Wrong control check for 17.5.1 - Githubissues

ansible-lockdown / Windows-2019-CIS

CIS Baseline Ansible Role for Windows 2019

MIT License

134 stars 72 forks source link

Wrong control check for 17.5.1 #27

Closed Julieeeen closed 3 years ago

Julieeeen commented 3 years ago

name: "SCORED | 17.5.1 | PATCH | (L1) Ensure Audit Account Lockout is set to include Failure" block:
- name: "SCORED | 17.5.1 | AUDIT | (L1) Ensure Audit Account Lockout is set to include Failure" win_shell: AuditPol /get /subcategory:"Account Lockout" -r | ConvertFrom-Csv | Select-Object -expand "Inclusion Setting" changed_when: false failed_when: false register: rule_17_5_1_audit
- name: "SCORED | 17.5.1 | PATCH | (L1) Ensure Audit Account Lockout is set to include Failure" win_shell: AuditPol /set /subcategory:"Account Lockout" /failure:enable when: "'Failure' not in rule_17_5_1_audit.stdout" when:
  - rule_17_5_1 tags:
  - level1-domaincontroller
  - level1-memberserver
  - rule_17.5.1
  - patch