summaryrefslogtreecommitdiff
path: root/ansible/roles/dc03/tasks/setup_defender_gpo.yaml
diff options
context:
space:
mode:
authorheqnx <root@heqnx.com>2025-07-17 18:08:37 +0300
committerheqnx <root@heqnx.com>2025-07-17 18:08:37 +0300
commitcbd285087e710a265bdddfb4521a39a57bc8702c (patch)
treef95919e8eba622b8a517ffa20a6880bd88cc5e03 /ansible/roles/dc03/tasks/setup_defender_gpo.yaml
parent156f392cd059a4f0de0b8ba2443eb2eeb1e1c41a (diff)
downloadansible-active-directory-range-cbd285087e710a265bdddfb4521a39a57bc8702c.tar.gz
ansible-active-directory-range-cbd285087e710a265bdddfb4521a39a57bc8702c.zip
added tree and child domain
Diffstat (limited to 'ansible/roles/dc03/tasks/setup_defender_gpo.yaml')
-rw-r--r--ansible/roles/dc03/tasks/setup_defender_gpo.yaml7
1 files changed, 7 insertions, 0 deletions
diff --git a/ansible/roles/dc03/tasks/setup_defender_gpo.yaml b/ansible/roles/dc03/tasks/setup_defender_gpo.yaml
new file mode 100644
index 0000000..9813f7b
--- /dev/null
+++ b/ansible/roles/dc03/tasks/setup_defender_gpo.yaml
@@ -0,0 +1,7 @@
+- name: execute setup-defender-gpo.ps1 as domain admin
+ ansible.windows.win_command: powershell.exe -ExecutionPolicy Bypass -File C:\scripts\setup-defender-gpo.ps1 -DomainName "{{ child_domain_name }}"
+ become: yes
+ become_method: runas
+ become_user: "{{ child_domain_name }}\\Administrator"
+ vars:
+ ansible_become_password: "{{ default_win_password }}"