\n                [PSCustomObject]@{\r\n                    av_name    = $AntivirusName\r\n                    av_version = if ($AntivirusVersion) { $AntivirusVersion }else { $_.av_version }\r\n                    av_status  = if ($AntivirusStatus) { $AntivirusStatus }else { $_.av_status }\r\n                    av_state   = if ($AntivirusState) { $AntivirusState }else { $_.av_state }\r\n                }\r\n            )\r\n\r\n            $UpdatedOverride = $True\r\n        }\r\n    }\r\n\r\n    # If Append is set but no override was updated, check for required parameters\r\n    if ($Append -and !$UpdatedOverride -and (!$AntivirusStatus -or !$AntivirusState)) {\r\n        Write-Host -Object \"[Error] Antivirus name, state, and status are required when adding a new override!\"\r\n        exit 1\r\n    }\r\n    elseif ($Append) {\r\n        Write-Host -Object \"Adding override to the existing list of overrides.`n\"\r\n    }\r\n\r\n    # If no override was updated, add a new override\r\n    if (!$UpdatedOverride) {\r\n        $AntivirusOverrides.Add(\r\n            [PSCustomObject]@{\r\n                av_name    = $AntivirusName\r\n                av_version = $AntivirusVersion\r\n                av_status  = $AntivirusStatus\r\n                av_state   = $AntivirusState\r\n            }\r\n        )\r\n    }\r\n\r\n    # Attempt to apply the override by writing to the override file\r\n    try {\r\n        Write-Host -Object \"Applying override.\"\r\n        $AntivirusOverrideJSON = [PSCustomObject]@{\r\n            av_override = $AntivirusOverrides\r\n        } | ConvertTo-Json -ErrorAction Stop\r\n\r\n        $AntivirusOverrideJSON | Out-File -FilePath \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -Encoding \"utf8\" -Force -ErrorAction Stop\r\n        Write-Host -Object \"Successfully applied override.\"\r\n    }\r\n    catch {\r\n        Write-Host -Object \"[Error] Unable to create override.\"\r\n        Write-Host -Object \"[Error] $($_.Exception.Message)\"\r\n        exit 1\r\n    }\r\n\r\n    exit $ExitCode\r\n}\r\nend {\r\n    \r\n    \r\n    \r\n}<\/pre>\n
 <\/p>\n\n
Sparen Sie Zeit mit \u00fcber 300+ Skripten aus dem NinjaOne Dojo.<\/p>\n
\u2192 Erhalten Sie noch heute Zugang<\/a>.<\/p>\n<\/div>\n
Detaillierte Aufschl\u00fcsselung des Skripts<\/h2>\n
Erste Validierung und Parameter<\/h3>\n
Das Skript beginnt mit der \u00dcbergabe mehrerer Parameter:<\/p>\n