20 lines
No EOL
1.5 KiB
PowerShell
20 lines
No EOL
1.5 KiB
PowerShell
# Add defender exclusions
|
|
Add-MpPreference -ExclusionPath "C:\Quest\*"
|
|
Add-MpPreference -ExclusionPath "C:\Program Files\Mesh Agent\*"
|
|
Add-MpPreference -ExclusionPath "C:\Program Files\TacticalAgent\*"
|
|
Add-MpPreference -ExclusionPath "C:\ProgramData\TacticalRMM\*"
|
|
Add-MpPreference -ExclusionPath "C:\Windows\Temp\is-*.tmp\tacticalagent*"
|
|
Add-MpPreference -ExclusionProcess "C:\Program Files\TacticalAgent\tacticalrmm.exe"
|
|
Add-MpPreference -ExclusionProcess "C:\ProgramData\TacticalRMM\tacticalagent*"
|
|
Add-MpPreference -ExclusionProcess "C:\Windows\Temp\is-*.tmp\tacticalagent*"
|
|
|
|
# --------------------------------------------------------------------------------
|
|
# Enable daily restore points
|
|
|
|
Enable-ComputerRestore -Drive 'C:'
|
|
|
|
Register-ScheduledTask -TaskName "Daily System Restore" -Action (New-ScheduledTaskAction -Execute "PowerShell.exe" -Argument "-ExecutionPolicy Bypass -Command `"Checkpoint-Computer -Description \"\"AUTOMATIC-$(Get-Date -Format 'yyyyMMddHHmmss')\"\" -RestorePointType \"\"MODIFY_SETTINGS\"\"`"") -Trigger (New-ScheduledTaskTrigger -Daily -At 9am) -Settings (New-ScheduledTaskSettingsSet -StartWhenAvailable -DontStopOnIdleEnd -RunOnlyIfNetworkAvailable) -Principal (New-ScheduledTaskPrincipal -UserId "NT AUTHORITY\SYSTEM" -LogonType ServiceAccount -RunLevel Highest)
|
|
|
|
Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore" -Name "SystemRestorePointFrequency" -Value 0 -Type DWORD -Force
|
|
|
|
# -------------------------------------------------------------------------------- |