New in version 2.4.
Parameter | Choices/Defaults | Comments |
---|---|---|
action |
|
add will add the users/groups to the existing right.remove will remove the users/groups from the existing right.set will replace the users/groups of the existing right. |
name
required |
The name of the User Right as shown by the
Constant Name value from https://technet.microsoft.com/en-us/library/dd349804.aspx.The module will return an error if the right is invalid.
|
|
users
required |
A list of users or groups to add/remove on the User Right.
These can be in the form DOMAIN\user-group, user-group@DOMAIN.COM for domain users/groups.
For local users/groups it can be in the form user-group, .\user-group, SERVERNAME\user-group where SERVERNAME is the name of the remote server.
You can also add special local accounts like SYSTEM and others.
|
Note
---
- name: replace the entries of Deny log on locally
win_user_right:
name: SeDenyInteractiveLogonRight
users:
- Guest
- Users
action: set
- name: add account to Log on as a service
win_user_right:
name: SeServiceLogonRight
users:
- .\Administrator
- '{{ansible_hostname}}\local-user'
action: add
- name: remove accounts who can create Symbolic links
win_user_right:
name: SeCreateSymbolicLinkPrivilege
users:
- SYSTEM
- Administrators
- DOMAIN\User
- group@DOMAIN.COM
action: remove
Common return values are documented here, the following are the fields unique to this module:
Key | Returned | Description |
---|---|---|
added
list
|
success |
A list of accounts that were added to the right, this is empty if no accounts were added.
Sample:
['NT AUTHORITY\\SYSTEM', 'DOMAIN\\User']
|
removed
list
|
success |
A list of accounts that were removed from the right, this is empty if no accounts were removed.
Sample:
['SERVERNAME\\Administrator', 'BUILTIN\\Administrators']
|
This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.
Hint
If you notice any issues in this documentation you can edit this document to improve it.