{"id":240898,"date":"2024-04-23T10:51:45","date_gmt":"2024-04-23T10:51:45","guid":{"rendered":"https:\/\/www.ninjaone.com\/?post_type=script_hub&#038;p=240898"},"modified":"2024-04-23T10:51:45","modified_gmt":"2024-04-23T10:51:45","slug":"impostare-le-autorizzazioni-degli-storage-rimovibili","status":"publish","type":"script_hub","link":"https:\/\/www.ninjaone.com\/it\/script-hub\/impostare-le-autorizzazioni-degli-storage-rimovibili\/","title":{"rendered":"Impostare le autorizzazioni degli storage rimovibili: Una guida PowerShell"},"content":{"rendered":"<h2>Punti chiave<\/h2>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><strong>Automatizza le autorizzazioni dei dispositivi<\/strong>: Lo script semplifica il processo di impostazione delle autorizzazioni degli storage rimovibili.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Supporta pi\u00f9 dispositivi<\/strong>: Copre una serie di dispositivi, tra cui USB, DVD, floppy, nastri e WPD.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><strong>Richiede i diritti di amministratore<\/strong>: L&#8217;esecuzione dello script per impostare le autorizzazioni degli storage rimovibili richiede i privilegi di amministratore.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><strong>Modifica le impostazioni del registro di sistema<\/strong>: Modifica le autorizzazioni alterando chiavi di registro e valori specifici.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><strong>Garantisce la conformit\u00e0 e la sicurezza<\/strong>: Ideale per gli ambienti in cui la sicurezza dei dati e la conformit\u00e0 alle normative sono fondamentali.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"6\" data-aria-level=\"1\"><strong>Controllo flessibile<\/strong>: Offre la possibilit\u00e0 di negare e consentire le azioni di lettura, scrittura ed esecuzione.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"7\" data-aria-level=\"1\"><strong>Aggiornamento dei criteri di gruppo e riavvio<\/strong>: Termina con un aggiornamento dei criteri di gruppo e un riavvio opzionale del sistema.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"8\" data-aria-level=\"1\"><strong>Rischio di eccessive restrizioni<\/strong>: L&#8217;applicazione di criteri troppo restrittivi pu\u00f2 ostacolare i flussi di lavoro.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"9\" data-aria-level=\"1\"><strong>Integrazione con NinjaOne<\/strong>: \u00c8 complementare a piattaforme come NinjaOne per una gestione pi\u00f9 completa e una maggiore sicurezza IT.<\/li>\n<\/ul>\n<p>La gestione dell&#8217;accesso ai dispositivi di archiviazione rimovibili \u00e8 un aspetto critico della sicurezza informatica. Questa responsabilit\u00e0 \u00e8 particolarmente accentuata negli ambienti in cui la sicurezza e l&#8217;integrit\u00e0 dei dati sono fondamentali. Gli script di PowerShell, come quello che stiamo analizzando oggi per impostare le autorizzazioni degli storage rimovibili, forniscono una soluzione affidabile per controllare in modo efficiente questo aspetto della sicurezza IT.<\/p>\n<h2>Background<\/h2>\n<p>Lo script per impostare le autorizzazioni degli storage rimovibili \u00e8 progettato per abilitare o disabilitare l&#8217;accesso in lettura, scrittura ed esecuzione a vari dispositivi di archiviazione rimovibili, tra cui unit\u00e0 floppy, unit\u00e0 CD\/DVD, unit\u00e0 a nastro, Windows Portable Devices (WPD) e unit\u00e0 USB. Questa funzionalit\u00e0 \u00e8 essenziale per i professionisti IT e i <a href=\"https:\/\/www.ninjaone.com\/it\/cos-e-un-msp\" target=\"_blank\" rel=\"noopener\">Managed Service Provider (MSP)<\/a> che devono applicare criteri di sicurezza dei dati, prevenire <a href=\"https:\/\/www.ninjaone.com\/it\/blog\/backup-a-prova-di-ransomware-come-prevenire-un-disastro\/\" target=\"_blank\" rel=\"noopener\">le condivisioni non autorizzate<\/a> o rispettare gli standard normativi.<\/p>\n<h2>Lo script per impostare le autorizzazioni degli storage rimovibili:<\/h2>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"powershell\">#Requires -Version 2.0\r\n\r\n&lt;#\r\n.SYNOPSIS\r\n    Disable or Enable Write, Read, and Execute access to Removable Storage devices.\r\n.DESCRIPTION\r\n    Disable or Enable Write, Read, and Execute access to Floppy, CD\/DVD, Tape, WPD, and\/or USB.\r\n    Disable actions are does first, then allow actions are done after.\r\n.EXAMPLE\r\n     -Device DVD -DenyRead -DenyWrite -DenyExecute\r\n    Disable Write, Read, and Execute access to CD\/DVD drive.\r\n.EXAMPLE\r\n     -Device DVD -AllowRead -AllowWrite -AllowExecute\r\n    Allow Write, Read, and Execute access to CD\/DVD drive.\r\n.EXAMPLE\r\n     -Device DVD -DenyWrite -DenyExecute -AllowRead\r\n    Disable Write, Read, and Execute access to CD\/DVD drive, but Allow Read.\r\n.OUTPUTS\r\n    None\r\n.NOTES\r\n    Minimum OS Architecture Supported: Windows 7, Windows Server 2012\r\n    Local Group Policy updates like this requires the computer to rebooted.\r\n    Release Notes: Renamed script and added Script Variable support\r\nBy using this script, you indicate your acceptance of the following legal terms as well as our Terms of Use at https:\/\/www.ninjaone.com\/it\/condizioni-utilizzo\r\n    Ownership Rights: NinjaOne owns and will continue to own all right, title, and interest in and to the script (including the copyright). NinjaOne is giving you a limited license to use the script in accordance with these legal terms. \r\n    Use Limitation: You may only use the script for your legitimate personal or internal business purposes, and you may not share the script with another party. \r\n    Republication Prohibition: Under no circumstances are you permitted to re-publish the script in any script library or website belonging to or under the control of any other software provider. \r\n    Warranty Disclaimer: The script is provided \u201cas is\u201d and \u201cas available\u201d, without warranty of any kind. NinjaOne makes no promise or guarantee that the script will be free from defects or that it will meet your specific needs or expectations. \r\n    Assumption of Risk: Your use of the script is at your own risk. You acknowledge that there are certain inherent risks in using the script, and you understand and assume each of those risks. \r\n    Waiver and Release: You will not hold NinjaOne responsible for any adverse or unintended consequences resulting from your use of the script, and you waive any legal or equitable rights or remedies you may have against NinjaOne relating to your use of the script. \r\n    EULA: If you are a NinjaOne customer, your use of the script is subject to the End User License Agreement applicable to you (EULA).\r\n.COMPONENT\r\n    DataIOSecurity\r\n#&gt;\r\n\r\n[CmdletBinding()]\r\nparam (\r\n    # Supported devices Floppy, DVD, Tape, WPD, USB\r\n    [String[]]\r\n    $Device,\r\n    [switch]\r\n    $DenyRead = [System.Convert]::ToBoolean($env:DenyRead),\r\n    [switch]\r\n    $DenyWrite = [System.Convert]::ToBoolean($env:DenyWrite),\r\n    [switch]\r\n    $DenyExecute = [System.Convert]::ToBoolean($env:DenyExecute),\r\n    [switch]\r\n    $AllowRead = [System.Convert]::ToBoolean($env:AllowRead),\r\n    [switch]\r\n    $AllowWrite = [System.Convert]::ToBoolean($env:AllowWrite),\r\n    [switch]\r\n    $AllowExecute = [System.Convert]::ToBoolean($env:AllowExecute),\r\n    [switch]\r\n    $ForceReboot = [System.Convert]::ToBoolean($env:ForceReboot)\r\n)\r\n\r\nbegin {\r\n    function Test-StringEmpty {\r\n        param([string]$Text)\r\n        # Returns true if string is empty, null, or whitespace\r\n        process { [string]::IsNullOrEmpty($Text) -or [string]::IsNullOrWhiteSpace($Text) }\r\n    }\r\n    function Test-IsElevated {\r\n        $id = [System.Security.Principal.WindowsIdentity]::GetCurrent()\r\n        $p = New-Object System.Security.Principal.WindowsPrincipal($id)\r\n        $p.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator)\r\n    }\r\n    $RegSettings = @(\r\n        [PSCustomObject]@{\r\n            Name        = \"Floppy\"\r\n            BasePath    = \"HKLM:\\Software\\Policies\\Microsoft\\Windows\\RemovableStorageDevices\\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}\"\r\n            DenyExecute = \"Deny_Execute\"\r\n            DenyWrite   = \"Deny_Write\"\r\n            DenyRead    = \"Deny_Read\"\r\n        },\r\n        [PSCustomObject]@{\r\n            Name        = \"DVD\"\r\n            BasePath    = \"HKLM:\\Software\\Policies\\Microsoft\\Windows\\RemovableStorageDevices\\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}\"\r\n            DenyExecute = \"Deny_Execute\"\r\n            DenyWrite   = \"Deny_Write\"\r\n            DenyRead    = \"Deny_Read\"\r\n        },\r\n        [PSCustomObject]@{\r\n            Name        = \"Tape\"\r\n            BasePath    = \"HKLM:\\Software\\Policies\\Microsoft\\Windows\\RemovableStorageDevices\\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}\"\r\n            DenyExecute = \"Deny_Execute\"\r\n            DenyWrite   = \"Deny_Write\"\r\n            DenyRead    = \"Deny_Read\"\r\n        },\r\n        [PSCustomObject]@{\r\n            Name      = \"WPD\"\r\n            BasePath  = \"HKLM:\\Software\\Policies\\Microsoft\\Windows\\RemovableStorageDevices\\{6AC27878-A6FA-4155-BA85-F98F491D4F33}\"\r\n            DenyWrite = \"Deny_Write\"\r\n            DenyRead  = \"Deny_Read\"\r\n        },\r\n        [PSCustomObject]@{\r\n            Name      = \"WPD\"\r\n            BasePath  = \"HKLM:\\Software\\Policies\\Microsoft\\Windows\\RemovableStorageDevices\\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}\"\r\n            DenyWrite = \"Deny_Write\"\r\n            DenyRead  = \"Deny_Read\"\r\n        },\r\n        [PSCustomObject]@{\r\n            Name        = \"USB\"\r\n            BasePath    = \"HKLM:\\Software\\Policies\\Microsoft\\Windows\\RemovableStorageDevices\\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\"\r\n            DenyExecute = \"Deny_Execute\"\r\n            DenyWrite   = \"Deny_Write\"\r\n            DenyRead    = \"Deny_Read\"\r\n        }\r\n    )\r\n    $Device = if ($(Test-StringEmpty -Text $env:Device)) { $Device }else { $env:Device }\r\n\r\n    if ($(Test-StringEmpty -Text $Device)) {\r\n        Write-Error \"Device is required.\"\r\n        exit 1\r\n    }\r\n    if ((-not $DenyRead -and -not $DenyWrite -and -not $DenyExecute) -and (-not $AllowRead -and -not $AllowWrite -and -not $AllowExecute)) {\r\n        Write-Error \"At least one Deny or Allow is required.\"\r\n        exit 1\r\n    }\r\n}\r\nprocess {\r\n    if (-not (Test-IsElevated)) {\r\n        Write-Error -Message \"Access Denied. Please run with Administrator privileges.\"\r\n        exit 1\r\n    }\r\n\r\n    # Split any string that has a comma and validate types of devices\r\n    $Device = $Device | ForEach-Object {\r\n        $_ -split ',' | ForEach-Object {\r\n            \"$_\".Trim()\r\n        }\r\n    } | Where-Object { $_ -in \"Floppy\", \"DVD\", \"Tape\", \"WPD\", \"USB\" }\r\n\r\n    try {\r\n        $Device | ForEach-Object {\r\n            $CurDevice = $_\r\n            # Loop through each item in $RegSettings and work on the current device($Device)\r\n            $RegSettings | Where-Object { $_.Name -in $CurDevice } | ForEach-Object {\r\n                $CurRegSetting = $_\r\n                $Path = $CurRegSetting.BasePath\r\n\r\n                # Build Deny list\r\n                $Deny = [System.Collections.ArrayList]::new() # Older PowerShell compatible Lists\r\n                if ($DenyRead) { $Deny.Add(\"Read\") | Out-Null }\r\n                if ($DenyWrite) { $Deny.Add(\"Write\") | Out-Null }\r\n                if ($DenyExecute) { $Deny.Add(\"Execute\") | Out-Null }\r\n                # Build Allow list\r\n                $Allow = [System.Collections.ArrayList]::new() # Older PowerShell compatible Lists\r\n                if ($AllowRead) { $Allow.Add(\"Read\") | Out-Null }\r\n                if ($AllowWrite) { $Allow.Add(\"Write\") | Out-Null }\r\n                if ($AllowExecute) { $Allow.Add(\"Execute\") | Out-Null }\r\n\r\n                # Loop though each $Deny item passed\r\n                $Deny | ForEach-Object {\r\n                    $CurDeny = $_\r\n                    # Only act on what we have, like WPD where we only have Deny_Write and Deny_Read\r\n                    # $CurRegSetting.\"Deny$CurDeny\" is a method of access a property\r\n                    if ($CurRegSetting.\"Deny$CurDeny\") {\r\n                        $CurDenyType = $CurRegSetting.\"Deny$CurDeny\"\r\n                        # Check if we need to create the path\r\n                        if (-not (Test-Path -Path $Path -ErrorAction SilentlyContinue)) {\r\n                            New-Item -Path ($Path | Split-Path -Parent) -Name ($Path | Split-Path -Leaf) -Force -Confirm:$false | Out-Null\r\n                            Write-Host \"Creating path: $($Path)\"\r\n                        }\r\n                        # Check if the property already exists and update it or create the property\r\n                        if ((Get-ItemProperty -Path $Path -Name $CurDenyType -ErrorAction SilentlyContinue).\"$CurDenyType\") {\r\n                            Set-ItemProperty -Path $Path -Name $CurDenyType -Value 1 -Force -Confirm:$false | Out-Null\r\n                            Write-Host \"Setting $($Path)\/$CurDenyType to 1\"\r\n                        }\r\n                        else {\r\n                            New-ItemProperty -Path $Path -Name $CurDenyType -Value 1 -PropertyType \"DWORD\" -Force -Confirm:$false | Out-Null\r\n                            Write-Host \"Creating and Setting $($Path)\/$CurDenyType to 1\"\r\n                        }\r\n                        Write-Host \"Deny $CurDeny for $CurDevice set to $((Get-ItemProperty -Path $Path -Name $CurDenyType -ErrorAction SilentlyContinue).\"$CurDenyType\")\"\r\n                    }\r\n                    else {\r\n                        # Skipping this as we don't have Deny_Execute for WPD\r\n                        Write-Host \"Skipping $($CurRegSetting.\"Deny$CurDeny\")\"\r\n                    }\r\n                }\r\n                # Loop though each $Allow item passed\r\n                $Allow | ForEach-Object {\r\n                    $CurAllow = $_\r\n                    # Only act on what we have, like WPD where we only have Deny_Write and Deny_Read\r\n                    # $CurRegSetting.\"Deny$CurAllow\" is a method to access a property\r\n                    if ($CurRegSetting.\"Deny$CurAllow\") {\r\n                        $CurAllowType = $CurRegSetting.\"Deny$CurAllow\"\r\n                        # Check if the property already exists and update it or create the property\r\n                        if ((Get-ItemProperty -Path $Path -Name $CurAllowType -ErrorAction SilentlyContinue).\"$CurAllowType\") {\r\n                            Set-ItemProperty -Path $Path -Name $CurAllowType -Value 0 -Force -Confirm:$false | Out-Null\r\n                            Write-Host \"Setting $($Path)\/$CurAllowType to 0\"\r\n                        }\r\n                        Write-Host \"Allow access for $CurDevice\"\r\n                    }\r\n                    else {\r\n                        # Skipping this as we don't have Deny_Execute for WPD\r\n                        Write-Host \"Skipping $($CurRegSetting.\"Deny$CurAllow\")\"\r\n                    }\r\n                }\r\n            }\r\n        }\r\n        \r\n\r\n        Write-Host \"Running: gpupdate.exe \/force\"\r\n        gpupdate.exe \/force\r\n        Write-Host \"Completed Running: gpupdate.exe \/force\"\r\n        Write-Host \"Computer will need to be rebooted for changes to take effect.\"\r\n\r\n        if ($ForceReboot) {\r\n            shutdown.exe -r -t 60\r\n        }\r\n        else {\r\n            Write-Host \"Computer will need to be rebooted to see changes.\"\r\n        }\r\n        exit 0\r\n    }\r\n    catch {\r\n        Write-Error $_\r\n        exit 1\r\n    }\r\n}\r\nend {\r\n    \r\n    \r\n    \r\n}<\/pre>\n<p>&nbsp;<\/p>\n\n<div class=\"in-context-cta\"><p style=\"text-align: center;\">Accedi a oltre 700 script nel Dojo di NinjaOne<\/p>\n<p style=\"text-align: center;\"><a href=\"https:\/\/www.ninjaone.com\/it\/prova-gratuita\/\">Ottieni l&#8217;accesso<\/a><\/p>\n<\/div>\n<h2>Analisi dettagliata dello script per impostare le autorizzazioni degli storage rimovibili<\/h2>\n<p>Lo script per impostare le autorizzazioni degli storage rimovibili opera in diverse fasi distinte:<\/p>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><strong>Definizione dei parametri<\/strong>: Lo script per impostare le autorizzazioni degli storage rimovibili inizia definendo i parametri per i diversi tipi di dispositivi e le azioni (negare o consentire la lettura, la scrittura e l&#8217;esecuzione).<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Controlli pre-esecuzione<\/strong>: Include funzioni per controllare le stringhe vuote e verificare se lo script per impostare le autorizzazioni degli storage rimovibili viene eseguito con privilegi elevati (da amministratore).<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Modifica delle impostazioni del registro<\/strong>: La funzionalit\u00e0 principale consiste nel modificare le impostazioni del registro di sistema per ogni tipo di dispositivo. Queste impostazioni determinano le autorizzazioni per ogni azione (Lettura, Scrittura, Esecuzione).<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Logica di esecuzione<\/strong>: Lo script per impostare le autorizzazioni degli storage rimovibili crea o modifica le chiavi e i valori del Registro di sistema in base ai parametri inseriti. Pu\u00f2 impostare le autorizzazioni per negare o consentire le azioni sui dispositivi specificati.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><strong>Fasi finali<\/strong>: Lo script per impostare le autorizzazioni degli storage rimovibili si conclude con l&#8217;aggiornamento dei criteri di gruppo tramite <strong>gpupdate.exe<\/strong> e, facoltativamente, con il riavvio del sistema per rendere effettive le modifiche.<\/li>\n<\/ul>\n<h2>Casi d&#8217;uso potenziali<\/h2>\n<p>Immagina un&#8217;azienda finanziaria che deve attenersi a rigide norme di sicurezza dei dati. Un amministratore IT pu\u00f2 utilizzare questo script per impostare le autorizzazioni degli storage rimovibili, e\u00a0 disabilitare l&#8217;accesso in scrittura alle unit\u00e0 USB su tutte le workstation dei dipendenti, impedendo la copia di dati sensibili su dispositivi esterni.<\/p>\n<h2>Confronti<\/h2>\n<p>I metodi tradizionali di configurazione delle autorizzazioni dei dispositivi possono comportare modifiche manuali del registro di sistema o configurazioni dei criteri di gruppo. Questo script automatizza i processi per impostare le autorizzazioni degli storage rimovibili, riducendo il margine di errore e facendo risparmiare tempo.<\/p>\n<h2>Domande frequenti<\/h2>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><strong>Lo script per impostare le autorizzazioni degli storage rimovibili \u00e8 compatibile con tutte le versioni di Windows?<\/strong>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\">Supporta Windows 7 e versioni successive, comprese le edizioni server.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><strong>Pu\u00f2 controllare l&#8217;accesso alle unit\u00e0 di rete?<\/strong>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\">No, \u00e8 specifico per i dispositivi di archiviazione rimovibili.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"6\" data-aria-level=\"1\"><strong>Lo script per impostare le autorizzazioni degli storage rimovibili richiede diritti amministrativi?<\/strong>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"6\" data-aria-level=\"1\">S\u00ec, deve essere eseguito con privilegi di amministratore.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2>Implicazioni<\/h2>\n<p>Se da un lato questo script per impostare le autorizzazioni degli storage rimovibili \u00e8 uno strumento potente per migliorare la sicurezza dei dati, dall&#8217;altro comporta il rischio di limitare troppo l&#8217;accesso e di ostacolare potenzialmente i flussi di lavoro legittimi. \u00c8 essenziale bilanciare le esigenze di sicurezza con i requisiti operativi.<\/p>\n<h2>Raccomandazioni<\/h2>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"7\" data-aria-level=\"1\"><strong>Testa lo script per impostare le autorizzazioni degli storage rimovibili in un ambiente controllato<\/strong> prima di distribuirlo su larga scala.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"8\" data-aria-level=\"1\"><strong>Documenta tutte le modifiche<\/strong> apportate con lo script per impostare le autorizzazioni degli storage rimovibili per riferimenti futuri.<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"9\" data-aria-level=\"1\"><strong>Ricontrolla e aggiorna regolarmente i criteri di accesso<\/strong> per allinearli alle esigenze di sicurezza in evoluzione.<\/li>\n<\/ul>\n<h2>Considerazioni finali<\/h2>\n<p>Nell&#8217;attuale panorama dinamico dell&#8217;IT, strumenti come NinjaOne possono essere complementari a script come questo, fornendo una <a href=\"https:\/\/www.ninjaone.com\/it\/\">piattaforma integrata per la gestione delle operazioni IT<\/a> che comprenda anche le configurazioni di sicurezza. La capacit\u00e0 di NinjaOne di centralizzare le attivit\u00e0 di gestione garantisce l&#8217;applicazione coerente dei criteri di sicurezza all&#8217;intera infrastruttura IT, migliorando la sicurezza complessiva e l&#8217;<a href=\"https:\/\/www.ninjaone.com\/it\/efficienza-it\" target=\"_blank\" rel=\"noopener\">efficienza <\/a>operativa.<\/p>\n","protected":false},"author":35,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","_lmt_disableupdate":"no","_lmt_disable":""},"operating_system":[4212],"use_cases":[4275],"class_list":["post-240898","script_hub","type-script_hub","status-publish","hentry","script_hub_category-windows"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.ninjaone.com\/it\/wp-json\/wp\/v2\/script_hub\/240898","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ninjaone.com\/it\/wp-json\/wp\/v2\/script_hub"}],"about":[{"href":"https:\/\/www.ninjaone.com\/it\/wp-json\/wp\/v2\/types\/script_hub"}],"author":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/it\/wp-json\/wp\/v2\/users\/35"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ninjaone.com\/it\/wp-json\/wp\/v2\/comments?post=240898"}],"wp:attachment":[{"href":"https:\/\/www.ninjaone.com\/it\/wp-json\/wp\/v2\/media?parent=240898"}],"wp:term":[{"taxonomy":"script_hub_category","embeddable":true,"href":"https:\/\/www.ninjaone.com\/it\/wp-json\/wp\/v2\/operating_system?post=240898"},{"taxonomy":"use_cases","embeddable":true,"href":"https:\/\/www.ninjaone.com\/it\/wp-json\/wp\/v2\/use_cases?post=240898"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}