diff options
| author | Jordan Borean <jborean93@gmail.com> | 2018-09-25 08:01:03 +1000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2018-09-25 08:01:03 +1000 |
| commit | 24b46334817b408a4ad1c328d6b1641b6a9bec12 (patch) | |
| tree | b52a495b521cb0d1f75a343b6e90b51f277ca928 /examples | |
| parent | d8d4be40b0a8048ce2d73eee6f0d7f0455df8528 (diff) | |
| download | ansible-24b46334817b408a4ad1c328d6b1641b6a9bec12.tar.gz | |
explicitly set LocalAccountTokenFilterPolicy on WinRM configure script (#45947)
Diffstat (limited to 'examples')
| -rw-r--r-- | examples/scripts/ConfigureRemotingForAnsible.ps1 | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/examples/scripts/ConfigureRemotingForAnsible.ps1 b/examples/scripts/ConfigureRemotingForAnsible.ps1 index caf7d365f3..7e52a9b3e7 100644 --- a/examples/scripts/ConfigureRemotingForAnsible.ps1 +++ b/examples/scripts/ConfigureRemotingForAnsible.ps1 @@ -50,6 +50,7 @@ # Version 1.6 - 2017-04-18 # Version 1.7 - 2017-11-23 # Version 1.8 - 2018-02-23 +# Version 1.9 - 2018-09-21 # Support -Verbose option [CmdletBinding()] @@ -293,6 +294,20 @@ Else Write-Verbose "PS Remoting is already enabled." } +# Ensure LocalAccountTokenFilterPolicy is set to 1 +# https://github.com/ansible/ansible/issues/42978 +$token_path = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" +$token_prop_name = "LocalAccountTokenFilterPolicy" +$token_key = Get-Item -Path $token_path +$token_value = $token_key.GetValue($token_prop_name, $null) +if ($token_value -ne 1) { + Write-Verbose "Setting LocalAccountTOkenFilterPolicy to 1" + if ($null -ne $token_value) { + Remove-ItemProperty -Path $token_path -Name $token_prop_name + } + New-ItemProperty -Path $token_path -Name $token_prop_name -Value 1 -PropertyType DWORD > $null +} + # Make sure there is a SSL listener. $listeners = Get-ChildItem WSMan:\localhost\Listener If (!($listeners | Where {$_.Keys -like "TRANSPORT=HTTPS"})) |