dsccommunity / SecurityPolicyDsc

A wrapper around secedit.exe to configure local security policies
MIT License
177 stars 53 forks source link

Configure encryption types allowed or Kerberos #167

Open mgreenegit opened 3 years ago

mgreenegit commented 3 years ago

Discovered that multiple values can be selected for this setting, and when that occurs the combinations of all values would have to be mapped in to the PSD1, or we handle this by not trying to map to text names, or somehow support both formats.

"Confiugure_encryption_types_allowed_for_Kerberos" = @{
        Value   = "MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters\SupportedEncryptionTypes"
        Section = 'Registry Values'
        Option  = @{
            String = '4,' # + <Numeric string representing the combination of selected encryption types>
        }
    }