{"id":21017056,"url":"https://github.com/gsa/ansible-os-win-2016","last_synced_at":"2026-01-02T03:33:27.081Z","repository":{"id":137792645,"uuid":"160587634","full_name":"GSA/ansible-os-win-2016","owner":"GSA","description":"Ansible Roles for Windows Server 2016","archived":false,"fork":false,"pushed_at":"2018-12-05T22:47:26.000Z","size":19,"stargazers_count":20,"open_issues_count":0,"forks_count":28,"subscribers_count":7,"default_branch":"master","last_synced_at":"2025-01-20T12:22:40.802Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/GSA.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-12-05T22:39:53.000Z","updated_at":"2024-04-10T19:52:00.000Z","dependencies_parsed_at":"2023-05-22T14:00:15.284Z","dependency_job_id":null,"html_url":"https://github.com/GSA/ansible-os-win-2016","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GSA%2Fansible-os-win-2016","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GSA%2Fansible-os-win-2016/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GSA%2Fansible-os-win-2016/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GSA%2Fansible-os-win-2016/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/GSA","download_url":"https://codeload.github.com/GSA/ansible-os-win-2016/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243447632,"owners_count":20292452,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-19T10:17:44.545Z","updated_at":"2026-01-02T03:33:27.057Z","avatar_url":"https://github.com/GSA.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"Windows Server 2016 GSA Benchmark\n=================================\n\nThis Ansible content will configure a Windows Server 2016 machine to be GSA compliant.\n\nThis role **will make changes to the system** that could impact its performance and/or availability.\n\nFor configuration compliance auditing, use a tool such as [Nessus](https://www.tenable.com/products/nessus-vulnerability-scanner) or [CIS-CAT](https://learn.cisecurity.org/cis-cat-landing-page)\n\nThis hardening content is based on the GSA Microsoft Windows Server 2016 Security Benchmark v1.0 and the [CIS Microsoft Windows Server 2016 Benchmark v1.0.0 ](https://www.cisecurity.org/cis-benchmarks/).\n\nImportant Information\n---------------------\n\nBefore executing, you should carefully review the playbook tasks to make sure your systems will not be negatively impacted.\n\nPlease thoroughly review to ensure your organizational requirements are met.\n\n##### The current default configuration will:\n* Configure all Windows Firewall controls except for \"Ensure 'Windows Firewall - Public - Inbound connections' is set to 'Block (default)'\"\n* Configure Windows Update controls\n\n##### The configuration will not:\n* Set the 'Minimum password length' to 16 or more characters\n* Configure 'Deny access to this computer from the network' to include local accounts\n* Configure 'Deny log on through Remote Desktop Services' to include local accounts\n\n\nDependencies\n------------\nAnsible \u003e 2.4\n\n\nExample Playbook\n-------------------------\n```\n---\n- name: Harden Server\n  hosts: all\n  roles:\n       - ansible-os-win-2016\n  tasks:\n```\nHow to test locally\n--------------------------\n```\nansible-playbook main.yml --connection=local\n```\n\nLicense\n-------\nMIT\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgsa%2Fansible-os-win-2016","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgsa%2Fansible-os-win-2016","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgsa%2Fansible-os-win-2016/lists"}