ansible-lockdown / Windows-2019-CIS

CIS Baseline Ansible Role for Windows 2019
MIT License
134 stars 72 forks source link

TASK [./roles/Windows-2019-CIS/ : 2.2.22 | PATCH | Ensure Deny log on as a batch job to include Guests #72

Closed achebib closed 1 year ago

achebib commented 1 year ago

This part is failing in a guest server part of the domain

TASK [./roles/Windows-2019-CIS/ : 2.2.22 | PATCH | Ensure Deny log on as a batch job to include Guests] ***** fatal: [MNGITBCS02]: UNREACHABLE! => {"changed": false, "msg": "ntlm: the specified credentials were rejected by the server", "unreachable": true}

MrSteve81 commented 1 year ago

Sorry to get back to you so late on this. What your seeing is that ansible no longer has connection to the host you were running on. This is generally caused by a control setting a CIS benchmark that breaks the connection to the host. We recommend to troubleshoot on a test machine and do tests in sections and groups of controls until you are able to replicate the issue. From there you can skip that control that is breaking your connection to the host.