search

ayohrling / local_security_policy

Apache License 2.0
6 stars 28 forks source link

Request: Ability to merge existing policy_values with ones place in module #38

Open cfawcett82 opened 6 years ago

cfawcett82 commented 6 years ago

Similar to the feature added to kpn/local_security_policy. The ability to not clobber existing entries for a local policy would be ideal. I am specifically looking at 'Deny log on locally' and 'Deny log on through Remote Desktop Services' when creating a service account used for device discovery it would be great to be able to add to the existing policy instead of purge.

Setting or merging User Rights With Privilege Rights it is possible to set: the value or to merge: the values. When using the set: option, the policy_value is set as the desired value. Do not use '+' or '-' when using set:. When using the merge: option, the policy_value is merged with the existing value. '+' will add a value and '-' will remove a value. If you do not use set: or merge: then set: will be the default.

Nwolford51 commented 3 years ago

This would be extremely beneficial. We also were using kpn/local_security_policy and now unable to set all the local policies as we just want to ensure that values are present. WE do not want them to be overwritten when applying the policy.