---

# do not enable this by default
- name: allow unauthenticated guest access
  win_regedit:
    path: HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters
    name: AllowInsecureGuestAuth
    data: 1
    type: dword
  when: policy.allow_unauthenticated_guest_access|bool

- name: set connection profile to private (Windows 10)
  win_shell: Set-NetConnectionProfile -NetworkCategory Private
  when:
    - "'Windows 10' in ansible_distribution"

- name: set connection profile to private (Windows 7)
  win_shell: '{{ set_network_to_private }}'
  when:
    - "'Windows 7' in ansible_distribution"

- name: Ensure local account password doesn't expire
  win_user:
    name: "{{ ansible_user }}"
    password_never_expires: yes