dsccommunity / SecurityPolicyDsc

A wrapper around secedit.exe to configure local security policies
MIT License
177 stars 53 forks source link

Problem: 'MSFT_Security Option : MSFT_Security Option failed to execute Set-TargetResource failed to update security option´ #183

Open nipansanjay opened 2 years ago

nipansanjay commented 2 years ago

Verbose logs showing the problem PowerShell DSC resource MSFT_SecurityOption failed to execute Set-TargetResource functionality with error message: Failed to update security option Interactive_logon_Do_not_display_last_user_name, Microsoft_network_client_Digitally_sign_communications_always, Microsoft_network_server_Digitally_sign_communications_always, Microsoft_network_server_Digitally_sign_communications_if_client_agrees, Network_access_Remotely_accessible_registry_paths, Network_access_Remotely_accessible_registry_paths_and_subpaths, Network_security_Force_logoff_when_logon_hours_expire, Network_security_Minimum_session_security_for_NTLM_SSP_based_including_secure_RPC_clients, Network_security_Minimum_session_security_for_NTLM_SSP_based_including_secure_RPC_servers, User_Account_Control_Behavior_of_the_elevation_prompt_for_administrators_in_Admin_Approval_Mode, User_Account_Control_Behavior_of_the_elevation_prompt_for_standard_users. Refer to%windir%\security\logs\scesrv.log for details.

We are using SecurityPolicyDSC for performing security related hardening settings on Windows OS 2019 VM. After running the scripts, we can see that the settings gets applied correctly but at the same time we can see this error as well in the logs.

Please help us to troubleshoot further by providing some inputs. In case of any further details required then please let us know.