labadmin-config-antivirus.ps1

#Requires -RunAsAdministrator

<#
.SYNOPSIS
    Enable/disable Windows antivirus real time protection
    
.PARAMETER Enable
    Enable antivirus real time protection
.PARAMETER Disable
    Disable antivirus real time protection
.PARAMETER Status
    Show current status

.NOTES
    File Name: labadmin-config-antivirus.ps1
    Author   : Leonardo Marco
#>

Param(
  [Parameter(Mandatory=$true, ParameterSetName='enable')] 
  [Switch]$Enable,
  [Parameter(Mandatory=$true, ParameterSetName='disable')]
  [Switch]$Disable,
  [Parameter(Mandatory=$true, ParameterSetName='status')]
  [Switch]$Status
)

# ENABLE
if($enable) {
  Set-MpPreference -DisableRealtimeMonitoring $false
  if((Get-MpPreference).DisableRealtimeMonitoring) { Write-Output "WARNING! Realtime protection is DISABLED"; exit 1 	}
  else { Write-Output "Realtime protection is ENABLED"; exit 0 }

# DISABLE
} elseif($disable) {
  Set-MpPreference -DisableRealtimeMonitoring $true
  if((Get-MpPreference).DisableRealtimeMonitoring) { Write-Output "Realtime protection is DISABLED"; exit 0	}
  else { Write-Error "Realtime protection is still ENABLED!"; exit 1 }

# STATUS
} else {
  if((Get-MpPreference).DisableRealtimeMonitoring) { Write-Output "Current status: DISABLED"; exit 1	}
  else { Write-Output "Current status: ENABLED"; exit 0 }
}