{"id":390391,"date":"2024-12-11T09:35:37","date_gmt":"2024-12-11T09:35:37","guid":{"rendered":"https:\/\/www.ninjaone.com\/?post_type=script_hub&p=390391"},"modified":"2024-12-11T09:35:37","modified_gmt":"2024-12-11T09:35:37","slug":"gestire-le-eccezioni-antivirus-con-powershell","status":"publish","type":"script_hub","link":"https:\/\/www.ninjaone.com\/it\/script-hub\/gestire-le-eccezioni-antivirus-con-powershell\/","title":{"rendered":"Aggiungere e gestire le eccezioni antivirus con PowerShell\u00a0"},"content":{"rendered":"

La gestione dell’antivirus \u00e8 un aspetto critico dell’amministrazione IT, in particolare per i fornitori di servizi gestiti (MSP)<\/a> e i professionisti IT incaricati di supervisionare un gran numero di dispositivi. Configurare le impostazioni degli antivirus o impostare eccezioni in modo efficiente su pi\u00f9 endpoint pu\u00f2 far risparmiare tempo, garantire la conformit\u00e0 e aiutare a mantenere la postura di sicurezza. Lo script PowerShell<\/a> fornito offre una soluzione solida per gestire le eccezioni antivirus, aggiungendone o rimuovendo quelle esistenti in modo strutturato e automatizzato.<\/p>\n

Contesto<\/h2>\n

Negli ambienti IT, gli amministratori si trovano spesso a dover standardizzare le configurazioni antivirus tra gli endpoint. Ci\u00f2 pu\u00f2 includere l’indicazione di versioni, aggiornamento e operativit\u00e0 dell’antivirus per riflettere l’effettiva situazione di sicurezza dei dispositivi o per ignorare le informazioni riportate per motivi di conformit\u00e0. Lo script serve come strumento per aggiungere o aggiornare i dettagli dell’antivirus o per rimuovere del tutto le eccezioni. \u00c8 particolarmente utile per gli MSP che gestiscono ambienti di clienti diversi attraverso strumenti come NinjaOne.<\/p>\n

Sfruttando PowerShell, questo script semplifica le operazioni per gestire le eccezioni antivirus, elimina gli errori manuali e garantisce la coerenza della gestione antivirus. La capacit\u00e0 di gestire le eccezioni in modo sistematico lo rende una risorsa per i professionisti IT che gestiscono numerosi dispositivi o per coloro che cercano di applicare gli standard di sicurezza a livello aziendale.<\/p>\n

Lo script per gestire le eccezioni antivirus:<\/h2>\n
#Requires -Version 5.1\r\n\r\n<#\r\n.SYNOPSIS\r\n    Add an antivirus to the device details or override the existing antivirus information.\r\n.DESCRIPTION\r\n    Add an antivirus to the device details or override the existing antivirus information.\r\n\r\n    By using this script, you indicate your acceptance of the following legal terms as well as our Terms of Use at https:\/\/www.ninjaone.com\/terms-of-use.\r\n    Ownership Rights: NinjaOne owns and will continue to own all right, title, and interest in and to the script (including the copyright). NinjaOne is giving you a limited license to use the script in accordance with these legal terms. \r\n    Use Limitation: You may only use the script for your legitimate personal or internal business purposes, and you may not share the script with another party. \r\n    Republication Prohibition: Under no circumstances are you permitted to re-publish the script in any script library or website belonging to or under the control of any other software provider. \r\n    Warranty Disclaimer: The script is provided \u201cas is\u201d and \u201cas available\u201d, without warranty of any kind. NinjaOne makes no promise or guarantee that the script will be free from defects or that it will meet your specific needs or expectations. \r\n    Assumption of Risk: Your use of the script is at your own risk. You acknowledge that there are certain inherent risks in using the script, and you understand and assume each of those risks. \r\n    Waiver and Release: You will not hold NinjaOne responsible for any adverse or unintended consequences resulting from your use of the script, and you waive any legal or equitable rights or remedies you may have against NinjaOne relating to your use of the script. \r\n    EULA: If you are a NinjaOne customer, your use of the script is subject to the End User License Agreement applicable to you (EULA).\r\n.EXAMPLE\r\n    -AntivirusName \"My AV\" -AntivirusVersion \"1.0.1\" -AntivirusStatus \"Out-of-Date\" -AntivirusState \"ON\"\r\n\r\n    Creating customization folder.\r\n\r\n\r\n        Directory: C:\\ProgramData\\NinjaRMMAgent\r\n\r\n\r\n    Mode                 LastWriteTime         Length Name                                                                 \r\n    ----                 -------------         ------ ----                                                                 \r\n    d-----         6\/19\/2024   4:09 PM                Customization                                                        \r\n    Successfully created customization folder.\r\n\r\n    Applying override.\r\n    Successfully applied override.\r\n\r\nPARAMETER: -AntivirusName \"ReplaceMeWithNameOfAnAntivirus\"\r\n    Name of the antivirus you would like to appear in the device details.\r\n\r\nPARAMETER: -AntivirusVersion \"1.0.2\"\r\n    Specify the version number of the antivirus.\r\n\r\nPARAMETER: -AntivirusStatus \"Up-to-Date\"\r\n    Specify whether the antivirus definitions are up-to-date, out-of-date, or unknown.\r\n\r\nPARAMETER: -AntivirusState \"ON\"\r\n    Specify the current status of the antivirus.\r\n\r\nPARAMETER: -Append\r\n    Append or update an existing override.\r\n    \r\nPARAMETER: -RemoveOverride\r\n    Remove all existing overrides.\r\n\r\n.NOTES\r\n    Minimum OS Architecture Supported: Windows 10, Windows Server 2016\r\n    Release Notes: Initial Release\r\n#>\r\n\r\n[CmdletBinding()]\r\nparam (\r\n    [Parameter()]\r\n    [String]$AntivirusName,\r\n    [Parameter()]\r\n    [String]$AntivirusVersion,\r\n    [Parameter()]\r\n    [String]$AntivirusStatus,\r\n    [Parameter()]\r\n    [String]$AntivirusState,\r\n    [Parameter()]\r\n    [Switch]$Append = [System.Convert]::ToBoolean($env:append),\r\n    [Parameter()]\r\n    [Switch]$RemoveOverride = [System.Convert]::ToBoolean($env:removeOverride)\r\n)\r\n\r\nbegin {\r\n    # Replace command line paramets with the form variables if used.\r\n    if ($env:avName -and $env:avName -notlike \"null\") { $AntivirusName = $env:avName }\r\n    if ($env:avVersion -and $env:avVersion -notlike \"null\") { $AntivirusVersion = $env:avVersion }\r\n    if ($env:avStatus -and $env:avStatus -notlike \"null\") { $AntivirusStatus = $env:avStatus }\r\n    if ($env:avState -and $env:avState -notlike \"null\") { $AntivirusState = $env:avState }\r\n\r\n    # Check if RemoveOverride is set and any of the other parameters are also set\r\n    if ($RemoveOverride -and ($AntivirusState -or $AntivirusStatus -or $AntivirusVersion -or $AntivirusName -or $Append)) {\r\n        Write-Host -Object \"[Error] Cannot remove an override and add an override at the same time.\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if AntivirusName is not provided and RemoveOverride is not set\r\n    if (!$AntivirusName -and !$RemoveOverride) {\r\n        Write-Host $RemoveOverride\r\n        if ($Append) {\r\n            Write-Host -Object \"[Error] Antivirus name was not given. The antivirus name is required when updating or adding a new override!\"\r\n        }\r\n        else {\r\n            Write-Host -Object \"[Error] Antivirus name was not given. Antivirus name, state, and status are required when adding a new override!\"\r\n        }\r\n\r\n        exit 1\r\n    }\r\n\r\n    # Validate AntivirusVersion for invalid characters\r\n    if ($AntivirusVersion -and $AntivirusVersion -match '[^0-9\\.]') {\r\n        Write-Host -Object \"[Error] The antivirus version given contains an invalid character. Only the following characters are allowed: '0-9' and '.'\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if AntivirusStatus is not provided and neither RemoveOverride nor Append is set\r\n    if (!$AntivirusStatus -and !$RemoveOverride -and !$Append) {\r\n        Write-Host -Object \"[Error] Antivirus status was not given. Antivirus name, state, and status are required!\"\r\n        exit 1\r\n    }\r\n\r\n    # Define valid antivirus statuses\r\n    $ValidStatus = \"Up-to-Date\", \"Out-of-Date\", \"Unknown\"\r\n    # Check if the provided AntivirusStatus is valid\r\n    if ($AntivirusStatus -and $ValidStatus -notcontains $AntivirusStatus) {\r\n        Write-Host -Object \"[Error] An invalid antivirus status was given. Only the following statuses are valid: 'Up-to-Date', 'Out-of-Date', and 'Unknown'.\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if AntivirusState is not provided and neither RemoveOverride nor Append is set\r\n    if (!$AntivirusState -and !$RemoveOverride -and !$Append) {\r\n        Write-Host -Object \"[Error] Antivirus state was not given. Antivirus name, state, and status are required!\"\r\n        exit 1\r\n    }\r\n\r\n    # Define valid antivirus states\r\n    $ValidState = \"ON\", \"OFF\", \"EXPIRED\", \"SNOOZED\", \"UNKNOWN\"\r\n    # Check if the provided AntivirusState is valid\r\n    if ($AntivirusState -and $ValidState -notcontains $AntivirusState) {\r\n        Write-Host -Object \"[Error] An invalid antivirus state was given. Only the following states are valid: 'ON', 'OFF', 'EXPIRED', 'SNOOZED', and 'UNKNOWN'.\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if the NinjaRMMAgent directory exists\r\n    if (!(Test-Path -Path \"$env:ProgramData\\NinjaRMMAgent\")) {\r\n        Write-Host -Object \"[Error] Ninja Agent is not present at '$env:ProgramData\\NinjaRMMAgent'.\"\r\n        exit 1\r\n    }\r\n\r\n    # Function to check if the script is running with elevated privileges\r\n    function Test-IsElevated {\r\n        $id = [System.Security.Principal.WindowsIdentity]::GetCurrent()\r\n        $p = New-Object System.Security.Principal.WindowsPrincipal($id)\r\n        $p.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator)\r\n    }\r\n\r\n    # Set ExitCode to 0 if it is not already set\r\n    if (!$ExitCode) {\r\n        $ExitCode = 0\r\n    }\r\n}\r\nprocess {\r\n    # Check if the script is running with elevated privileges\r\n    if (!(Test-IsElevated)) {\r\n        Write-Host -Object \"[Error] Access denied. Please run with administrator privileges.\"\r\n        exit 1\r\n    }\r\n\r\n    # Check if RemoveOverride is set\r\n    if ($RemoveOverride) {\r\n        # Check if the antivirus override file exists\r\n        if (Test-Path -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -ErrorAction SilentlyContinue) {\r\n            Write-Host -Object \"Removing $env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json file.\"\r\n\r\n            # Attempt to remove the antivirus override file\r\n            try {\r\n                Remove-Item -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -ErrorAction Stop\r\n            }\r\n            catch {\r\n                Write-Host -Object \"[Error] Failed to remove antivirus override.\"\r\n                Write-Host -Object \"[Error] $($_.Exception.Message)\"\r\n                exit 1\r\n            }\r\n        }\r\n        else {\r\n            Write-Host -Object \"Antivirus override is not currently set.\"\r\n        }\r\n\r\n        exit $ExitCode\r\n    }\r\n\r\n    # Check if the Customization directory exists, if not, create it\r\n    if (!(Test-Path -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\" -ErrorAction SilentlyContinue)) {\r\n        try {\r\n            Write-Host -Object \"Creating customization folder.\"\r\n            New-Item -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\" -ItemType Directory -Force -ErrorAction Stop\r\n            Write-Host -Object \"Successfully created customization folder.`n\"\r\n        }\r\n        catch {\r\n            Write-Host -Object \"[Error] Unable to create customization folder.\"\r\n            Write-Host -Object \"[Error] $($_.Exception.Message)\"\r\n            exit 1\r\n        }\r\n    }\r\n\r\n    # Initialize a list to hold antivirus overrides\r\n    $AntivirusOverrides = New-Object System.Collections.Generic.List[Object]\r\n\r\n    # If Append is set and the antivirus override file exists, retrieve current overrides\r\n    if ($Append -and (Test-Path -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -ErrorAction SilentlyContinue)) {\r\n        try {\r\n            $CurrentOverrides = Get-Content -Path \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -ErrorAction Stop | ConvertFrom-Json -ErrorAction Stop | Select-Object -ExpandProperty \"av_override\" -ErrorAction Stop\r\n        }\r\n        catch {\r\n            Write-Host -Object \"[Error] Failed to retrieve current overrides.\"\r\n            Write-Host -Object \"[Error] $($_.Exception.Message)\"\r\n            exit 1\r\n        }\r\n\r\n        # Iterate over current overrides to update or add new overrides\r\n        $CurrentOverrides | ForEach-Object {\r\n            if ($AntivirusName -notmatch [Regex]::Escape($_.av_name)) {\r\n                $AntivirusOverrides.Add($_)\r\n                return\r\n            }\r\n\r\n            Write-Host -Object \"An existing antivirus with the same name was detected. Updating the existing entry.`n\"\r\n\r\n            $AntivirusOverrides.Add(\r\n                [PSCustomObject]@{\r\n                    av_name    = $AntivirusName\r\n                    av_version = if ($AntivirusVersion) { $AntivirusVersion }else { $_.av_version }\r\n                    av_status  = if ($AntivirusStatus) { $AntivirusStatus }else { $_.av_status }\r\n                    av_state   = if ($AntivirusState) { $AntivirusState }else { $_.av_state }\r\n                }\r\n            )\r\n\r\n            $UpdatedOverride = $True\r\n        }\r\n    }\r\n\r\n    # If Append is set but no override was updated, check for required parameters\r\n    if ($Append -and !$UpdatedOverride -and (!$AntivirusStatus -or !$AntivirusState)) {\r\n        Write-Host -Object \"[Error] Antivirus name, state, and status are required when adding a new override!\"\r\n        exit 1\r\n    }\r\n    elseif ($Append) {\r\n        Write-Host -Object \"Adding override to the existing list of overrides.`n\"\r\n    }\r\n\r\n    # If no override was updated, add a new override\r\n    if (!$UpdatedOverride) {\r\n        $AntivirusOverrides.Add(\r\n            [PSCustomObject]@{\r\n                av_name    = $AntivirusName\r\n                av_version = $AntivirusVersion\r\n                av_status  = $AntivirusStatus\r\n                av_state   = $AntivirusState\r\n            }\r\n        )\r\n    }\r\n\r\n    # Attempt to apply the override by writing to the override file\r\n    try {\r\n        Write-Host -Object \"Applying override.\"\r\n        $AntivirusOverrideJSON = [PSCustomObject]@{\r\n            av_override = $AntivirusOverrides\r\n        } | ConvertTo-Json -ErrorAction Stop\r\n\r\n        $AntivirusOverrideJSON | Out-File -FilePath \"$env:ProgramData\\NinjaRMMAgent\\Customization\\av_override.json\" -Encoding \"utf8\" -Force -ErrorAction Stop\r\n        Write-Host -Object \"Successfully applied override.\"\r\n    }\r\n    catch {\r\n        Write-Host -Object \"[Error] Unable to create override.\"\r\n        Write-Host -Object \"[Error] $($_.Exception.Message)\"\r\n        exit 1\r\n    }\r\n\r\n    exit $ExitCode\r\n}\r\nend {\r\n    \r\n    \r\n    \r\n}<\/pre>\n
 <\/p>\n\n
Risparmia tempo con gli oltre 300 script del Dojo NinjaOne.<\/p>\n
\u2192 Accedi oggi stesso<\/a>.<\/p>\n<\/div>\n
Descrizione dettagliata dello script per gestire le eccezioni antivirus<\/h2>\n
Convalida iniziale e parametri<\/h3>\n
Lo script per gestire le eccezioni antivirus inizia accettando diversi parametri:<\/p>\n