Fix 18.10.89.2.2 and 18.10.89.1.3

Signed-off-by: Stephen Williams <[email protected]>
ansible-lockdown · Mar 15, 2024 · e8a5010 · e8a5010
1 parent d791eb2
commit e8a5010
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/defaults/main.yml b/defaults/main.yml
@@ -42,6 +42,7 @@ min_ansible_version: "2.10.1"
 # win19cis_rule_18_9_102_2_2
 # win19cis_rule_18_9_102_2_3
 # win19cis_rule_18_9_103_1
+# win19cis_rule_18_10_89_2_2 # Breaks WinRM Connection
 win_skip_for_test: false
 
 # Changes will be made that will require a system reboot.

diff --git a/tasks/section18.yml b/tasks/section18.yml
@@ -3511,6 +3511,7 @@
       type: dword
   when:
       - win19cis_rule_18_10_89_1_3
+      - not win_skip_for_test
   tags:
       - level1-domaincontroller
       - level1-memberserver
@@ -3539,7 +3540,7 @@
   ansible.windows.win_regedit:
       path: HKLM:\Software\Policies\Microsoft\Windows\Winrm\Service
       name: AllowAutoConfig
-      data: 1
+      data: 0
       type: dword
   when:
       - win19cis_rule_18_10_89_2_2