https://github.com/jonmosco/puppet-msuac
Microsoft UAC control
https://github.com/jonmosco/puppet-msuac
Last synced: about 1 year ago
JSON representation
Microsoft UAC control
- Host: GitHub
- URL: https://github.com/jonmosco/puppet-msuac
- Owner: jonmosco
- Created: 2013-07-31T13:18:18.000Z (almost 13 years ago)
- Default Branch: master
- Last Pushed: 2023-08-07T17:04:08.000Z (almost 3 years ago)
- Last Synced: 2025-03-11T01:50:05.211Z (over 1 year ago)
- Language: Puppet
- Size: 9.77 KB
- Stars: 0
- Watchers: 4
- Forks: 3
- Open Issues: 1
-
Metadata Files:
- Readme: README.markdown
Awesome Lists containing this project
README
#msuac
####Table of Contents
1. [Overview](#overview)
2. [Module Description - What the module does and why it is useful](#module-description)
3. [Setup - The basics of getting started with msuac](#setup)
* [What msuac affects](#what-msuac-affects)
* [Setup requirements](#setup-requirements)
4. [Usage - Configuration options and additional functionality](#usage)
5. [Limitations - OS compatibility, etc.](#limitations)
6. [Development - Guide for contributing to the module](#development)
##Overview
The msuac module allows you to manage Microsoft User account control (MSUAC).
UAC is a feature in Windows to help protect you from intrusive software by warning
you if changes are being made. When a change to the computer is being made that requires
administrative privileges, UAC will prompt you based on its configuration. This module will
allow you to change those settings.
##Module Description
This module will change the registry key values based on the desired UAC configuration.
##Setup
###What msuac affects
* If UAC is set to 'Disabled', a reboot will be required for changes to take effect.
###Setup Requirements
Depends on the following modules:
[puppetlabs/registry](https://forge.puppetlabs.com/puppetlabs/registry)
[puppetlabs/stdlib](https://forge.puppetlabs.com/puppetlabs/stdlib)
##Usage
Class: msuac
class { 'msuac':
enabled => false,
prompt => disabled,
}
##Parameters:
$prompt_value is one of the three option:
0x00000000 (disabled)
This option SHOULD be used to allow the Consent Admin to perform an
operation that requires elevation without consent or credentials.
0x00000001 (authprompt)
This option SHOULD be used to prompt the Consent Admin to enter his or her
user name and password (or another valid admin) when an operation requires
elevation of privilege.
0x00000002 (default, consentprompt)
This option SHOULD be used to prompt the administrator in Admin Approval
Mode to select either "Permit" or "Deny" an operation that requires
elevation of privilege. If the Consent Admin selects Permit, the operation
will continue with their highest available privilege. "Prompt for consent"
removes the inconvenience of requiring that users enter their name and
password to perform a privileged task.
##Limitations
Windows Versions supported:
- Windows Visa
- Windows 7
- Server 2008
##Development
##Release Notes/Contributors/Etc
Contributors:
Thomas Linkin