Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

ReAdd Feature to allow individual org setting changes #372

Closed
chasewilson opened this issue Apr 11, 2019 · 2 comments
Closed

ReAdd Feature to allow individual org setting changes #372

chasewilson opened this issue Apr 11, 2019 · 2 comments
Assignees
Labels
enhancement New feature or request
Milestone

Comments

@chasewilson
Copy link
Member

Is your feature request related to a problem? Please describe.
Previously, PowerStig had functionality to allow a hashtable to be passed in to update individual org settings. Need to re-add

Describe the solution you'd like
PowerStigs "OrgSettings" param accepts a path as currently working or accepts a hashtable of id's and values to change only one of those and the default for the rest. this will allow minor changes for different stig uses without having to manage and track multiple org setting files.

Describe alternatives you've considered
NA

Additional context
NA

@chasewilson chasewilson self-assigned this Apr 11, 2019
@bcwilhite bcwilhite assigned bcwilhite and unassigned chasewilson Aug 27, 2019
@bcwilhite bcwilhite added the enhancement New feature or request label Aug 27, 2019
@bcwilhite bcwilhite added this to the 4.0.0 milestone Aug 27, 2019
@bcwilhite
Copy link
Contributor

When work is complete, the following is an example of how to pass nested properties via hashtable to the OrgSettings property:

configuration WindowsServerBaseLine
{
    param()

    Import-DscResource -ModuleName PowerSTIG

    Node localhost
    {
        WindowsServer BaseLine
        {
            OsVersion   = '2012R2'
            OsRole      = 'MS'
            StigVersion = '2.16'
            DomainName  = 'WorkGroup'
            ForestName  = 'WorkGroup'
            OrgSettings = @{
                'V-10000' = @{
                    AccessControlEntry = @{
                        Entry = @(
                            @{
                                Type           = $null
                                Principal      = 'Administrators'
                                ForcePrincipal = 'False'
                                Inheritance    = 'This Key and Subkeys'
                                Rights         = 'FullControl'
                            },
                            @{
                                Type           = $null
                                Principal      = 'Backup Operators'
                                ForcePrincipal = 'False'
                                Inheritance    = 'This Key and Subkeys'
                                Rights         = 'ReadKey'
                            }
                        )
                    }
                }
            }
        }
    }
}

WindowsServerBaseLine -OutputPath C:\dev

@bcwilhite
Copy link
Contributor

Completed with PR #490

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants