community.windows.win_security_policy – Change local security policy settings¶
Note
This plugin is part of the community.windows collection (version 1.3.0).
To install it use: ansible-galaxy collection install community.windows
.
To use it in a playbook, specify: community.windows.win_security_policy
.
Parameters¶
Notes¶
Note
This module uses the SecEdit.exe tool to configure the values, more details of the areas and keys that can be configured can be found here https://msdn.microsoft.com/en-us/library/bb742512.aspx.
If you are in a domain environment these policies may be set by a GPO policy, this module can temporarily change these values but the GPO will override it if the value differs.
You can also run
SecEdit.exe /export /cfg C:\temp\output.ini
to view the current policies set on your system.When assigning user rights, use the ansible.windows.win_user_right module instead.
See Also¶
See also
- ansible.windows.win_user_right
The official documentation on the ansible.windows.win_user_right module.
Examples¶
- name: Change the guest account name
community.windows.win_security_policy:
section: System Access
key: NewGuestName
value: Guest Account
- name: Set the maximum password age
community.windows.win_security_policy:
section: System Access
key: MaximumPasswordAge
value: 15
- name: Do not store passwords using reversible encryption
community.windows.win_security_policy:
section: System Access
key: ClearTextPassword
value: 0
- name: Enable system events
community.windows.win_security_policy:
section: Event Audit
key: AuditSystemEvents
value: 1
Return Values¶
Common return values are documented here, the following are the fields unique to this module:
Authors¶
Jordan Borean (@jborean93)