Puppet Class: secure_windows::stig::v73773

Defined in:
manifests/stig/v73773.pp

Overview

This class manages: V-73773 The Deny log on through Remote Desktop Services user right on domain controllers must be configured to prevent unauthenticated access.

Parameters:

  • enforced (Boolean) (defaults to: false) 


4
5
6
7
8
9
10
11
12
13
14
15
16
17
 
# File 'manifests/stig/v73773.pp', line 4

class secure_windows::stig::v73773 (
  Boolean $enforced = false,
) {
  if $enforced {
    if($facts['windows_server_type'] == 'windowsdc') {
      local_security_policy { 'Deny log on through Remote Desktop Services':
        ensure         => 'present',
        policy_setting => 'SeDenyRemoteInteractiveLogonRight',
        policy_type    => 'Privilege Rights',
        policy_value   => '*S-1-5-32-546',
      }
    }
  }
}