diff --git a/defaults/main.yml b/defaults/main.yml index f51aee2..f9c96d4 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -468,7 +468,6 @@ win19cis_rule_18_10_81_1: true win19cis_rule_18_10_81_2: true win19cis_rule_18_10_81_3: true win19cis_rule_18_10_82_1: true -win19cis_rule_18_10_82_2: true win19cis_rule_18_10_87_1: true win19cis_rule_18_10_87_2: true # WINRM CONTROLS # diff --git a/tasks/section18.yml b/tasks/section18.yml index b2be9ed..e82f142 100644 --- a/tasks/section18.yml +++ b/tasks/section18.yml @@ -3411,10 +3411,10 @@ - patch - ie -- name: "18.10.82.1 | PATCH | Ensure Enable MPR notifications for the system is set to Disabled" +- name: "18.10.82.1 | PATCH | Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'" ansible.windows.win_regedit: path: HKLM:\Software\Microsoft\Windows\Currentversion\Policies\System - name: EnableMPR + name: DisableAutomaticRestartSignOn data: 1 type: dword when: @@ -3426,21 +3426,6 @@ - patch - logon -- name: "18.10.82.2 | PATCH | Ensure Sign-in last interactive user automatically after a system-initiated restart is set to Disabled" - ansible.windows.win_regedit: - path: HKLM:\Software\Microsoft\Windows\Currentversion\Policies\System - name: DisableAutomaticRestartSignOn - data: 1 - type: dword - when: - - win19cis_rule_18_10_82_2 - tags: - - level1-domaincontroller - - level1-memberserver - - rule_18.10.82.2 - - patch - - logon - - name: "18.10.87.1 | PATCH | Ensure Turn on PowerShell Script Block Logging is set to Enabled" ansible.windows.win_regedit: path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging