search

dsccommunity / ComputerManagementDsc

DSC resources for for configuration of a Windows computer. These DSC resources allow you to perform computer management tasks, such as renaming the computer, joining a domain and scheduling tasks as well as configuring items such as virtual memory, event logs, time zones and power settings.
https://dsccommunity.org
MIT License
300 stars 83 forks source link

UserAccountControl: ComputerManagementDsc vs SecurityPolicyDsc #344

Open aydeisen opened 4 years ago

aydeisen commented 4 years ago

Out of curiosity: what's would be the use case for me to use the UserAccountControl resource in the ComputerManagementDsc module instead of the setting the User_Account_Control* keys for the SecurityOption resource in the SecurityPolicyDsc module?

PlagueHO commented 3 years ago

Hi @aydeisen - there does seem to be some cross over with both resources. This does happen from time-to-time - especially when there are multiple ways of achieving something using PowerShell. In this case the UserAccountControl resource has a less granular option for setting parameters.

But from an implementation perspective, UserAccountControl sets values in the registry directly where as SecurityOption uses secedit.exe to set the options.