SecurityPolicyDsc

2.10.0.0

Examples/Resources/SecurityOption/4-SecurityOption_Restricted_Remote_Call_To_Sam_Config.ps1

                                <#PSScriptInfo

.VERSION 1.0

.GUID b65a2743-d89e-4a06-8cb1-a4650f7435e7

.AUTHOR Microsoft Corporation

.COMPANYNAME Microsoft Corporation

.COPYRIGHT (c) Microsoft Corporation. All rights reserved.

.TAGS DSCConfiguration

.LICENSEURI https://github.com/PowerShell/SecurityPolicyDsc/blob/master/LICENSE

.PROJECTURI https://github.com/PowerShell/SecurityPolicyDsc

.ICONURI

.EXTERNALMODULEDEPENDENCIES

.REQUIREDSCRIPTS

.EXTERNALSCRIPTDEPENDENCIES

.RELEASENOTES

.PRIVATEDATA

#>

#Requires -module SecurityPolicyDsc

<#

    .DESCRIPTION

        This configuration will manage two network access security options using the

        MSFT_RestrictedRemoteSamSecurityDescriptor class to specify the permission

        and identity for each option.

#>

configuration SecurityOption_Restricted_Remote_Call_To_Sam_Config

{

    Import-DscResource -ModuleName SecurityPolicyDsc

    node localhost

    {

        SecurityOption RemoteSam

        {

            Name                                                                = 'test'

            Network_access_Restrict_clients_allowed_to_make_remote_calls_to_SAM = @(

                MSFT_RestrictedRemoteSamSecurityDescriptor

                {

                    Permission = 'Deny'

                    Identity   = 'ServerAdmin'

                }

                MSFT_RestrictedRemoteSamSecurityDescriptor

                {

                    Permission = 'Allow'

                    Identity   = 'Administrators'

                }

            )

            Network_access_Allow_anonymous_SID_Name_translation                 = 'Disabled'

        }

    }

}