{"id":424667,"date":"2025-02-17T08:56:48","date_gmt":"2025-02-17T08:56:48","guid":{"rendered":"https:\/\/www.ninjaone.com\/?post_type=script_hub&#038;p=424667"},"modified":"2025-02-17T08:56:48","modified_gmt":"2025-02-17T08:56:48","slug":"ueberpruefung-der-benutzerkontensteuerung","status":"publish","type":"script_hub","link":"https:\/\/www.ninjaone.com\/de\/script-hub\/ueberpruefung-der-benutzerkontensteuerung\/","title":{"rendered":"Wie man UAC-\u00dcberpr\u00fcfungen in Windows mit PowerShell optimiert"},"content":{"rendered":"<h2>Die wichtigsten Erkenntnisse<\/h2>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><strong>Automatisierte \u00dcberpr\u00fcfung der Benutzerkontensteuerung (UAC)<\/strong>: Das Skript bietet eine automatisierte L\u00f6sung f\u00fcr die \u00dcberpr\u00fcfung der Benutzerkontensteuerungs-Einstellungen auf Windows-Systemen.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Verbesserte Sicherheit<\/strong>: Es stellt sicher, dass die UAC-Einstellungen mit den Sicherheitsstandards \u00fcbereinstimmen und erh\u00f6ht so die Systemsicherheit erheblich.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><strong>Protokollierung in benutzerdefinierten Feldern<\/strong>: Das Skript integriert mit NinjaOne f\u00fcr die Protokollierung von UAC-Stufen in benutzerdefinierten Feldern und verbessert so die Aufrechterhaltung von Datens\u00e4tzen und die Berichterstattung.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><strong>Unterst\u00fctzt Windows 7 und h\u00f6her<\/strong>: Das Skript ist mit Windows 7, Windows Server 2012 und nachfolgenden Versionen kompatibel.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><strong>Erfordert Administratorrechte<\/strong>: F\u00fcr die Ausf\u00fchrung dieses Skripts sind Administratorrechte erforderlich, um auf die Registrierungseinstellungen zuzugreifen und sie zu \u00e4ndern.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"6\" data-aria-level=\"1\"><strong>Vielseitigkeit im Einsatz<\/strong>: Ideal f\u00fcr MSPs und IT-Expert:innen, die Sicherheit \u00fcber mehrere Systeme hinweg gew\u00e4hrleisten m\u00fcssen.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"7\" data-aria-level=\"1\"><strong>Proaktive Risikominimierung<\/strong>: Die regelm\u00e4\u00dfige Anwendung hilft, unautorisierte System\u00e4nderungen proaktiv zu verhindern.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"8\" data-aria-level=\"1\"><strong>Integration mit Managed Services<\/strong>: Besonders vorteilhaft f\u00fcr diejenigen, die NinjaOne f\u00fcr ein zentrales IT-Management einsetzen.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"9\" data-aria-level=\"1\"><strong>F\u00fchrung von Protokollierung f\u00fcr Compliance-Zwecke<\/strong>: Das Skript protokolliert UAC-Einstellungen und hilft so bei der Einhaltung von IT-Sicherheitsrichtlinien und bei Audits.<\/li>\n<\/ul>\n<h2>Vorwort<\/h2>\n<p>Die Benutzerkontensteuerung (UAC) ist eine wichtige Komponente des Windows-Betriebssystems, die eine zus\u00e4tzliche Sicherheitsebene bietet. Sie beschr\u00e4nkt die Anwendung der Software im Wesentlichen auf die Standardbenutzerrechte, bis ein Administrator eine Erh\u00f6hung der Berechtigungsstufe genehmigt. In der dynamischen Welt der IT-Sicherheit, in der Schwachstellen von nicht autorisierten Benutzer:innen ausgenutzt werden k\u00f6nnen, ist die Aufrechterhaltung optimaler UAC-Einstellungen essenziell. In diesem Blogbeitrag wird ein PowerShell-Skript vorgestellt, mit dem die UAC-Einstellungen auf einem Windows-Computer \u00fcberpr\u00fcft und konfiguriert werden k\u00f6nnen. Dieses Tool ist f\u00fcr IT-Expert:innen und <a href=\"https:\/\/www.ninjaone.com\/de\/was-ist-ein-msp\">Managed Service Provider (MSPs)<\/a> von gro\u00dfer Bedeutung.<\/p>\n<h2>Kontext<\/h2>\n<p>Das betreffende Skript bietet einen umfassenden Ansatz zur \u00dcberpr\u00fcfung der UAC-Stufe auf einem Windows-System. IT-Expert:innen und MSPs ben\u00f6tigen solche Tools h\u00e4ufig, um sicherzustellen, dass die von ihnen verwalteten Systeme bestimmte Sicherheitsstandards einhalten. Das Skript pr\u00fcft nicht nur, sondern erleichtert auch die Aktualisierung der UAC-Einstellungen und kann diese in einem benutzerdefinierten Feld f\u00fcr Berichtszwecke protokollieren. Seine F\u00e4higkeit, in der NinjaOne-Umgebung zu laufen, erh\u00f6ht seinen Nutzen f\u00fcr Managed-IT-Services noch weiter.<\/p>\n<h2>Das Skript zur \u00dcberpr\u00fcfung der Benutzerkontensteuerung<\/h2>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"powershell\">#Requires -Version 2\r\n\r\n&lt;#\r\n.SYNOPSIS\r\n    Condition\/Audit UAC Level. Can save the UAC Level to a custom field if specified.\r\n.DESCRIPTION\r\n    Condition\/Audit UAC Level. Can save the UAC Level to a custom field if specified.\r\n\r\n    Exit Code of 0 is that the UAC Level is set to the defaults or higher\r\n    Exit Code of 1 is that the UAC Level is to lower than defaults\r\n    Exit Code of 2 is when this fails to update a custom field\r\n.EXAMPLE\r\n     -CustomField \"uac\"\r\n    Saves the UAC Level to a custom field.\r\n.OUTPUTS\r\n    String[]\r\n.NOTES\r\n    Minimum OS Architecture Supported: Windows 7, Windows Server 2012\r\n    Release Notes: Renamed script and added Script Variable support\r\nBy using this script, you indicate your acceptance of the following legal terms as well as our Terms of Use at https:\/\/www.ninjaone.com\/terms-of-use.\r\n    Ownership Rights: NinjaOne owns and will continue to own all right, title, and interest in and to the script (including the copyright). NinjaOne is giving you a limited license to use the script in accordance with these legal terms. \r\n    Use Limitation: You may only use the script for your legitimate personal or internal business purposes, and you may not share the script with another party. \r\n    Republication Prohibition: Under no circumstances are you permitted to re-publish the script in any script library or website belonging to or under the control of any other software provider. \r\n    Warranty Disclaimer: The script is provided \u201cas is\u201d and \u201cas available\u201d, without warranty of any kind. NinjaOne makes no promise or guarantee that the script will be free from defects or that it will meet your specific needs or expectations. \r\n    Assumption of Risk: Your use of the script is at your own risk. You acknowledge that there are certain inherent risks in using the script, and you understand and assume each of those risks. \r\n    Waiver and Release: You will not hold NinjaOne responsible for any adverse or unintended consequences resulting from your use of the script, and you waive any legal or equitable rights or remedies you may have against NinjaOne relating to your use of the script. \r\n    EULA: If you are a NinjaOne customer, your use of the script is subject to the End User License Agreement applicable to you (EULA).\r\n#&gt;\r\n\r\n[CmdletBinding()]\r\nparam (\r\n    [Parameter()]\r\n    [String]$CustomField\r\n)\r\n\r\nbegin {\r\n    if ($env:customFieldName -and $env:customFieldName -notlike \"null\") { $CustomField = $env:customFieldName }\r\n    \r\n    # https:\/\/learn.microsoft.com\/en-us\/windows\/security\/identity-protection\/user-account-control\/user-account-control-group-policy-and-registry-key-settings#registry-key-settings\r\n    # Define the path in the registry\r\n    $Path = \"HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\"\r\n\r\n    # Define the values to check\r\n    $Values = \"FilterAdministratorToken\",\r\n    \"EnableUIADesktopToggle\",\r\n    \"ConsentPromptBehaviorAdmin\",\r\n    \"ConsentPromptBehaviorUser\",\r\n    \"EnableInstallerDetection\",\r\n    \"ValidateAdminCodeSignatures\",\r\n    \"EnableSecureUIAPaths\",\r\n    \"EnableLUA\",\r\n    \"PromptOnSecureDesktop\",\r\n    \"EnableVirtualization\"\r\n\r\n    # This function is to make it easier to set Ninja Custom Fields.\r\n    function Set-NinjaProperty {\r\n        [CmdletBinding()]\r\n        Param(\r\n            [Parameter(Mandatory = $True)]\r\n            [String]$Name,\r\n            [Parameter()]\r\n            [String]$Type,\r\n            [Parameter(Mandatory = $True, ValueFromPipeline = $True)]\r\n            $Value,\r\n            [Parameter()]\r\n            [String]$DocumentName\r\n        )\r\n\r\n        # If we're requested to set the field value for a Ninja document we'll specify it here.\r\n        $DocumentationParams = @{}\r\n        if ($DocumentName) { $DocumentationParams[\"DocumentName\"] = $DocumentName }\r\n\r\n        # This is a list of valid fields we can set. If no type is given we'll assume the input doesn't have to be changed in any way.\r\n        $ValidFields = \"Attachment\", \"Checkbox\", \"Date\", \"Date or Date Time\", \"Decimal\", \"Dropdown\", \"Email\", \"Integer\", \"IP Address\", \"MultiLine\", \"MultiSelect\", \"Phone\", \"Secure\", \"Text\", \"Time\", \"URL\"\r\n        if ($Type -and $ValidFields -notcontains $Type) { Write-Warning \"$Type is an invalid type! Please check here for valid types. https:\/\/ninjarmm.zendesk.com\/hc\/en-us\/articles\/16973443979789-Command-Line-Interface-CLI-Supported-Fields-and-Functionality\" }\r\n\r\n        # The below field requires additional information in order to set\r\n        $NeedsOptions = \"Dropdown\"\r\n        if ($DocumentName) {\r\n            if ($NeedsOptions -contains $Type) {\r\n                # We'll redirect the error output to the success stream to make it easier to error out if nothing was found or something else went wrong.\r\n                $NinjaPropertyOptions = Ninja-Property-Docs-Options -AttributeName $Name @DocumentationParams 2&gt;&amp;1\r\n            }\r\n        }\r\n        else {\r\n            if ($NeedsOptions -contains $Type) {\r\n                $NinjaPropertyOptions = Ninja-Property-Options -Name $Name 2&gt;&amp;1\r\n            }\r\n        }\r\n\r\n        # If we received some sort of error it should have an exception property and we'll exit the function with that error information.\r\n        if ($NinjaPropertyOptions.Exception) { throw $NinjaPropertyOptions }\r\n\r\n        # The below type's require values not typically given in order to be set. The below code will convert whatever we're given into a format ninjarmm-cli supports.\r\n        switch ($Type) {\r\n            \"Checkbox\" {\r\n                # While it's highly likely we were given a value like \"True\" or a boolean datatype it's better to be safe than sorry.\r\n                $NinjaValue = [System.Convert]::ToBoolean($Value)\r\n            }\r\n            \"Date or Date Time\" {\r\n                # Ninjarmm-cli is expecting the time to be representing as a Unix Epoch string. So we'll convert what we were given into that format.\r\n                $Date = (Get-Date $Value).ToUniversalTime()\r\n                $TimeSpan = New-TimeSpan (Get-Date \"1970-01-01 00:00:00\") $Date\r\n                $NinjaValue = $TimeSpan.TotalSeconds\r\n            }\r\n            \"Dropdown\" {\r\n                # Ninjarmm-cli is expecting the guid of the option we're trying to select. So we'll match up the value we were given with a guid.\r\n                $Options = $NinjaPropertyOptions -replace '=', ',' | ConvertFrom-Csv -Header \"GUID\", \"Name\"\r\n                $Selection = $Options | Where-Object { $_.Name -eq $Value } | Select-Object -ExpandProperty GUID\r\n\r\n                if (-not $Selection) {\r\n                    throw \"Value is not present in dropdown\"\r\n                }\r\n\r\n                $NinjaValue = $Selection\r\n            }\r\n            default {\r\n                # All the other types shouldn't require additional work on the input.\r\n                $NinjaValue = $Value\r\n            }\r\n        }\r\n\r\n        # We'll need to set the field differently depending on if its a field in a Ninja Document or not.\r\n        if ($DocumentName) {\r\n            $CustomField = Ninja-Property-Docs-Set -AttributeName $Name -AttributeValue $NinjaValue @DocumentationParams 2&gt;&amp;1\r\n        }\r\n        else {\r\n            $CustomField = Ninja-Property-Set -Name $Name -Value $NinjaValue 2&gt;&amp;1\r\n        }\r\n\r\n        if ($CustomField.Exception) {\r\n            throw $CustomField\r\n        }\r\n    }\r\n}\r\nprocess {\r\n\r\n    $UacResults = [PSCustomObject]@{}\r\n    # Loop through each value and get each value and add them to $UacResults as a property\r\n    $Values | ForEach-Object {\r\n        $Value = $_\r\n        $Result = $null\r\n        $Result = Get-ItemProperty -Path $Path -Name $Value -ErrorAction SilentlyContinue | Select-Object -ExpandProperty $Value\r\n        if ($null -eq $Result) {\r\n            switch ($Value) {\r\n                'FilterAdministratorToken' { $Result = 0; break }\r\n                'EnableUIADesktopToggle' { $Result = 0; break }\r\n                'ConsentPromptBehaviorAdmin' { $Result = 5; break }\r\n                'ConsentPromptBehaviorUser' { $Result = 3; break }\r\n                'EnableInstallerDetection' { $Result = 0; break } # Assumes enterprise and not Home\r\n                'ValidateAdminCodeSignatures' { $Result = 0; break }\r\n                'EnableSecureUIAPaths' { $Result = 1; break }\r\n                'EnableLUA' { $Result = 1; break }\r\n                'PromptOnSecureDesktop' { $Result = 1; break }\r\n                'EnableVirtualization' { $Result = 1; break }\r\n                Default { $Result = 1 }\r\n            }\r\n        }\r\n        $UacResults | Add-Member -MemberType NoteProperty -Name $Value -Value $Result\r\n    }\r\n\r\n    # Is UAC enabled or disabled\r\n    if (\r\n        $UacResults.ConsentPromptBehaviorAdmin -eq 5 -and\r\n        $UacResults.ConsentPromptBehaviorUser -eq 3 -and\r\n        $UacResults.EnableLUA -eq 1 -and\r\n        $UacResults.FilterAdministratorToken -eq 0 -and\r\n        $UacResults.EnableUIADesktopToggle -eq 0 -and\r\n        $UacResults.ConsentPromptBehaviorAdmin -eq 5 -and\r\n        $UacResults.ConsentPromptBehaviorUser -eq 3 -and\r\n        # Enterprise\r\n        (\r\n            (\r\n                (Get-CimInstance -ClassName Win32_OperatingSystem).Caption -notlike \"*Home*\" -and $UacResults.EnableInstallerDetection -eq 1\r\n            ) -or\r\n            (\r\n                (Get-CimInstance -ClassName Win32_OperatingSystem).Caption -like \"*Home*\" -and $UacResults.EnableInstallerDetection -eq 0\r\n            )\r\n        ) -and\r\n        $UacResults.ValidateAdminCodeSignatures -eq 0 -and\r\n        $UacResults.EnableSecureUIAPaths -eq 1 -and\r\n        $UacResults.EnableLUA -eq 1 -and\r\n        $UacResults.PromptOnSecureDesktop -eq 1 -and\r\n        $UacResults.EnableVirtualization -eq 1\r\n    ) {\r\n        \"UAC Enabled with defaults.\" | Write-Host\r\n    }\r\n    elseif (\r\n        $UacResults.EnableLUA -eq 0 -or\r\n        $UacResults.ConsentPromptBehaviorAdmin -eq 0 -or\r\n        $UacResults.PromptOnSecureDesktop -eq 0\r\n    ) {\r\n        \"UAC Disabled.\" | Write-Host\r\n    }\r\n\r\n    # Get the UAC Level\r\n    $UACLevel = if (\r\n        $UacResults.EnableLUA -eq 0\r\n    ) {\r\n        0\r\n    }\r\n    elseif (\r\n        $UacResults.ConsentPromptBehaviorAdmin -eq 5 -and\r\n        $UacResults.PromptOnSecureDesktop -eq 0 -and\r\n        $UacResults.EnableLUA -eq 1\r\n    ) {\r\n        1\r\n    }\r\n    elseif (\r\n        $UacResults.ConsentPromptBehaviorAdmin -eq 5 -and\r\n        $UacResults.PromptOnSecureDesktop -eq 1 -and\r\n        $UacResults.EnableLUA -eq 1\r\n    ) {\r\n        2\r\n    }\r\n    elseif (\r\n        $UacResults.ConsentPromptBehaviorAdmin -eq 2 -and\r\n        $UacResults.PromptOnSecureDesktop -eq 1 -and\r\n        $UacResults.EnableLUA -eq 1\r\n    ) {\r\n        3\r\n    }\r\n\r\n    # Get the Text version of the UAC Level\r\n    $UACLevelText = switch ($UACLevel) {\r\n        0 { \"Never notify\"; break }\r\n        1 { \"Notify me only (do not dim my desktop)\"; break }\r\n        2 { \"Notify me only (default)\"; break }\r\n        3 { \"Always notify\"; break }\r\n        Default { \"Unknown\"; break }\r\n    }\r\n\r\n    # Output the UAC Level\r\n    \"UAC Level: $UACLevel = $UACLevelText\" | Write-Host\r\n\r\n    # Output the UAC settings\r\n    $UacResults | Out-String | Write-Host\r\n\r\n    # When CustomField is used save the UAC Level to that custom field\r\n    if ($CustomField) {\r\n        try {\r\n            Set-NinjaProperty -Name $CustomField -Value \"$UACLevel = $UACLevelText\" -ErrorAction Stop\r\n        }\r\n        catch {\r\n            Write-Error \"Failed to update Custom Field ($CustomField)\"\r\n            exit 2\r\n        }\r\n    }\r\n\r\n    # Return and exit code of 0 if UAC is set to the default or higher, or 1 when not set to the default\r\n    if ($UACLevel -ge 2) {\r\n        exit 0\r\n    }\r\n    elseif ($UACLevel -lt 2) {\r\n        exit 1\r\n    }\r\n    else {\r\n        exit 1\r\n    }\r\n}\r\nend {\r\n    \r\n    \r\n    \r\n}<\/pre>\n<p>&nbsp;<\/p>\n\n<div class=\"in-context-cta\"><p>Greifen Sie auf \u00fcber 300 Skripte im NinjaOne Dojo zu.<\/p>\n<p><a href=\"https:\/\/www.ninjaone.com\/freetrialform\/\">Zugang erhalten<\/a><\/p>\n<\/div>\n<h2>Detaillierte Aufschl\u00fcsselung<\/h2>\n<p>Das Skript arbeitet in mehreren Stufen:<\/p>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><strong>Initialisierung der Parameter<\/strong>: Es beginnt mit der Definition des Parameters <strong>CustomField<\/strong>, mit dem ein benutzerdefiniertes Feld zur Protokollierung angegeben werden kann.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Einrichtung der Umgebung<\/strong>: Es pr\u00fcft auf Umgebungsvariablen und richtet Registrierungspfade und Werte im Zusammenhang mit den UAC-Einstellungen ein.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><strong>Definition der Parameter<\/strong>: Die Funktion <strong>Set-NinjaProperty<\/strong> ist definiert, um bei der Aktualisierung der benutzerdefinierten Felder in NinjaOne zu helfen. Dieser Parameter ist f\u00fcr MSPs, die NinjaOne f\u00fcr die Verwaltung von Kundensystemen verwenden, unerl\u00e4sslich.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><strong>Bestimmung der UAC-Stufe<\/strong>: Das Skript durchl\u00e4uft dann verschiedene UAC-bezogene Registrierungseinstellungen und vergleicht sie mit Standard- oder sicheren Werten, um die UAC-Stufe des Systems zu ermitteln.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><strong>Ausgabe und Protokollierung<\/strong>: Er gibt die UAC-Stufe und die Einstellungen auf der Konsole aus. Wenn der Parameter <strong>CustomField<\/strong> verwendet wird, protokolliert das Skript die UAC-Stufe in diesem benutzerdefinierten Feld.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"6\" data-aria-level=\"1\"><strong>Beendigungs-Code<\/strong>: Zum Schluss gibt das Skript einen Beendigungs-Code zur\u00fcck, der auf der ermittelten UAC-Stufe basiert.<\/li>\n<\/ul>\n<h2>M\u00f6gliche Anwendungsf\u00e4lle<\/h2>\n<p>Stellen Sie sich vor, ein MSP verwaltet ein Computernetzwerk f\u00fcr einen Kunden. Er kann dieses Skript auf allen Rechnern einsetzen, um sicherzustellen, dass die UAC-Einstellungen auf der empfohlenen Stufe sind, und so unbefugte \u00c4nderungen verhindern, die die Sicherheit gef\u00e4hrden k\u00f6nnten.<\/p>\n<h2>Vergleiche<\/h2>\n<p>Traditionell kann die UAC-\u00dcberpr\u00fcfung manuelle Kontrollen oder weniger ausgefeilte Skripte umfassen. Dieses Skript bietet einen automatisierten, detaillierten und integrierten Ansatz, insbesondere f\u00fcr Umgebungen, die \u00fcber NinjaOne verwaltet werden.<\/p>\n<h2>FAQs<\/h2>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><strong>Kann dieses Skript auf jeder Windows-Version ausgef\u00fchrt werden?<\/strong>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\">Es unterst\u00fctzt Windows 7, Windows Server 2012 und neuere Versionen.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Sind f\u00fcr die Ausf\u00fchrung dieses Skripts Administratorrechte erforderlich?<\/strong>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\">Ja, es erfordert Administratorrechte, um auf die Registrierungseinstellungen zuzugreifen und sie zu \u00e4ndern.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><strong>Kann das Skript die UAC-Einstellungen \u00e4ndern?<\/strong>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\">Es ist zwar in erster Linie f\u00fcr Audits gedacht, kann aber erweitert werden, um Einstellungen auf der Grundlage von Audit-Ergebnissen zu \u00e4ndern.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2>Folgen<\/h2>\n<p>Falsche UAC-Einstellungen k\u00f6nnen ein System anf\u00e4llig f\u00fcr unbefugten Zugriff und die m\u00f6gliche Installation von Malware machen. Dieses Skript hilft bei der Aufrechterhaltung optimaler Sicherheitskonfigurationen und minimiert so solche Risiken.<\/p>\n<h2>Empfehlungen<\/h2>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\">F\u00fchren Sie das Skript regelm\u00e4\u00dfig aus, um die kontinuierliche Einhaltung der Sicherheitsstandards zu gew\u00e4hrleisten.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\">Integrieren Sie das Skript in regelm\u00e4\u00dfige Wartungspl\u00e4ne f\u00fcr eine automatisierte Verwaltung.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"6\" data-aria-level=\"1\">Verwenden Sie die Protokollierungsfunktion, um eine Aufzeichnung der UAC-Einstellungen f\u00fcr Pr\u00fcfpfade zu erstellen.<\/li>\n<\/ul>\n<h2>Abschlie\u00dfende \u00dcberlegungen<\/h2>\n<p>Im Zusammenhang mit der <a href=\"https:\/\/www.ninjaone.com\/de\/it-management-fuer-unternehmen\/infrastruktur\/\">Verwaltung der IT-Infrastruktur,<\/a> insbesondere bei der Verwendung von NinjaOne, ist dieses PowerShell-Skript ein wertvolles Asset. Es automatisiert einen wichtigen Aspekt der Sicherheitsverwaltung und stellt sicher, dass die UAC-Einstellungen im gesamten Netzwerk eines Unternehmens auf einem optimalen Niveau f\u00fcr Sicherheit und Compliance bleiben. NinjaOne-Anwender:innen k\u00f6nnen besonders von den Integrationsm\u00f6glichkeiten des Skripts profitieren, was die Rolle der Plattform als <a href=\"https:\/\/www.ninjaone.com\/de\/\">umfassende L\u00f6sung f\u00fcr Managed-IT-Services<\/a> unterstreicht.<\/p>\n","protected":false},"author":35,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","_lmt_disableupdate":"no","_lmt_disable":""},"operating_system":[4212],"use_cases":[4307],"class_list":["post-424667","script_hub","type-script_hub","status-publish","hentry","script_hub_category-windows"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/script_hub\/424667","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/script_hub"}],"about":[{"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/types\/script_hub"}],"author":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/users\/35"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/comments?post=424667"}],"wp:attachment":[{"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/media?parent=424667"}],"wp:term":[{"taxonomy":"script_hub_category","embeddable":true,"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/operating_system?post=424667"},{"taxonomy":"use_cases","embeddable":true,"href":"https:\/\/www.ninjaone.com\/de\/wp-json\/wp\/v2\/use_cases?post=424667"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}