dsccommunity / SecurityPolicyDsc

A wrapper around secedit.exe to configure local security policies
MIT License
177 stars 53 forks source link

AccountPolicy: Add AllowAdministratorAccountLockout #193

Open TuemmlerKelch opened 7 months ago

TuemmlerKelch commented 7 months ago

Details of the scenario you tried and the problem that is occurring

Microsoft added the option to lock built in administrator account in 2022. For freshly installed systems, this is enabled by default, for new systems, this needs to be enabled. Currently this functionality is not configurable via AccountPolicy Resource.

Verbose logs showing the problem

N/A

Suggested solution to the issue

Some skilled person would need to take the time to implement and test this

The DSC configuration that is used to reproduce the issue (as detailed as possible)

As this is a enhancement/feature request, no need to reproduce anything

# insert configuration here

The operating system the target node is running

N/A

Version and build of PowerShell the target node is running

N/A

Version of the DSC module that was used

2.10.0, also checked 3.0.0-preview0006 and if my understanding is correct, this is not yet implemented there, either. (checked MSFT_AccountPolicy.psm1)