Using Win-regedit module to change ie hardening

[chall...@gmail.com]

currently i am using power shell

Set-ItemProperty 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\' -Name 'IEHarden' -Value '0'

so , i am trying this:

- win_regedit:

         path: 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\'

         name:  IEHarden

         data: 0

         type: dword

Error:

"msg": "Missing required argument: key"

If i debug more:

Name           Used (GB)     Free (GB) Provider      Root

----           ---------     --------- --------      ----

HKCR                                   Registry      HKEY_CLASSES_ROOT

HKU                                    Registry      HKEY_USERS

HCCC                                   Registry      HKEY_CURRENT_CONFIG

{"msg":"Missing required argument: key","failed":true}

If i change path to key then it executes, but doesn't change, output shows as:

"changed": false,

    "data_changed": false,

    "data_type_changed": false,

    "invocation": {

        "module_name": "win_regedit"

[J Hawkesworth]

I think maybe your module args might be indented too far. I suggest using something like yamllint.com to check your playbook yaml.

Other suggestion is to loose the trailing \ on the path: argument value.

Hope this helps,

Jon

[Trent Scholl]

Did you end up getting this working? I'm having the same issue with win_regedit

[J Hawkesworth]

Ah, I think I know what is going on here....

If you are using an ansible version before 2.3 devel 'path' should be called 'key', 'name' should be called 'entry' and 'type' should be called 'datatype'

The parameter names were changed (and backward compatible aliases were added for the old names) during 2.3 development as the older names didn't match the terms used by Microsoft.

If you can, please try using ansible 2.3 development version, which is now in feature freeze, so should be stable enough to test against.  I believe Release Candidates are due to start appearing soon.

All the best,

Jon