https://github.com/gsa/ansible-os-win-2016
Ansible Roles for Windows Server 2016
https://github.com/gsa/ansible-os-win-2016
Last synced: 6 months ago
JSON representation
Ansible Roles for Windows Server 2016
- Host: GitHub
- URL: https://github.com/gsa/ansible-os-win-2016
- Owner: GSA
- Created: 2018-12-05T22:39:53.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2018-12-05T22:47:26.000Z (over 7 years ago)
- Last Synced: 2025-01-20T12:22:40.802Z (over 1 year ago)
- Size: 18.6 KB
- Stars: 20
- Watchers: 7
- Forks: 28
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
Windows Server 2016 GSA Benchmark
=================================
This Ansible content will configure a Windows Server 2016 machine to be GSA compliant.
This role **will make changes to the system** that could impact its performance and/or availability.
For configuration compliance auditing, use a tool such as [Nessus](https://www.tenable.com/products/nessus-vulnerability-scanner) or [CIS-CAT](https://learn.cisecurity.org/cis-cat-landing-page)
This hardening content is based on the GSA Microsoft Windows Server 2016 Security Benchmark v1.0 and the [CIS Microsoft Windows Server 2016 Benchmark v1.0.0 ](https://www.cisecurity.org/cis-benchmarks/).
Important Information
---------------------
Before executing, you should carefully review the playbook tasks to make sure your systems will not be negatively impacted.
Please thoroughly review to ensure your organizational requirements are met.
##### The current default configuration will:
* Configure all Windows Firewall controls except for "Ensure 'Windows Firewall - Public - Inbound connections' is set to 'Block (default)'"
* Configure Windows Update controls
##### The configuration will not:
* Set the 'Minimum password length' to 16 or more characters
* Configure 'Deny access to this computer from the network' to include local accounts
* Configure 'Deny log on through Remote Desktop Services' to include local accounts
Dependencies
------------
Ansible > 2.4
Example Playbook
-------------------------
```
---
- name: Harden Server
hosts: all
roles:
- ansible-os-win-2016
tasks:
```
How to test locally
--------------------------
```
ansible-playbook main.yml --connection=local
```
License
-------
MIT