{"id":21002786,"url":"https://github.com/kpn-puppet/puppet-kpn-advanced_security_policy","last_synced_at":"2025-05-15T00:31:34.356Z","repository":{"id":31493893,"uuid":"128058820","full_name":"kpn-puppet/puppet-kpn-advanced_security_policy","owner":"kpn-puppet","description":"Puppet module to manage Advanced Security Policies on Windows Server 2008R2 and upwards","archived":false,"fork":false,"pushed_at":"2022-06-07T10:14:38.000Z","size":242,"stargazers_count":2,"open_issues_count":4,"forks_count":7,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-04-25T05:02:27.317Z","etag":null,"topics":["puppet","security","windows"],"latest_commit_sha":null,"homepage":null,"language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kpn-puppet.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2018-04-04T12:27:18.000Z","updated_at":"2023-12-20T10:11:20.000Z","dependencies_parsed_at":"2022-07-21T04:39:06.990Z","dependency_job_id":null,"html_url":"https://github.com/kpn-puppet/puppet-kpn-advanced_security_policy","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kpn-puppet%2Fpuppet-kpn-advanced_security_policy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kpn-puppet%2Fpuppet-kpn-advanced_security_policy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kpn-puppet%2Fpuppet-kpn-advanced_security_policy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kpn-puppet%2Fpuppet-kpn-advanced_security_policy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kpn-puppet","download_url":"https://codeload.github.com/kpn-puppet/puppet-kpn-advanced_security_policy/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":224949532,"owners_count":17397184,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["puppet","security","windows"],"created_at":"2024-11-19T08:19:58.206Z","updated_at":"2024-11-19T08:19:58.865Z","avatar_url":"https://github.com/kpn-puppet.png","language":"Ruby","funding_links":[],"categories":[],"sub_categories":[],"readme":"# advanced_security_policy\n\n#### Table of Contents\n\n- [advanced_security_policy](#advanced_security_policy)\n      - [Table of Contents](#table-of-contents)\n  - [Overview](#overview)\n  - [Module Description](#module-description)\n  - [Setup](#setup)\n    - [Setup Requirements](#setup-requirements)\n    - [What advanced_security_policy affects](#what-advanced_security_policy-affects)\n    - [Beginning with advanced_security_policy](#beginning-with-advanced_security_policy)\n  - [Usage](#usage)\n    - [Parameters](#parameters)\n      - [policy(resource) name (required)](#policyresource-name-required)\n      - [ensure](#ensure)\n      - [policy_value](#policy_value)\n    - [Examples](#examples)\n      - [Example: Setting multiple security policies](#example-setting-multiple-security-policies)\n  - [Reference](#reference)\n    - [Defined Types](#defined-types)\n    - [Provider](#provider)\n  - [Limitations](#limitations)\n  - [Development](#development)\n\n## Overview\nThis module sets and enforces the advanced security policies for windows.\n\n## Module Description\nThis module uses LGPO.exe (v2.2) to configure the advanced security policies on Windows.\nLGPO.exe is a command-line utility that is designed to help automate management of\nLocal Group Policy. It can import and apply settings from Registry Policy (Registry.pol)\nfiles, security templates, Advanced Auditing backup files, as well as from formatted\n“LGPO text” files.\n\n## Setup\n\n### Setup Requirements\n\nThis module requires:\n- ADMX and ADML files with the policy settings to be set (in `C:\\Windows\\PolicyDefinitions`)\n- LGPO.exe needs to be installed in `C:\\Windows\\System32` (Add the following code)\n  ```puppet\n    include advanced_security_policy\n  ```\n\n### What advanced_security_policy affects\n- Advanced security policies.\n- `C:\\Windows\\System32\\GroupPolicy\\Machine\\Registry.pol`\n- A backup is made of `C:\\Windows\\System32\\GroupPolicy\\Machine\\Registry.pol` and is placed in `C:\\Management\\advanced_security\\Registry.pol`\n\n### Beginning with advanced_security_policy\nTo start using advanced_security_policy,\nsimply include the module and add the defined type statements in your profile.\nThen configure the policies you want to set. (for example in hiera)\n\n## Usage\n\n**When using `Configure SMB v1 client driver` you may also need to set `Configure SMB v1 client` to `['Bowser','MRxSmb20','NSI']` due to dependencies for this service**\n\n### Parameters\n\n#### policy(resource) name (required)\nType: 'String'\nDefault: '$title'\nValues: Any valid advanced security subcategory\nDescription: The policy name matches the name in the policy editor\n\n#### ensure\nType: 'String'\nDefault: 'present'\nValues: 'present' or 'absent'\nDescription: When a policy is set, ensure will be 'present'. If a policy is to be set as 'not configured' then ensure must be set to 'absent'.\n#### policy_value\nType: 'String'\nValues: 'enabled', 'disabled' or a value\nDescription: This is the value to be set for the policy. This can be 'enabled', 'disabled' or a value to be set.\n\n### Examples\n\n#### Example: Setting multiple security policies\n```puppet\n  advanced_security_policy {'Turn off Autoplay':\n    policy_value =\u003e '255',\n  }\n\n  advanced_security_policy {Configuration of wireless settings using Windows Connect Now':\n    policy_value =\u003e 'disabled'\n  }\n\n  advanced_security_policy {'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)':\n    policy_value =\u003e 'enabled',\n  }\n\n  advanced_security_policy {'Security: Specify the maximum log file size (KB)':\n    ensure         =\u003e 'absent',\n  }\n```\n\n## Reference\n\n### Defined Types\n\n- advanced_security_policy\n\n### Provider\n- securitypolicy\n\n\n## Limitations\nThis is where you list OS compatibility, version compatibility, etc.\n\nThis module works on:\n\n- Windows 2008 R2\n- Windows 2012 R2\n- Windows 2016\n- Windows 2019\n- Windows 2022\n\n## Development\n\nYou can contribute by submitting issues, providing feedback and joining the discussions.\n\nGo to: `https://github.com/kpn-puppet/puppet-kpn-advanced_security_policy`\n\nIf you want to fix bugs, add new features etc:\n- Fork it\n- Create a feature branch ( git checkout -b my-new-feature )\n- Apply your changes and update rspec tests\n- Run rspec tests ( bundle exec rake spec )\n- Commit your changes ( git commit -am 'Added some feature' )\n- Push to the branch ( git push origin my-new-feature )\n- Create new Pull Request\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkpn-puppet%2Fpuppet-kpn-advanced_security_policy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkpn-puppet%2Fpuppet-kpn-advanced_security_policy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkpn-puppet%2Fpuppet-kpn-advanced_security_policy/lists"}