42 lines
1.1 KiB
YAML
42 lines
1.1 KiB
YAML
---
|
|
- name: PowerShell DSC
|
|
hosts: "{{ HOSTS | default('windows') }}"
|
|
gather_facts: false
|
|
|
|
tasks:
|
|
- name: Setup the SecurityPolicyDSC module
|
|
community.windows.win_psmodule:
|
|
name: SecurityPolicyDSC
|
|
module_version: 2.10.0.0
|
|
state: present
|
|
|
|
- name: Set password history
|
|
ansible.windows.win_dsc:
|
|
resource_name: AccountPolicy
|
|
Name: Enforce_password_history
|
|
Enforce_password_history: 24
|
|
|
|
- name: Set maximum password age
|
|
ansible.windows.win_dsc:
|
|
resource_name: AccountPolicy
|
|
Name: Maximum_Password_Age
|
|
Maximum_Password_Age: 60
|
|
|
|
- name: Set minimum password age
|
|
ansible.windows.win_dsc:
|
|
resource_name: AccountPolicy
|
|
Name: Minimum_Password_Age
|
|
Maximum_Password_Age: 20
|
|
|
|
- name: Set minimum password length
|
|
ansible.windows.win_dsc:
|
|
resource_name: AccountPolicy
|
|
Name: Minimum_Password_Length
|
|
Maximum_Password_Age: 8
|
|
|
|
- name: Set password complexity requirements
|
|
ansible.windows.win_dsc:
|
|
resource_name: AccountPolicy
|
|
Name: Password_must_meet_complexity_requirements
|
|
Password_must_meet_complexity_requirements: Enabled
|