Project

General

Profile

Tâche #23530

Scénario #23434: Étudier le module Salt : win_lgpo (Local Policy on Windows)

Étudier le module GPO pour salt

Added by Gérald Schwartzmann almost 5 years ago. Updated almost 5 years ago.

Status:
Fermé
Priority:
Normal
Assigned To:
Gérald Schwartzmann
Target version:
sprint 2018 14-16 Equipe MENSR
Start date:
04/03/2018
Due date:
% Done:

100%

Remaining (hours):
0.0

Description

https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.win_lgpo.html
https://docs.saltstack.com/en/latest/ref/states/all/salt.states.win_lgpo.html#manage-windows-local-group-policy

History

#1 Updated by Gérald Schwartzmann almost 5 years ago

  • Description updated (diff)

#2 Updated by Scrum Master almost 5 years ago

  • Status changed from Nouveau to En cours

#3 Updated by Scrum Master almost 5 years ago

  • Description updated (diff)
  • Assigned To set to Gérald Schwartzmann

#4 Updated by Gérald Schwartzmann almost 5 years ago 

salt 'PC-125292.etb1.lan' lgpo.get machine return_full_policy_names=True

root@scribe:~# salt 'PC-125292.etb1.lan' lgpo.get_policy_info 'Maximum password age' machine
PC-125292.etb1.lan:
    ----------
    message:
    policy_aliases:
        - MaxPasswordAge
    policy_class:
        machine
    policy_elements:
    policy_found:
        True
    policy_name:
        Maximum password age
    rights_assignment:
        False

root@scribe:~# salt 'PC-125292.etb1.lan' lgpo.get_policy_info 'Account lockout duration' machine
PC-125292.etb1.lan:
    ----------
    message:
    policy_aliases:
        - LockoutDuration
    policy_class:
        machine
    policy_elements:
    policy_found:
        True
    policy_name:
        Account lockout duration
    rights_assignment:
        False
root@scribe:~#

root@scribe:~# salt 'PC-125292.etb1.lan' lgpo.set computer_policy="{'LockoutDuration': 90}" 
PC-125292.etb1.lan:
    True
root@scribe:~#

ou

root@scribe:~# salt 'PC-125292.etb1.lan' lgpo.set_computer_policy LockoutDuration 1440
PC-125292.etb1.lan:
    True
root@scribe:~#

#5 Updated by Gérald Schwartzmann almost 5 years ago

Application mise à disposition par Microsoft qui recense les GPO : http://gpsearch.azurewebsites.net/default.aspx?ref=1#10677

#6 Updated by Joël Cuissinat almost 5 years ago

  • Status changed from En cours to Fermé
  • % Done changed from 0 to 100
  • Remaining (hours) set to 0.0

Also available in: Atom PDF