summaryrefslogtreecommitdiff
path: root/ansible/roles/dc03/tasks/setup_defender_gpo.yaml
diff options
context:
space:
mode:
Diffstat (limited to 'ansible/roles/dc03/tasks/setup_defender_gpo.yaml')
-rw-r--r--ansible/roles/dc03/tasks/setup_defender_gpo.yaml10
1 files changed, 10 insertions, 0 deletions
diff --git a/ansible/roles/dc03/tasks/setup_defender_gpo.yaml b/ansible/roles/dc03/tasks/setup_defender_gpo.yaml
new file mode 100644
index 0000000..fe4d6de
--- /dev/null
+++ b/ansible/roles/dc03/tasks/setup_defender_gpo.yaml
@@ -0,0 +1,10 @@
+- name: execute setup-defender-gpo.ps1 as domain admin
+ ansible.windows.win_shell: >
+ powershell.exe -ExecutionPolicy Bypass
+ -File C:\scripts\setup-defender-gpo.ps1
+ -DomainName "{{ child_domain_name }}"
+ become: yes
+ become_method: runas
+ become_user: "{{ child_domain_name }}\\Administrator"
+ vars:
+ ansible_become_password: "{{ default_win_password }}"