dsccommunity / SecurityPolicyDsc

A wrapper around secedit.exe to configure local security policies
MIT License
177 stars 53 forks source link

Making dsc for gpo analysis/validation #145

Open oliwex opened 4 years ago

oliwex commented 4 years ago

I have the example code:

Configuration AccountPolicy_Config
{
    Import-DscResource -ModuleName SecurityPolicyDsc

    node DELL
    {
        AccountPolicy AccountPolicies
        {
            Name                                        = 'PasswordPolicies'
            Enforce_password_history                    = 15
            Maximum_Password_Age                        = 42
            Minimum_Password_Age                        = 1
            Minimum_Password_Length                     = 12
            Password_must_meet_complexity_requirements  = 'Enabled'
            Store_passwords_using_reversible_encryption = 'Disabled'
        }
    }
}

So is it possible to make option in dsc to validate settings in gpo. Example: Enforce_password_history=TRUE Maximum_Password_Age=TRUE Minimum_Password_Age=TRUE Minimum_Password_Length=TRUE Password_must_meet_complexity_requirements=TRUE Store_passwords_using_reversible_encryption=TRUE