From 3942ad4beaa4ecc3b866553a50edca36be17cb70 Mon Sep 17 00:00:00 2001 From: abrown38 Date: Fri, 26 Apr 2024 11:01:14 +0000 Subject: [PATCH] Removed space-admin create and associated tasks --- ansible/roles/win_domain_controller/tasks/users.yml | 9 --------- ansible/roles/win_study/tasks/permissions.yml | 9 --------- ansible/vars/common.yml | 2 -- 3 files changed, 20 deletions(-) diff --git a/ansible/roles/win_domain_controller/tasks/users.yml b/ansible/roles/win_domain_controller/tasks/users.yml index 8bf2d98..b028001 100644 --- a/ansible/roles/win_domain_controller/tasks/users.yml +++ b/ansible/roles/win_domain_controller/tasks/users.yml @@ -15,15 +15,6 @@ - Management Computers - User Computers - - name: Create domain administrator user - community.windows.win_domain_user: - name: "{{ domain_admin_username }}" - password: "{{ domain_admin_password }}" - state: present - password_never_expires: yes - groups: - - Domain Admins - - name: Create file-transfer user for community.windows.win_domain_user: name: file-transfer diff --git a/ansible/roles/win_study/tasks/permissions.yml b/ansible/roles/win_study/tasks/permissions.yml index 9fed43e..c3b520b 100644 --- a/ansible/roles/win_study/tasks/permissions.yml +++ b/ansible/roles/win_study/tasks/permissions.yml @@ -11,15 +11,6 @@ rights: Read,Write,Modify,Delete loop: ["{{ study_folder }}", "{{ study_folder }}\\export"] - - name: Add Domain Admin permissions to study folder - win_acl: - path: "{{ item }}" - state: present - type: allow - user: "{{ domain_admin_username }}" - rights: "FullControll" - loop: ["{{ study_folder }}", "{{ study_folder }}\\export"] - - name: Add file-transfer user permissions to study folder win_acl: path: '{{ study_folder }}\export' diff --git a/ansible/vars/common.yml b/ansible/vars/common.yml index b01f75d..95067cd 100644 --- a/ansible/vars/common.yml +++ b/ansible/vars/common.yml @@ -23,5 +23,3 @@ standard_vms2: - { name: "{{ os_project }}-{{ win_project }}-fs02", security_group: "file_server", meta_name: fs02 } - { name: "{{ os_project }}-{{ win_project }}-wsus", security_group: "wsus_server", meta_name: wsus } - { name: "{{ os_project }}-{{ win_project }}-choc", security_group: "chocolatey_server", meta_name: choc } - -domain_admin_username: space-admin