search

dsccommunity / SecurityPolicyDsc

A wrapper around secedit.exe to configure local security policies
MIT License
177 stars 53 forks source link

SecurityTemplate - " Task did not complete successfully " #131

Open weiyentan opened 5 years ago

weiyentan commented 5 years ago

Apologies about the syntax below. But I am trying out the dsc resource SecurityTemplate. I am presuming from that I can supply an inf file and it will apply that to the computer.

So that is what I did and I get an error in the logs saying that task did not complete successfully. (full details below).

I have looked at the inf file and I can see the entry in the inf file and it looks like this:

SeDenyInteractiveLogonRight = *S-1-5-32-546

Is this the correct syntax? Any help would be appreciated.

[code] { " time " : " 2019 - 08 - 26T17 : 52 : 50 . 763 + 12 :00 " , " type " : " verbose " , " message " : " [ WIN-TFOSCLO6JKV] :
[ [ Security Template ] Direct Resource Access ] Policy : SeDeny Interactive LogonRight not in a desired state . " } , { " t i m e " : " 2019 - 08 - 26T17 : 52 : 50 . 763 + 12:00 " , " type " : " error " , " message " : " T ask did not complete successfully " } , 

 { " time " :   " 2019 - 08 - 26T17 : 52:50.779 + 12:00 " ,   " type " :   " verbose " ,   " message " :   " [ WIN-TFOSCLO6JKV ] :   LCM :     [   End         Set
         ]     [ [ Security Template ] Direct Resource Access ]     in   0.6410   seconds . " }

[/code]

weiyentan commented 5 years ago

I noticed that this is a privilege rights section of the security policy as I removed that section and error went away. Not quite sure what the issue is...