adam/windows-ansible
1
0 Fork 0
mirror of https://git.ecdf.ed.ac.uk/win_automation/windows-ansible.git synced 2026-10-26 11:07:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

small fix

Browse Source
This commit is contained in:
abrown38 committed 2024-08-13 21:38:58 +01:00
1 parent 8174b098e2
commit 937c3839ca
1 file changed
+3
Download Patch File Download Diff File Expand all files Collapse all files
ansible/roles/win_domain_controller/files/serverhardening0.2.ps1
+3
View File
@@ -219,9 +219,12 @@ Set-SystemAuditPolicy -Policy 'Security System Extension' -Value Success -UseAud
# 3 LINES BELOW DONT WORK NO GPO CALLED "Default Domain Controller Policy"
#DC only
New-GPO -Name "Default Domain Controller Policy" -comment "Default policy for domain controllers"
Set-GPRegistryValue -Name "Default Domain Controller Policy" -ValueName "LdapEnforceChannelBinding" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" -Value 2 -Type DWord
Set-GPRegistryValue -Name "Default Domain Controller Policy" -ValueName "LDAPServerIntegrity" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" -Value 2 -Type DWord
Set-GPRegistryValue -Name "Default Domain Controller Policy" -ValueName "" -key "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters -> NullSessionPipes" -Value LSARPC, NETLOGON, SAMR -Type MultiString
$DCOU = (Get-ADOrganizationalUnit -Identity "OU=Domain Controllers,$DomainOU").DistinguishedName
New-GPLink -Name "Default Domain Controller Policy" -Target $DCOU
$domainid = $DomainInfo.Name