Describe the Issue
Ordering of the applied controls makes it fails
Expected Behavior
TASK [Windows-2022-CIS : 1.2.2 | PATCH | Ensure Account lockout threshold is set to 5 or fewer invalid logon attempt(s), but not 0. | Set Variable.] ***
changed: [10.0.0.3]
TASK [Windows-2022-CIS : 1.2.3 | PATCH | Ensure Allow Administrator account lockout is set to Enabled] ***
changed: [10.0.0.3]
TASK [Windows-2022-CIS : 1.2.4 | PATCH | Ensure Reset account lockout counter after is set to 15 or more minutes. | Set Variable.] ***
changed: [10.0.0.3]
TASK [Windows-2022-CIS : 1.2.1 | PATCH | Ensure Account lockout duration is set to 15 or more minutes. | Set Variable] ***
changed: [10.0.0.3]
Actual Behavior
The current order fails
Control(s) Affected
1.2.1
1.2.2
1.2.3
1.2.4
Environment (please complete the following information):
branch being used: devel
Ansible Version: 2.15
Host Python Version: does not apply (Windows)
Ansible Server Python Version: 3.11.5
Additional Details: None
Additional Notes
None
Possible Solution
Azure requires a different order, however AWS can use the standard order (same as local).
Setting win22cis_cloud_based_system in prelim.yml to false for AWS would fix the issue.
Describe the Issue Ordering of the applied controls makes it fails
Expected Behavior
Actual Behavior The current order fails
Control(s) Affected
Environment (please complete the following information):
devel2.153.11.5NoneAdditional Notes None
Possible Solution Azure requires a different order, however AWS can use the standard order (same as local). Setting
win22cis_cloud_based_systemin prelim.yml to false for AWS would fix the issue.