{"id":390373,"date":"2024-12-11T08:50:55","date_gmt":"2024-12-11T08:50:55","guid":{"rendered":"https:\/\/www.ninjaone.com\/?post_type=script_hub&p=390373"},"modified":"2025-01-28T07:12:54","modified_gmt":"2025-01-28T07:12:54","slug":"exclusions-antivirus-powershell","status":"publish","type":"script_hub","link":"https:\/\/www.ninjaone.com\/fr\/script-hub\/exclusions-antivirus-powershell\/","title":{"rendered":"Ajout et gestion d’exclusions antivirus avec PowerShell\u00a0"},"content":{"rendered":"

La gestion des antivirus est un aspect essentiel de l’administration informatique, en particulier pour les fournisseurs de services g\u00e9r\u00e9s (MSP)<\/a> et les professionnels de l’informatique charg\u00e9s de superviser de grandes flottes d’appareils. Configurer ou remplacer efficacement les param\u00e8tres antivirus sur plusieurs terminaux permet de gagner du temps, de garantir la conformit\u00e9 et de maintenir la posture de s\u00e9curit\u00e9. Le script PowerShell<\/a> fourni offre une solution efficace pour d\u00e9finir les exclusions antivirus ou les supprimer de mani\u00e8re structur\u00e9e et automatis\u00e9e.<\/p>\n

Contexte<\/h2>\n

Dans les environnements informatiques, les administrateurs sont souvent confront\u00e9s \u00e0 des sc\u00e9narios dans lesquels ils doivent standardiser les configurations antivirus sur les terminaux. Il peut s’agir de sp\u00e9cifier des versions, des statuts et des \u00e9tats d’antivirus afin de refl\u00e9ter l’\u00e9tat de s\u00e9curit\u00e9 r\u00e9el des appareils ou de remplacer les informations rapport\u00e9es pour des raisons de conformit\u00e9. Le script sert d’outil pour ajouter ou mettre \u00e0 jour les d\u00e9tails de l’antivirus ou pour supprimer compl\u00e8tement les exclusions. Il est particuli\u00e8rement utile pour les entreprises MSP qui g\u00e8rent divers environnements clients \u00e0 l’aide d’outils tels que NinjaOne.<\/p>\n

En s’appuyant sur PowerShell, ce script rationalise les op\u00e9rations, \u00e9limine les erreurs manuelles et garantit la coh\u00e9rence de la gestion des antivirus. Sa capacit\u00e9 \u00e0 g\u00e9rer les exclusions de mani\u00e8re programmatique en fait un atout pour les professionnels de l’informatique qui g\u00e8rent de nombreux appareils ou qui cherchent \u00e0 appliquer des normes de s\u00e9curit\u00e9 \u00e0 l’\u00e9chelle de l’entreprise.<\/p>\n

Le script\u00a0:<\/h2>\n
#Requires -Version 5.1\r\n\r\n<#\r\n.SYNOPSIS\r\n    Add an antivirus to the device details or override the existing antivirus information.\r\n.DESCRIPTION\r\n    Add an antivirus to the device details or override the existing antivirus information.\r\n\r\n    By using this script, you indicate your acceptance of the following legal terms as well as our Terms of Use at https:\/\/www.ninjaone.com\/terms-of-use.\r\n    Ownership Rights: NinjaOne owns and will continue to own all right, title, and interest in and to the script (including the copyright). NinjaOne is giving you a limited license to use the script in accordance with these legal terms. \r\n    Use Limitation: You may only use the script for your legitimate personal or internal business purposes, and you may not share the script with another party. \r\n    Republication Prohibition: Under no circumstances are you permitted to re-publish the script in any script library or website belonging to or under the control of any other software provider. \r\n    Warranty Disclaimer: The script is provided \u201cas is\u201d and \u201cas available\u201d, without warranty of any kind. NinjaOne makes no promise or guarantee that the script will be free from defects or that it will meet your specific needs or expectations. \r\n    Assumption of Risk: Your use of the script is at your own risk. You acknowledge that there are certain inherent risks in using the script, and you understand and assume each of those risks. \r\n    Waiver and Release: You will not hold NinjaOne responsible for any adverse or unintended consequences resulting from your use of the script, and you waive any legal or equitable rights or remedies you may have against NinjaOne relating to your use of the script. \r\n    EULA: If you are a NinjaOne customer, your use of the script is subject to the End User License Agreement applicable to you (EULA).\r\n.EXAMPLE\r\n    -AntivirusName \"My AV\" -AntivirusVersion \"1.0.1\" -AntivirusStatus \"Out-of-Date\" -AntivirusState \"ON\"\r\n\r\n    Creating customization folder.\r\n\r\n\r\n        Directory: C:\\ProgramData\\NinjaRMMAgent\r\n\r\n\r\n    Mode                 LastWriteTime         Length Name                                                                 \r\n    ----                 -------------         ------ ----                                                                 \r\n    d-----         6\/19\/2024   4:09 PM                Customization                                                        \r\n    Successfully created customization folder.\r\n\r\n    Applying override.\r\n    Successfully applied override.\r\n\r\nPARAMETER: -AntivirusName \"ReplaceMeWithNameOfAnAntivirus\"\r\n    Name of the antivirus you would like to appear in the device details.\r\n\r\nPARAMETER: -AntivirusVersion \"1.0.2\"\r\n    Specify the version number of the antivirus.\r\n\r\nPARAMETER: -AntivirusStatus \"Up-to-Date\"\r\n    Specify whether the antivirus definitions are up-to-date, out-of-date, or unknown.\r\n\r\nPARAMETER: -AntivirusState \"ON\"\r\n    Specify the current status of the antivirus.\r\n\r\nPARAMETER: -Append\r\n    Append or update an existing override.\r\n    \r\nPARAMETER: -RemoveOverride\r\n    Remove all existing overrides.\r\n\r\n.NOTES\r\n    Minimum OS Architecture Supported: Windows 10, Windows Server 2016\r\n    Release Notes: Initial Release\r\n#>\r\n\r\n[CmdletBinding()]\r\nparam (\r\n    [Parameter()]\r\n    [String]$AntivirusName,\r\n    [Parameter()]\r\n    [String]$AntivirusVersion,\r\n    [Parameter()]\r\n    [String]$AntivirusStatus,\r\n    [Parameter()]\r\n    [String]$AntivirusState,\r\n    [Parameter()]\r\n    [Switch]$Append = [System.Convert]::ToBoolean($env:append),\r\n    [Parameter()]\r\n    [Switch]$RemoveOverride = [System.Convert]::ToBoolean($env:removeOverride)\r\n)\r\n\r\nbegin {\r\n    # Replace command line paramets with the form variables if used.\r\n    if ($env:avName -and $env:avName -notlike \"null\") { $AntivirusName = $env:avName }\r\n    if ($env:avVersion -and $env:avVersion -notlike \"null\") { $AntivirusVersion = $env:avVersion }\r\n    if ($env:avStatus -and $env:avStatus -notlike \"null\") { $AntivirusStatus = $env:avStatus }\r\n    if ($env:avState -and $env:avState -notlike \"null\") { $AntivirusState = $env:avState }\r\n\r\n    # Check if RemoveOverride is set and any of the other parameters are also set\r\n    if ($RemoveOverride -and ($AntivirusState -or $AntivirusStatus -or $AntivirusVersion -or $AntivirusName -or $Append)) {\r\n        Write-Host -Object \"[Error] Cannot remove an override and add an override at the same time.\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if AntivirusName is not provided and RemoveOverride is not set\r\n    if (!$AntivirusName -and !$RemoveOverride) {\r\n        Write-Host $RemoveOverride\r\n        if ($Append) {\r\n            Write-Host -Object \"[Error] Antivirus name was not given. The antivirus name is required when updating or adding a new override!\"\r\n        }\r\n        else {\r\n            Write-Host -Object \"[Error] Antivirus name was not given. Antivirus name, state, and status are required when adding a new override!\"\r\n        }\r\n\r\n        exit 1\r\n    }\r\n\r\n    # Validate AntivirusVersion for invalid characters\r\n    if ($AntivirusVersion -and $AntivirusVersion -match '[^0-9\\.]') {\r\n        Write-Host -Object \"[Error] The antivirus version given contains an invalid character. Only the following characters are allowed: '0-9' and '.'\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if AntivirusStatus is not provided and neither RemoveOverride nor Append is set\r\n    if (!$AntivirusStatus -and !$RemoveOverride -and !$Append) {\r\n        Write-Host -Object \"[Error] Antivirus status was not given. Antivirus name, state, and status are required!\"\r\n        exit 1\r\n    }\r\n\r\n    # Define valid antivirus statuses\r\n    $ValidStatus = \"Up-to-Date\", \"Out-of-Date\", \"Unknown\"\r\n    # Check if the provided AntivirusStatus is valid\r\n    if ($AntivirusStatus -and $ValidStatus -notcontains $AntivirusStatus) {\r\n        Write-Host -Object \"[Error] An invalid antivirus status was given. Only the following statuses are valid: 'Up-to-Date', 'Out-of-Date', and 'Unknown'.\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if AntivirusState is not provided and neither RemoveOverride nor Append is set\r\n    if (!$AntivirusState -and !$RemoveOverride -and !$Append) {\r\n        Write-Host -Object \"[Error] Antivirus state was not given. Antivirus name, state, and status are required!\"\r\n        exit 1\r\n    }\r\n\r\n    # Define valid antivirus states\r\n    $ValidState = \"ON\", \"OFF\", \"EXPIRED\", \"SNOOZED\", \"UNKNOWN\"\r\n    # Check if the provided AntivirusState is valid\r\n    if ($AntivirusState -and $ValidState -notcontains $AntivirusState) {\r\n        Write-Host -Object \"[Error] An invalid antivirus state was given. Only the following states are valid: 'ON', 'OFF', 'EXPIRED', 'SNOOZED', and 'UNKNOWN'.\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if the NinjaRMMAgent directory exists\r\n    if (!(Test-Path -Path \"$env:ProgramData\\NinjaRMMAgent\")) {\r\n        Write-Host -Object \"[Error] Ninja Agent is not present at '$env:ProgramData\\NinjaRMMAgent'.\"\r\n        exit 1\r\n    }\r\n\r\n    # Function to check if the script is running with elevated privileges\r\n    function Test-IsElevated {\r\n        $id = [System.Security.Principal.WindowsIdentity]::GetCurrent()\r\n        $p = New-Object System.Security.Principal.WindowsPrincipal($id)\r\n        $p.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator)\r\n    }\r\n\r\n    # Set ExitCode to 0 if it is not already set\r\n    if (!$ExitCode) {\r\n        $ExitCode = 0\r\n    }\r\n}\r\nprocess {\r\n    # Check if the script is running with elevated privileges\r\n    if (!(Test-IsElevated)) {\r\n        Write-Host -Object \"[Error] Access denied. Please run with administrator privileges.\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if RemoveOverride is set\r\n    if ($RemoveOverride) {\r\n        # Check if the antivirus override file exists\r\n        if (Test-Path -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -ErrorAction SilentlyContinue) {\r\n            Write-Host -Object \"Removing $env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json file.\"\r\n\r\n            # Attempt to remove the antivirus override file\r\n            try {\r\n                Remove-Item -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -ErrorAction Stop\r\n            }\r\n            catch {\r\n                Write-Host -Object \"[Error] Failed to remove antivirus override.\"\r\n                Write-Host -Object \"[Error] $($_.Exception.Message)\"\r\n                exit 1\r\n            }\r\n        }\r\n        else {\r\n            Write-Host -Object \"Antivirus override is not currently set.\"\r\n        }\r\n\r\n        exit $ExitCode\r\n    }\r\n\r\n    # Check if the Customization directory exists, if not, create it\r\n    if (!(Test-Path -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\" -ErrorAction SilentlyContinue)) {\r\n        try {\r\n            Write-Host -Object \"Creating customization folder.\"\r\n            New-Item -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\" -ItemType Directory -Force -ErrorAction Stop\r\n            Write-Host -Object \"Successfully created customization folder.`n\"\r\n        }\r\n        catch {\r\n            Write-Host -Object \"[Error] Unable to create customization folder.\"\r\n            Write-Host -Object \"[Error] $($_.Exception.Message)\"\r\n            exit 1\r\n        }\r\n    }\r\n\r\n    # Initialize a list to hold antivirus overrides\r\n    $AntivirusOverrides = New-Object System.Collections.Generic.List[Object]\r\n\r\n    # If Append is set and the antivirus override file exists, retrieve current overrides\r\n    if ($Append -and (Test-Path -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -ErrorAction SilentlyContinue)) {\r\n        try {\r\n            $CurrentOverrides = Get-Content -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -ErrorAction Stop | ConvertFrom-Json -ErrorAction Stop | Select-Object -ExpandProperty \"av_override\" -ErrorAction Stop\r\n        }\r\n        catch {\r\n            Write-Host -Object \"[Error] Failed to retrieve current overrides.\"\r\n            Write-Host -Object \"[Error] $($_.Exception.Message)\"\r\n            exit 1\r\n        }\r\n\r\n        # Iterate over current overrides to update or add new overrides\r\n        $CurrentOverrides | ForEach-Object {\r\n            if ($AntivirusName -notmatch [Regex]::Escape($_.av_name)) {\r\n                $AntivirusOverrides.Add($_)\r\n                return\r\n            }\r\n\r\n            Write-Host -Object \"An existing antivirus with the same name was detected. Updating the existing entry.`n\"\r\n\r\n            $AntivirusOverrides.Add(\r\n                [PSCustomObject]@{\r\n                    av_name    = $AntivirusName\r\n                    av_version = if ($AntivirusVersion) { $AntivirusVersion }else { $_.av_version }\r\n                    av_status  = if ($AntivirusStatus) { $AntivirusStatus }else { $_.av_status }\r\n                    av_state   = if ($AntivirusState) { $AntivirusState }else { $_.av_state }\r\n                }\r\n            )\r\n\r\n            $UpdatedOverride = $True\r\n        }\r\n    }\r\n\r\n    # If Append is set but no override was updated, check for required parameters\r\n    if ($Append -and !$UpdatedOverride -and (!$AntivirusStatus -or !$AntivirusState)) {\r\n        Write-Host -Object \"[Error] Antivirus name, state, and status are required when adding a new override!\"\r\n        exit 1\r\n    }\r\n    elseif ($Append) {\r\n        Write-Host -Object \"Adding override to the existing list of overrides.`n\"\r\n    }\r\n\r\n    # If no override was updated, add a new override\r\n    if (!$UpdatedOverride) {\r\n        $AntivirusOverrides.Add(\r\n            [PSCustomObject]@{\r\n                av_name    = $AntivirusName\r\n                av_version = $AntivirusVersion\r\n                av_status  = $AntivirusStatus\r\n                av_state   = $AntivirusState\r\n            }\r\n        )\r\n    }\r\n\r\n    # Attempt to apply the override by writing to the override file\r\n    try {\r\n        Write-Host -Object \"Applying override.\"\r\n        $AntivirusOverrideJSON = [PSCustomObject]@{\r\n            av_override = $AntivirusOverrides\r\n        } | ConvertTo-Json -ErrorAction Stop\r\n\r\n        $AntivirusOverrideJSON | Out-File -FilePath \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -Encoding \"utf8\" -Force -ErrorAction Stop\r\n        Write-Host -Object \"Successfully applied override.\"\r\n    }\r\n    catch {\r\n        Write-Host -Object \"[Error] Unable to create override.\"\r\n        Write-Host -Object \"[Error] $($_.Exception.Message)\"\r\n        exit 1\r\n    }\r\n\r\n    exit $ExitCode\r\n}\r\nend {\r\n    \r\n    \r\n    \r\n}<\/pre>\n
 <\/p>\n\n
Gagnez du temps gr\u00e2ce \u00e0 plus de 300 scripts du Dojo NinjaOne.<\/p>\n
\u2192 Obtenir l’acc\u00e8s<\/a><\/p>\n<\/div>\n
Description d\u00e9taill\u00e9e du script d’exclusions antivirus<\/h2>\n
Validation initiale et param\u00e8tres<\/h3>\n
Le script commence par accepter plusieurs param\u00e8tres\u00a0:<\/p>\n