{"id":208361,"date":"2024-01-03T09:43:21","date_gmt":"2024-01-03T09:43:21","guid":{"rendered":"https:\/\/www.ninjaone.com\/script-hub\/configurer-les-parametres-de-controle-de-compte-utilisateur-uac-sur-windows\/"},"modified":"2024-03-04T18:56:05","modified_gmt":"2024-03-04T18:56:05","slug":"configurer-les-parametres-de-controle-de-compte-utilisateur-uac-sur-windows","status":"publish","type":"script_hub","link":"https:\/\/www.ninjaone.com\/fr\/script-hub\/configurer-les-parametres-de-controle-de-compte-utilisateur-uac-sur-windows\/","title":{"rendered":"Comment configurer les param\u00e8tres de contr\u00f4le de compte utilisateur (UAC) sur Windows (script PowerShell)"},"content":{"rendered":"

Le contr\u00f4le de compte utilisateur (UAC)<\/a> est une fonction de s\u00e9curit\u00e9 essentielle des syst\u00e8mes d’exploitation Windows. Il agit comme un gardien, emp\u00eachant toute modification non autoris\u00e9e de votre ordinateur. L’UAC fonctionne en d\u00e9finissant diff\u00e9rents niveaux d’autorisation pour l’utilisateur, allant de la notification syst\u00e9matique des modifications \u00e0 la non-notification. En comprenant ces niveaux et la mani\u00e8re dont ils affectent les autorisations des utilisateurs, les professionnels de l’informatique peuvent mieux s\u00e9curiser leurs syst\u00e8mes.<\/p>\n

Contexte<\/h2>\n

Introduit avec Windows Vista, le contr\u00f4le de compte utilisateur (UAC) est un \u00e9l\u00e9ment capital de la s\u00e9curit\u00e9 de Windows. Lorsque certaines modifications sont tent\u00e9es, l’UAC demande aux utilisateurs une autorisation ou un mot de passe d’administrateur avant d’autoriser l’ex\u00e9cution de la t\u00e2che. Ce script, con\u00e7u pour Windows 7 et Windows Server 2012, permet de configurer ces param\u00e8tres UAC de mani\u00e8re syst\u00e9matique<\/strong>.<\/p>\n

Le script<\/h2>\n
#Requires -Version 2.0\r\n\r\n<#\r\n.SYNOPSIS\r\n    Configures UAC.\r\n.DESCRIPTION\r\n    Configures UAC to defaults if no parameters are specified.\r\n.EXAMPLE\r\n    No parameters needed.\r\n    Sets all UAC settings to Microsoft's defaults.\r\n.EXAMPLE\r\n     -ConsentPromptBehaviorAdmin 5\r\n    Sets ConsentPromptBehaviorAdmin to 5\r\n.EXAMPLE\r\n    PS C:> Set-Uac.ps1\r\n    Sets all UAC settings to MS defaults.\r\n.OUTPUTS\r\n    None\r\n.NOTES\r\n    Minimum OS Architecture Supported: Windows 7, Windows Server 2012\r\n    This script will show before and after UAC settings.\r\n    Release Notes:\r\n    Initial Release\r\nBy using this script, you indicate your acceptance of the following legal terms as well as our Terms of Use at https:\/\/www.ninjaone.com\/terms-of-use.\r\n    Ownership Rights: NinjaOne owns and will continue to own all right, title, and interest in and to the script (including the copyright). NinjaOne is giving you a limited license to use the script in accordance with these legal terms. \r\n    Use Limitation: You may only use the script for your legitimate personal or internal business purposes, and you may not share the script with another party. \r\n    Republication Prohibition: Under no circumstances are you permitted to re-publish the script in any script library or website belonging to or under the control of any other software provider. \r\n    Warranty Disclaimer: The script is provided \u201cas is\u201d and \u201cas available\u201d, without warranty of any kind. NinjaOne makes no promise or guarantee that the script will be free from defects or that it will meet your specific needs or expectations. \r\n    Assumption of Risk: Your use of the script is at your own risk. You acknowledge that there are certain inherent risks in using the script, and you understand and assume each of those risks. \r\n    Waiver and Release: You will not hold NinjaOne responsible for any adverse or unintended consequences resulting from your use of the script, and you waive any legal or equitable rights or remedies you may have against NinjaOne relating to your use of the script. \r\n    EULA: If you are a NinjaOne customer, your use of the script is subject to the End User License Agreement applicable to you (EULA).\r\n.COMPONENT\r\n    LocalUserAccountManagement\r\n#>\r\n\r\n[CmdletBinding()]\r\nparam (\r\n    [Parameter()][ValidateRange(0, 5)][int]$ConsentPromptBehaviorAdmin = 5,\r\n    [Parameter()][ValidateRange(0, 3)][int]$ConsentPromptBehaviorUser = 3,\r\n    [Parameter()][ValidateRange(0, 1)][int]$EnableInstallerDetection = 1,\r\n    [Parameter()][ValidateRange(0, 1)][int]$EnableLUA = 1,\r\n    [Parameter()][ValidateRange(0, 1)][int]$EnableVirtualization = 1,\r\n    [Parameter()][ValidateRange(0, 1)][int]$PromptOnSecureDesktop = 1,\r\n    [Parameter()][ValidateRange(0, 1)][int]$ValidateAdminCodeSignatures = 0,\r\n    [Parameter()][ValidateRange(0, 1)][int]$FilterAdministratorToken = 0\r\n)\r\n\r\nbegin {\r\n    function Test-IsElevated {\r\n        $id = [System.Security.Principal.WindowsIdentity]::GetCurrent()\r\n        $p = New-Object System.Security.Principal.WindowsPrincipal($id)\r\n        if ($p.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator))\r\n        { Write-Output $true }\r\n        else\r\n        { Write-Output $false }\r\n    }\r\n    function Set-ItemProp {\r\n        param (\r\n            $Path,\r\n            $Name,\r\n            $Value,\r\n            [ValidateSet(\"DWord\", \"QWord\", \"String\", \"ExpandedString\", \"Binary\", \"MultiString\", \"Unknown\")]\r\n            $PropertyType = \"DWord\"\r\n        )\r\n        if ((Get-ItemProperty -Path $Path -Name $Name -ErrorAction SilentlyContinue)) {\r\n            Set-ItemProperty -Path $Path -Name $Name -Value $Value -Force -Confirm:$false | Out-Null\r\n        }\r\n        else {\r\n            New-ItemProperty -Path $Path -Name $Name -Value $Value -PropertyType $PropertyType -Force -Confirm:$false | Out-Null\r\n        }\r\n    }\r\n}\r\nprocess {\r\n    if (-not (Test-IsElevated)) {\r\n        Write-Error -Message \"Access Denied. Please run with Administrator privileges.\"\r\n        exit 1\r\n    }\r\n    $path = \"HKLM:SOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem\"\r\n    $filter = \"ConsentPromptBehaviorAdmin|ConsentPromptBehaviorUser|EnableInstallerDetection|EnableLUA|EnableVirtualization|PromptOnSecureDesktop|ValidateAdminCodeSignatures|FilterAdministratorToken\"\r\n    Write-Host \"Before:\"\r\n    (Get-ItemProperty $path).psobject.properties | Where-Object { $_.name -match $filter } | Select-Object name, value\r\n\r\n    try {\r\n        $filter -split '|' | ForEach-Object {\r\n            Set-ItemProp -Path $Path -Name $_ -Value (Get-Variable -Name $_).Value\r\n        }\r\n    }\r\n    catch {\r\n        Write-Error $_\r\n        exit 1\r\n    }\r\n\r\n    Write-Host \"After:\"\r\n    (Get-ItemProperty $path).psobject.properties | Where-Object { $_.name -match $filter } | Select-Object name, value\r\n}\r\nend {}<\/pre>\n
 <\/p>\n\n
Acc\u00e9dez \u00e0 plus de 700 scripts dans le Dojo NinjaOne<\/p>\n
Obtenez l’acc\u00e8s<\/a><\/p>\n<\/div>\n
Cas d’utilisation potentiels<\/h2>\n
Prenons le cas d’une entreprise qui d\u00e9ploie un nouveau logiciel n\u00e9cessitant des param\u00e8tres UAC sp\u00e9cifiques pour garantir des performances et une s\u00e9curit\u00e9 optimales. Au lieu de configurer manuellement chaque ordinateur, l’\u00e9quipe informatique peut utiliser ce script pour s’assurer que chaque machine est configur\u00e9e correctement. En outre, pour les entreprises qui doivent respecter des r\u00e8gles de s\u00e9curit\u00e9 strictes, ce script peut aider \u00e0 garantir la conformit\u00e9 en normalisant les param\u00e8tres UAC dans tous les domaines.<\/p>\n
FAQ<\/h2>\n
    \n
  • Quels sont les syst\u00e8mes d’exploitation qui prennent en charge ce script ?
    \nLe script est con\u00e7u pour Windows 7, Windows Server 2012 et les versions plus r\u00e9centes.<\/li>\n
  • Quelles sont les autorisations requises pour ex\u00e9cuter le script ?
    \nLe script doit \u00eatre ex\u00e9cut\u00e9 avec des privil\u00e8ges d’administrateur.<\/li>\n
  • Y a-t-il des risques li\u00e9s \u00e0 l’utilisation de ce script ?
    \nComme pour tout script qui modifie les param\u00e8tres du syst\u00e8me, il existe un risque de cons\u00e9quences involontaires. Veillez toujours \u00e0 effectuer des sauvegardes et des tests avant de proc\u00e9der \u00e0 un d\u00e9ploiement \u00e0 grande \u00e9chelle.<\/li>\n<\/ul>\n
    Implications en mati\u00e8re de s\u00e9curit\u00e9<\/h2>\n
    Les param\u00e8tres UAC jouent un r\u00f4le essentiel dans la s\u00e9curit\u00e9 du syst\u00e8me. Des param\u00e8tres incorrects peuvent, par inadvertance, donner le feu vert \u00e0 l’installation ou \u00e0 l’ex\u00e9cution de logiciels malveillants sans l’autorisation de l’utilisateur. En automatisant le processus de configuration, ce script r\u00e9duit les risques d’erreur humaine mais souligne l’importance de comprendre les implications de chaque param\u00e8tre.<\/p>\n
    Recommandations<\/h2>\n
      \n
    • Sauvegardez toujours le registre avant d’effectuer des modifications afin de vous pr\u00e9munir contre d’\u00e9ventuels probl\u00e8mes.<\/li>\n
    • Testez le script sur une seule machine ou dans un environnement contr\u00f4l\u00e9 avant de le d\u00e9ployer sur l’ensemble du r\u00e9seau.<\/li>\n
    • Restez inform\u00e9 des bonnes pratiques en mati\u00e8re de param\u00e8tres UAC afin de garantir une s\u00e9curit\u00e9 optimale.<\/li>\n<\/ul>\n
      Conclusions<\/h2>\n
      Dans le monde informatique en constante \u00e9volution, des outils tels que ce script de configuration du contr\u00f4le de compte utilisateur (UAC) sont d’une valeur inestimable. En comprenant et en exploitant ces outils, les professionnels de l’informatique peuvent garantir un environnement plus s\u00fbr et plus efficace \u00e0 leurs utilisateurs.<\/p>\n","protected":false},"author":35,"featured_media":207135,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","_lmt_disableupdate":"no","_lmt_disable":""},"operating_system":[4212],"use_cases":[4287],"class_list":["post-208361","script_hub","type-script_hub","status-publish","has-post-thumbnail","hentry","script_hub_category-windows"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/script_hub\/208361","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/script_hub"}],"about":[{"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/types\/script_hub"}],"author":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/users\/35"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/comments?post=208361"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/media\/207135"}],"wp:attachment":[{"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/media?parent=208361"}],"wp:term":[{"taxonomy":"script_hub_category","embeddable":true,"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/operating_system?post=208361"},{"taxonomy":"use_cases","embeddable":true,"href":"https:\/\/www.ninjaone.com\/fr\/wp-json\/wp\/v2\/use_cases?post=208361"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}