{"id":421745,"date":"2025-02-10T14:47:25","date_gmt":"2025-02-10T14:47:25","guid":{"rendered":"https:\/\/www.ninjaone.com\/?post_type=script_hub&#038;p=421745"},"modified":"2025-02-10T14:49:55","modified_gmt":"2025-02-10T14:49:55","slug":"berechtigungen-fuer-wechseldatentraeger-powershell","status":"publish","type":"script_hub","link":"https:\/\/www.ninjaone.com\/de\/script-hub\/berechtigungen-fuer-wechseldatentraeger-powershell\/","title":{"rendered":"PowerShell-Guide: Berechtigungen f\u00fcr Wechseldatentr\u00e4ger beherrschen"},"content":{"rendered":"<h2>Die wichtigsten Erkenntnisse<\/h2>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><strong>Automatisiert Ger\u00e4teberechtigungen<\/strong>: Das Skript vereinfacht das Festlegen von Berechtigungen auf Wechseldatentr\u00e4gern.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Unterst\u00fctzt mehrere Ger\u00e4te<\/strong>: Es deckt eine Reihe von Ger\u00e4ten ab, darunter USB, DVD, Diskettenlaufwerke, Bandlaufwerke und WPD.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><strong>Erfordert Administratorrechte<\/strong>: F\u00fcr die Ausf\u00fchrung des Skripts sind Administratorrechte erforderlich.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><strong>\u00c4ndert die Einstellungen in der Registrierung<\/strong>: Das Skript passt die Berechtigungen an, indem er bestimmte Registrierungsschl\u00fcssel und -werte \u00e4ndert.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><strong>Gew\u00e4hrleistet Compliance und Sicherheit<\/strong>: Ideal f\u00fcr Umgebungen, in denen Datensicherheit und Compliance entscheidend sind.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"6\" data-aria-level=\"1\"><strong>Flexible Kontrolle<\/strong>: Bietet die M\u00f6glichkeit, Lese-, Schreib- und Ausf\u00fchrungsaktionen sowohl zu verweigern als auch zu erlauben.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"7\" data-aria-level=\"1\"><strong>Aktualisierung der Gruppenrichtlinien und Neustart<\/strong>: Schlie\u00dft mit einer Aktualisierung der Gruppenrichtlinien und einem optionalen Neustart des Systems ab.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"8\" data-aria-level=\"1\"><strong>Gefahr der \u00dcberbeschr\u00e4nkung<\/strong>: Es besteht die Gefahr, dass Arbeitsabl\u00e4ufe behindert werden, wenn zu restriktive Richtlinien angewendet werden.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"9\" data-aria-level=\"1\"><strong>NinjaOne-Integration<\/strong>: Das Skript erg\u00e4nzt Plattformen wie NinjaOne f\u00fcr ein breiteres IT-Management und Sicherheit.<\/li>\n<\/ul>\n<p>Die Verwaltung des Zugriffs auf Wechseldatentr\u00e4ger ist ein wichtiger Aspekt der IT-Sicherheit. Diese Verantwortung ist besonders ausgepr\u00e4gt in Umgebungen, in denen Datensicherheit und -integrit\u00e4t an erster Stelle stehen. PowerShell-Skripte wie das thematisierte bieten eine robuste L\u00f6sung f\u00fcr die effiziente Steuerung dieser Berechtigungen.<\/p>\n<h2>Kontext<\/h2>\n<p>Das vorgestellte Skript dient dazu, den Lese-, Schreib- und Ausf\u00fchrungszugriff auf verschiedene Wechseldatentr\u00e4ger wie Diskettenlaufwerke, CD\/DVD-Laufwerke, Bandlaufwerke, Windows Portable Devices (WPD) und USB-Laufwerke zu aktivieren oder zu deaktivieren. Diese Funktionalit\u00e4t ist f\u00fcr IT-Expert:innen und <a href=\"https:\/\/www.ninjaone.com\/de\/was-ist-ein-msp\" target=\"_blank\" rel=\"noopener\">Managed Service Provider (MSPs)<\/a> unerl\u00e4sslich, die Datensicherheitsrichtlinien durchsetzen, <a href=\"https:\/\/www.ninjaone.com\/blog\/ransomware-backup-how-to-prevent-disaster\/\" target=\"_blank\" rel=\"noopener\">Datenlecks<\/a> verhindern oder gesetzliche Vorschriften einhalten m\u00fcssen.<\/p>\n<h2>Das Skript zur Verwaltung der Berechtigungen f\u00fcr Wechseldatentr\u00e4ger<\/h2>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"powershell\">#Requires -Version 2.0\r\n\r\n&lt;#\r\n.SYNOPSIS\r\n    Disable or Enable Write, Read, and Execute access to Removable Storage devices.\r\n.DESCRIPTION\r\n    Disable or Enable Write, Read, and Execute access to Floppy, CD\/DVD, Tape, WPD, and\/or USB.\r\n    Disable actions are does first, then allow actions are done after.\r\n.EXAMPLE\r\n     -Device DVD -DenyRead -DenyWrite -DenyExecute\r\n    Disable Write, Read, and Execute access to CD\/DVD drive.\r\n.EXAMPLE\r\n     -Device DVD -AllowRead -AllowWrite -AllowExecute\r\n    Allow Write, Read, and Execute access to CD\/DVD drive.\r\n.EXAMPLE\r\n     -Device DVD -DenyWrite -DenyExecute -AllowRead\r\n    Disable Write, Read, and Execute access to CD\/DVD drive, but Allow Read.\r\n.OUTPUTS\r\n    None\r\n.NOTES\r\n    Minimum OS Architecture Supported: Windows 7, Windows Server 2012\r\n    Local Group Policy updates like this requires the computer to rebooted.\r\n    Release Notes: Renamed script and added Script Variable support\r\nBy using this script, you indicate your acceptance of the following legal terms as well as our Terms of Use at https:\/\/www.ninjaone.com\/terms-of-use.\r\n    Ownership Rights: NinjaOne owns and will continue to own all right, title, and interest in and to the script (including the copyright). NinjaOne is giving you a limited license to use the script in accordance with these legal terms. \r\n    Use Limitation: You may only use the script for your legitimate personal or internal business purposes, and you may not share the script with another party. \r\n    Republication Prohibition: Under no circumstances are you permitted to re-publish the script in any script library or website belonging to or under the control of any other software provider. \r\n    Warranty Disclaimer: The script is provided \u201cas is\u201d and \u201cas available\u201d, without warranty of any kind. NinjaOne makes no promise or guarantee that the script will be free from defects or that it will meet your specific needs or expectations. \r\n    Assumption of Risk: Your use of the script is at your own risk. You acknowledge that there are certain inherent risks in using the script, and you understand and assume each of those risks. \r\n    Waiver and Release: You will not hold NinjaOne responsible for any adverse or unintended consequences resulting from your use of the script, and you waive any legal or equitable rights or remedies you may have against NinjaOne relating to your use of the script. \r\n    EULA: If you are a NinjaOne customer, your use of the script is subject to the End User License Agreement applicable to you (EULA).\r\n.COMPONENT\r\n    DataIOSecurity\r\n#&gt;\r\n\r\n[CmdletBinding()]\r\nparam (\r\n    # Supported devices Floppy, DVD, Tape, WPD, USB\r\n    [String[]]\r\n    $Device,\r\n    [switch]\r\n    $DenyRead = [System.Convert]::ToBoolean($env:DenyRead),\r\n    [switch]\r\n    $DenyWrite = [System.Convert]::ToBoolean($env:DenyWrite),\r\n    [switch]\r\n    $DenyExecute = [System.Convert]::ToBoolean($env:DenyExecute),\r\n    [switch]\r\n    $AllowRead = [System.Convert]::ToBoolean($env:AllowRead),\r\n    [switch]\r\n    $AllowWrite = [System.Convert]::ToBoolean($env:AllowWrite),\r\n    [switch]\r\n    $AllowExecute = [System.Convert]::ToBoolean($env:AllowExecute),\r\n    [switch]\r\n    $ForceReboot = [System.Convert]::ToBoolean($env:ForceReboot)\r\n)\r\n\r\nbegin {\r\n    function Test-StringEmpty {\r\n        param([string]$Text)\r\n        # Returns true if string is empty, null, or whitespace\r\n        process { [string]::IsNullOrEmpty($Text) -or [string]::IsNullOrWhiteSpace($Text) }\r\n    }\r\n    function Test-IsElevated {\r\n        $id = [System.Security.Principal.WindowsIdentity]::GetCurrent()\r\n        $p = New-Object System.Security.Principal.WindowsPrincipal($id)\r\n        $p.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator)\r\n    }\r\n    $RegSettings = @(\r\n        [PSCustomObject]@{\r\n            Name        = \"Floppy\"\r\n            BasePath    = \"HKLM:\\Software\\Policies\\Microsoft\\Windows\\RemovableStorageDevices\\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}\"\r\n            DenyExecute = \"Deny_Execute\"\r\n            DenyWrite   = \"Deny_Write\"\r\n            DenyRead    = \"Deny_Read\"\r\n        },\r\n        [PSCustomObject]@{\r\n            Name        = \"DVD\"\r\n            BasePath    = \"HKLM:\\Software\\Policies\\Microsoft\\Windows\\RemovableStorageDevices\\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}\"\r\n            DenyExecute = \"Deny_Execute\"\r\n            DenyWrite   = \"Deny_Write\"\r\n            DenyRead    = \"Deny_Read\"\r\n        },\r\n        [PSCustomObject]@{\r\n            Name        = \"Tape\"\r\n            BasePath    = \"HKLM:\\Software\\Policies\\Microsoft\\Windows\\RemovableStorageDevices\\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}\"\r\n            DenyExecute = \"Deny_Execute\"\r\n            DenyWrite   = \"Deny_Write\"\r\n            DenyRead    = \"Deny_Read\"\r\n        },\r\n        [PSCustomObject]@{\r\n            Name      = \"WPD\"\r\n            BasePath  = \"HKLM:\\Software\\Policies\\Microsoft\\Windows\\RemovableStorageDevices\\{6AC27878-A6FA-4155-BA85-F98F491D4F33}\"\r\n            DenyWrite = \"Deny_Write\"\r\n            DenyRead  = \"Deny_Read\"\r\n        },\r\n        [PSCustomObject]@{\r\n            Name      = \"WPD\"\r\n            BasePath  = \"HKLM:\\Software\\Policies\\Microsoft\\Windows\\RemovableStorageDevices\\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}\"\r\n            DenyWrite = \"Deny_Write\"\r\n            DenyRead  = \"Deny_Read\"\r\n        },\r\n        [PSCustomObject]@{\r\n            Name        = \"USB\"\r\n            BasePath    = \"HKLM:\\Software\\Policies\\Microsoft\\Windows\\RemovableStorageDevices\\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\"\r\n            DenyExecute = \"Deny_Execute\"\r\n            DenyWrite   = \"Deny_Write\"\r\n            DenyRead    = \"Deny_Read\"\r\n        }\r\n    )\r\n    $Device = if ($(Test-StringEmpty -Text $env:Device)) { $Device }else { $env:Device }\r\n\r\n    if ($(Test-StringEmpty -Text $Device)) {\r\n        Write-Error \"Device is required.\"\r\n        exit 1\r\n    }\r\n    if ((-not $DenyRead -and -not $DenyWrite -and -not $DenyExecute) -and (-not $AllowRead -and -not $AllowWrite -and -not $AllowExecute)) {\r\n        Write-Error \"At least one Deny or Allow is required.\"\r\n        exit 1\r\n    }\r\n}\r\nprocess {\r\n    if (-not (Test-IsElevated)) {\r\n        Write-Error -Message \"Access Denied. Please run with Administrator privileges.\"\r\n        exit 1\r\n    }\r\n\r\n    # Split any string that has a comma and validate types of devices\r\n    $Device = $Device | ForEach-Object {\r\n        $_ -split ',' | ForEach-Object {\r\n            \"$_\".Trim()\r\n        }\r\n    } | Where-Object { $_ -in \"Floppy\", \"DVD\", \"Tape\", \"WPD\", \"USB\" }\r\n\r\n    try {\r\n        $Device | ForEach-Object {\r\n            $CurDevice = $_\r\n            # Loop through each item in $RegSettings and work on the current device($Device)\r\n            $RegSettings | Where-Object { $_.Name -in $CurDevice } | ForEach-Object {\r\n                $CurRegSetting = $_\r\n                $Path = $CurRegSetting.BasePath\r\n\r\n                # Build Deny list\r\n                $Deny = [System.Collections.ArrayList]::new() # Older PowerShell compatible Lists\r\n                if ($DenyRead) { $Deny.Add(\"Read\") | Out-Null }\r\n                if ($DenyWrite) { $Deny.Add(\"Write\") | Out-Null }\r\n                if ($DenyExecute) { $Deny.Add(\"Execute\") | Out-Null }\r\n                # Build Allow list\r\n                $Allow = [System.Collections.ArrayList]::new() # Older PowerShell compatible Lists\r\n                if ($AllowRead) { $Allow.Add(\"Read\") | Out-Null }\r\n                if ($AllowWrite) { $Allow.Add(\"Write\") | Out-Null }\r\n                if ($AllowExecute) { $Allow.Add(\"Execute\") | Out-Null }\r\n\r\n                # Loop though each $Deny item passed\r\n                $Deny | ForEach-Object {\r\n                    $CurDeny = $_\r\n                    # Only act on what we have, like WPD where we only have Deny_Write and Deny_Read\r\n                    # $CurRegSetting.\"Deny$CurDeny\" is a method of access a property\r\n                    if ($CurRegSetting.\"Deny$CurDeny\") {\r\n                        $CurDenyType = $CurRegSetting.\"Deny$CurDeny\"\r\n                        # Check if we need to create the path\r\n                        if (-not (Test-Path -Path $Path -ErrorAction SilentlyContinue)) {\r\n                            New-Item -Path ($Path | Split-Path -Parent) -Name ($Path | Split-Path -Leaf) -Force -Confirm:$false | Out-Null\r\n                            Write-Host \"Creating path: $($Path)\"\r\n                        }\r\n                        # Check if the property already exists and update it or create the property\r\n                        if ((Get-ItemProperty -Path $Path -Name $CurDenyType -ErrorAction SilentlyContinue).\"$CurDenyType\") {\r\n                            Set-ItemProperty -Path $Path -Name $CurDenyType -Value 1 -Force -Confirm:$false | Out-Null\r\n                            Write-Host \"Setting $($Path)\/$CurDenyType to 1\"\r\n                        }\r\n                        else {\r\n                            New-ItemProperty -Path $Path -Name $CurDenyType -Value 1 -PropertyType \"DWORD\" -Force -Confirm:$false | Out-Null\r\n                            Write-Host \"Creating and Setting $($Path)\/$CurDenyType to 1\"\r\n                        }\r\n                        Write-Host \"Deny $CurDeny for $CurDevice set to $((Get-ItemProperty -Path $Path -Name $CurDenyType -ErrorAction SilentlyContinue).\"$CurDenyType\")\"\r\n                    }\r\n                    else {\r\n                        # Skipping this as we don't have Deny_Execute for WPD\r\n                        Write-Host \"Skipping $($CurRegSetting.\"Deny$CurDeny\")\"\r\n                    }\r\n                }\r\n                # Loop though each $Allow item passed\r\n                $Allow | ForEach-Object {\r\n                    $CurAllow = $_\r\n                    # Only act on what we have, like WPD where we only have Deny_Write and Deny_Read\r\n                    # $CurRegSetting.\"Deny$CurAllow\" is a method to access a property\r\n                    if ($CurRegSetting.\"Deny$CurAllow\") {\r\n                        $CurAllowType = $CurRegSetting.\"Deny$CurAllow\"\r\n                        # Check if the property already exists and update it or create the property\r\n                        if ((Get-ItemProperty -Path $Path -Name $CurAllowType -ErrorAction SilentlyContinue).\"$CurAllowType\") {\r\n                            Set-ItemProperty -Path $Path -Name $CurAllowType -Value 0 -Force -Confirm:$false | Out-Null\r\n                            Write-Host \"Setting $($Path)\/$CurAllowType to 0\"\r\n                        }\r\n                        Write-Host \"Allow access for $CurDevice\"\r\n                    }\r\n                    else {\r\n                        # Skipping this as we don't have Deny_Execute for WPD\r\n                        Write-Host \"Skipping $($CurRegSetting.\"Deny$CurAllow\")\"\r\n                    }\r\n                }\r\n            }\r\n        }\r\n        \r\n\r\n        Write-Host \"Running: gpupdate.exe \/force\"\r\n        gpupdate.exe \/force\r\n        Write-Host \"Completed Running: gpupdate.exe \/force\"\r\n        Write-Host \"Computer will need to be rebooted for changes to take effect.\"\r\n\r\n        if ($ForceReboot) {\r\n            shutdown.exe -r -t 60\r\n        }\r\n        else {\r\n            Write-Host \"Computer will need to be rebooted to see changes.\"\r\n        }\r\n        exit 0\r\n    }\r\n    catch {\r\n        Write-Error $_\r\n        exit 1\r\n    }\r\n}\r\nend {\r\n    \r\n    \r\n    \r\n}<\/pre>\n<p>&nbsp;<\/p>\n\n<div class=\"in-context-cta\"><p style=\"text-align: center;\">Greifen Sie auf \u00fcber 300 Skripte im NinjaOne Dojo zu.<\/p>\n<p style=\"text-align: center;\"><a href=\"https:\/\/www.ninjaone.com\/freetrialform\/\">Zugang erhalten<\/a><\/p>\n<\/div>\n<h2>Detaillierte Aufschl\u00fcsselung<\/h2>\n<p>Das Skript arbeitet in mehreren unterschiedlichen Phasen:<\/p>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><strong>Definition der Parameter<\/strong>: Sie beginnt mit der Definition von Parametern f\u00fcr verschiedene Ger\u00e4tetypen und Aktionen, wie etwa das Verweigern oder Zulassen vom Lesen, Schreiben, Ausf\u00fchren.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Kontrollen vor der Ausf\u00fchrung<\/strong>: Es enth\u00e4lt Funktionen zur Pr\u00fcfung auf leere Zeichenfolgen und zur \u00dcberpr\u00fcfung, ob das Skript mit Administratorrechten ausgef\u00fchrt wird.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Anpassungen der Registrierungseinstellungen<\/strong>: Die Kernfunktionalit\u00e4t besteht darin, die Registrierungseinstellungen f\u00fcr jeden Ger\u00e4tetyp zu \u00e4ndern. Diese Einstellungen bestimmen die Berechtigungen f\u00fcr jede Aktion (Lesen, Schreiben, Ausf\u00fchren).<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Ausf\u00fchrungslogik<\/strong>: Das Skript erstellt oder \u00e4ndert Registrierungsschl\u00fcssel und -werte auf der Grundlage der Eingabeparameter. Sie kann Berechtigungen festlegen, um Aktionen auf den angegebenen Ger\u00e4ten entweder zu verweigern oder zu erlauben.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Letzte Schritte<\/strong>: Das Skript schlie\u00dft mit der Aktualisierung der Gruppenrichtlinien mit <strong>gpupdate.exe<\/strong> und optional mit einem Neustart des Systems ab, damit die \u00c4nderungen wirksam werden.<\/li>\n<\/ul>\n<h2>M\u00f6gliche Anwendungsf\u00e4lle<\/h2>\n<p>Denken Sie an ein Finanzunternehmen, das sich an strenge Datensicherheitsvorschriften halten muss. Ein IT-Administrator kann mit diesem Skript den Schreibzugriff auf USB-Laufwerke an allen Workstations deaktivieren und so verhindern, dass sensible Daten auf externe Ger\u00e4te kopiert werden.<\/p>\n<h2>Vergleiche<\/h2>\n<p>Herk\u00f6mmliche Methoden zur Konfiguration von Ger\u00e4teberechtigungen k\u00f6nnen in manuellen Registrierungs\u00e4nderungen oder Gruppenrichtlinienkonfigurationen bestehen. Dieses Skript automatisiert diese Prozesse, verringert die Fehlerquote und spart Zeit.<\/p>\n<h2>FAQs<\/h2>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><strong>Ist das Skript mit allen Windows-Versionen kompatibel?<\/strong>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\">Es unterst\u00fctzt Windows 7 und h\u00f6her, einschlie\u00dflich der Server-Editionen.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><strong>Kann es den Zugriff auf Netzwerklaufwerke kontrollieren?<\/strong>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\">Nein, es ist speziell f\u00fcr Wechseldatentr\u00e4ger gedacht.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"6\" data-aria-level=\"1\"><strong>Erfordert das Skript Administratorrechte?<\/strong>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"6\" data-aria-level=\"1\">Ja, es muss mit Administratorrechten ausgef\u00fchrt werden.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2>Folgen<\/h2>\n<p>Dieses Skript ist zwar ein leistungsf\u00e4higes Tool zur Verbesserung der Datensicherheit, birgt aber auch das Risiko, den Zugriff zu stark einzuschr\u00e4nken, was legitime Arbeitsabl\u00e4ufe behindern k\u00f6nnte. Es ist wichtig, die Sicherheitsanforderungen mit den betrieblichen Anforderungen in Einklang zu bringen.<\/p>\n<h2>Empfehlungen<\/h2>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"7\" data-aria-level=\"1\"><strong>Testen Sie das Skript in einer Staging-Umgebung<\/strong>, bevor Sie es in gro\u00dfem Umfang einsetzen.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"8\" data-aria-level=\"1\"><strong>Dokumentieren Sie alle mit dem Skript vorgenommenen \u00c4nderungen<\/strong> f\u00fcr k\u00fcnftige Referenzen.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"9\" data-aria-level=\"1\"><strong>\u00dcberpr\u00fcfen und aktualisieren Sie die Zugangsrichtlinien regelm\u00e4\u00dfig<\/strong>, um sie an die sich ver\u00e4ndernden Sicherheitsanforderungen anzupassen.<\/li>\n<\/ul>\n<h2>Abschlie\u00dfende \u00dcberlegungen<\/h2>\n<p>In der heutigen dynamischen IT-Welt k\u00f6nnen Tools wie NinjaOne Skripte wie dieses erg\u00e4nzen, indem es eine <a href=\"https:\/\/www.ninjaone.com\/de\/\">integrierte Plattform f\u00fcr die Verwaltung von IT-Betrieb<\/a>, einschlie\u00dflich Sicherheitskonfigurationen, angeboten wird. Die F\u00e4higkeit von NinjaOne, Verwaltungsaufgaben zu zentralisieren, stellt sicher, dass Sicherheitsrichtlinien in der gesamten IT-Infrastruktur konsistent angewendet werden, was die allgemeine Sicherheit und <a href=\"https:\/\/www.ninjaone.com\/de\/effizienz\/\" target=\"_blank\" rel=\"noopener\">betriebliche Effizienz<\/a> erh\u00f6ht.<\/p>\n","protected":false},"author":35,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","_lmt_disableupdate":"no","_lmt_disable":""},"operating_system":[4212],"use_cases":[4280],"class_list":["post-421745","script_hub","type-script_hub","status-publish","hentry","script_hub_category-windows"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/script_hub\/421745","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/script_hub"}],"about":[{"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/types\/script_hub"}],"author":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/users\/35"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/comments?post=421745"}],"wp:attachment":[{"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/media?parent=421745"}],"wp:term":[{"taxonomy":"script_hub_category","embeddable":true,"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/operating_system?post=421745"},{"taxonomy":"use_cases","embeddable":true,"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/use_cases?post=421745"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}