{"id":255919,"date":"2024-05-17T11:53:43","date_gmt":"2024-05-17T11:53:43","guid":{"rendered":"https:\/\/www.ninjaone.com\/?post_type=script_hub&p=255919"},"modified":"2024-05-17T11:53:43","modified_gmt":"2024-05-17T11:53:43","slug":"montar-y-desmontar-archivos-iso","status":"publish","type":"script_hub","link":"https:\/\/www.ninjaone.com\/es\/script-hub\/montar-y-desmontar-archivos-iso\/","title":{"rendered":"C\u00f3mo montar y desmontar archivos ISO din\u00e1micamente con PowerShell"},"content":{"rendered":"

En este post, proporcionaremos un script PowerShell que los administradores de TI pueden utilizar para montar y desmontar archivos ISO<\/strong> din\u00e1micamente.<\/p>\n

Antecedentes<\/h2>\n

Los archivos ISO, esencialmente una copia completa de un disco en formato digital, se utilizan mucho para distribuir software (incluido malware, por desgracia<\/a>). Los profesionales de TI y los proveedores de servicios gestionados (MSP)<\/a> pueden preferir bloquear el montaje de archivos ISO en general, o pueden\u00a0encontrarse con la necesidad de activar o desactivar el montaje de estas im\u00e1genes ISO de forma din\u00e1mica, especialmente en sistemas empresariales. Este script de PowerShell ayuda a controlar esta funci\u00f3n con precisi\u00f3n, garantizando que la seguridad y el cumplimiento de las pol\u00edticas se respeten con creces.<\/p>\n

El script para montar y desmontar archivos ISO din\u00e1micamente<\/h2>\n
#Requires -Version 5.1\r\n\r\n<#\r\n.SYNOPSIS\r\n    Enables or disables the mounting of ISO images.\r\n.DESCRIPTION\r\n    Enables or disables the mounting of ISO images.\r\n.EXAMPLE\r\n     -Enable\r\n    Enables mounting of ISO images.\r\n.EXAMPLE\r\n     -Disable\r\n    Disables mounting of ISO images.\r\n.OUTPUTS\r\n    None\r\n.NOTES\r\n    Minimum OS Architecture Supported: Windows 10, Windows Server 2016\r\n    Release Notes:\r\n    Initial Release\r\nBy using this script, you indicate your acceptance of the following legal terms as well as our Terms of Use at https:\/\/www.ninjaone.com\/terms-of-use.\r\n    Ownership Rights: NinjaOne owns and will continue to own all right, title, and interest in and to the script (including the copyright). NinjaOne is giving you a limited license to use the script in accordance with these legal terms. \r\n    Use Limitation: You may only use the script for your legitimate personal or internal business purposes, and you may not share the script with another party. \r\n    Republication Prohibition: Under no circumstances are you permitted to re-publish the script in any script library or website belonging to or under the control of any other software provider. \r\n    Warranty Disclaimer: The script is provided \u201cas is\u201d and \u201cas available\u201d, without warranty of any kind. NinjaOne makes no promise or guarantee that the script will be free from defects or that it will meet your specific needs or expectations. \r\n    Assumption of Risk: Your use of the script is at your own risk. You acknowledge that there are certain inherent risks in using the script, and you understand and assume each of those risks. \r\n    Waiver and Release: You will not hold NinjaOne responsible for any adverse or unintended consequences resulting from your use of the script, and you waive any legal or equitable rights or remedies you may have against NinjaOne relating to your use of the script. \r\n    EULA: If you are a NinjaOne customer, your use of the script is subject to the End User License Agreement applicable to you (EULA).\r\n#>\r\n\r\n[CmdletBinding()]\r\nparam (\r\n    [Parameter()]\r\n    [switch]\r\n    $Enable,\r\n    [Parameter()]\r\n    [switch]\r\n    $Disable\r\n)\r\n\r\nbegin {\r\n    function Set-ItemProp {\r\n        param (\r\n            $Path,\r\n            $Name,\r\n            $Value,\r\n            [ValidateSet(\"DWord\", \"QWord\", \"String\", \"ExpandedString\", \"Binary\", \"MultiString\", \"Unknown\")]\r\n            $PropertyType = \"DWord\"\r\n        )\r\n        # Do not output errors and continue\r\n        $ErrorActionPreference = [System.Management.Automation.ActionPreference]::SilentlyContinue\r\n        if (-not $(Test-Path -Path $Path)) {\r\n            # Check if path does not exist and create the path\r\n            New-Item -Path $Path -Force | Out-Null\r\n        }\r\n        if ((Get-ItemProperty -Path $Path -Name $Name)) {\r\n            # Update property and print out what it was changed from and changed to\r\n            $CurrentValue = Get-ItemProperty -Path $Path -Name $Name\r\n            try {\r\n                Set-ItemProperty -Path $Path -Name $Name -Value $Value -Force -Confirm:$false -ErrorAction Stop | Out-Null\r\n            }\r\n            catch {\r\n                Write-Error $_\r\n            }\r\n            Write-Host \"$Path$Name changed from $CurrentValue to $(Get-ItemProperty -Path $Path -Name $Name)\"\r\n        }\r\n        else {\r\n            # Create property with value\r\n            try {\r\n                New-ItemProperty -Path $Path -Name $Name -Value $Value -PropertyType $PropertyType -Force -Confirm:$false -ErrorAction Stop | Out-Null\r\n            }\r\n            catch {\r\n                Write-Error $_\r\n            }\r\n            Write-Host \"Set $Path$Name to $(Get-ItemProperty -Path $Path -Name $Name)\"\r\n        }\r\n        $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Continue\r\n    }\r\n    function Test-IsElevated {\r\n        $id = [System.Security.Principal.WindowsIdentity]::GetCurrent()\r\n        $p = New-Object System.Security.Principal.WindowsPrincipal($id)\r\n        $p.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator)\r\n    }\r\n}\r\nprocess {\r\n    if (-not (Test-IsElevated)) {\r\n        Write-Error -Message \"Access Denied. Please run with Administrator privileges.\"\r\n        exit 1\r\n    }\r\n\r\n    if ($env:Action -like \"Enable\") {\r\n        $Enable = $true\r\n    }\r\n    elseif ($env:Action -like \"Disable\") {\r\n        $Disable = $true\r\n    }\r\n\r\n    # Use a unique number that isn't likely to be used\r\n    # \"ninja\" to something close to a number plus 1 at the end: \"41470\" + \"1\"\r\n    $GroupName = \"414701\"\r\n\r\n    # Mount HKEY_CLASSES_ROOT as HKCR: for the current session\r\n    New-PSDrive -PSProvider registry -Root HKEY_CLASSES_ROOT -Name HKCR\r\n\r\n    if ($Enable -and $Disable) {\r\n        Write-Error \"Both Enable and Disable can not be used at the same time.\"\r\n        exit 1\r\n    }\r\n    elseif ($Enable) {\r\n        # Enables the use of ISO mounting by removing registry settings\r\n\r\n        # ErrorAction set to SilentlyContinue for when the registry settings don't exist\r\n        Remove-ItemProperty -Path \"HKLM:SOFTWAREPoliciesMicrosoftWindowsDeviceInstallRestrictionsDenyDeviceIDs\" -Name \"$GroupName\" -ErrorAction SilentlyContinue\r\n        Write-Host \"Removed $GroupName from HKLM:SOFTWAREPoliciesMicrosoftWindowsDeviceInstallRestrictionsDenyDeviceIDs\"\r\n\r\n        Remove-ItemProperty -Path \"HKLM:SOFTWAREPoliciesMicrosoftWindowsDeviceInstallRestrictions\" -Name \"DenyDeviceIDsRetroactive\" -ErrorAction SilentlyContinue\r\n        Write-Host \"Removed DenyDeviceIDsRetroactive from HKLM:SOFTWAREPoliciesMicrosoftWindowsDeviceInstallRestrictionsDenyDeviceIDs\"\r\n\r\n        Remove-ItemProperty -Path \"HKCR:Windows.IsoFileshellmount\" -Name \"ProgrammaticAccessOnly\" -ErrorAction SilentlyContinue\r\n        Write-Host \"Removed ProgrammaticAccessOnly from HKCR:Windows.IsoFileshellmount\"\r\n    }\r\n    elseif ($Disable) {\r\n        # Disables the use of ISO mounting by creating registry settings\r\n\r\n        Set-ItemProp -Path \"HKLM:SOFTWAREPoliciesMicrosoftWindowsDeviceInstallRestrictionsDenyDeviceIDs\" -Name \"$GroupName\" -Value \"SCSICdRomMsft____Virtual_DVD-ROM_\" -PropertyType String\r\n        Set-ItemProp -Path \"HKLM:SOFTWAREPoliciesMicrosoftWindowsDeviceInstallRestrictions\" -Name \"DenyDeviceIDsRetroactive\" -Value \"1\" -PropertyType DWord\r\n        Set-ItemProp -Path \"HKCR:Windows.IsoFileshellmount\" -Name \"ProgrammaticAccessOnly\" -Value \"\" -PropertyType String\r\n    }\r\n    else {\r\n        Write-Error \"Enable or Disable is required.\"\r\n        exit 1\r\n    }\r\n    Write-Host \"Any logged in users will need to log out and back in for changes to take effect.\"\r\n}\r\nend {\r\n    $ScriptVariables = @(\r\n        [PSCustomObject]@{\r\n            name           = \"Action\"\r\n            calculatedName = \"action\"\r\n            required       = $true\r\n            defaultValue   = [PSCustomObject]@{\r\n                type  = \"TEXT\"\r\n                value = \"Disable\"\r\n            }\r\n            valueType      = \"DROPDOWN\"\r\n            valueList      = @(\r\n                [PSCustomObject]@{\r\n                    type  = \"UNDEFINED\"\r\n                    value = \"Disable\"\r\n                },\r\n                [PSCustomObject]@{\r\n                    type  = \"UNDEFINED\"\r\n                    value = \"Enable\"\r\n                }\r\n            )\r\n            description    = \"Used to enable or disable the mounting of ISO images.\"\r\n        }\r\n    )\r\n}<\/pre>\n
 <\/p>\n\n
Accede a m\u00e1s de 300 scripts en el Dojo de NinjaOne<\/p>\n
Obt\u00e9n acceso<\/a><\/p>\n<\/div>\n
An\u00e1lisis detallado<\/h2>\n
El script proporcionado est\u00e1 dise\u00f1ado para alternar la capacidad de montaje de im\u00e1genes ISO. Analicemos sus componentes:<\/p>\n