Details
-
New Feature
-
Status: Resolved
-
Medium
-
Resolution: Fixed
-
None
-
None
-
Night's Watch
-
5
-
NW - 2020-07-08, NW - 2020-07-21, NW - 2020-08-06, NW - 2020-08-18
-
New Feature
-
Rights and privileges for local Windows users can now be managed using the `roles` property and `role_membership` parameter.
-
Needs Assessment
Description
As a continuation for PUP-1289 feature, we should consider the ability to grant/remove users' logon as a service right with puppet. Without this right, the user cannot be used as logon account for a service.
This would also help better testing PUP-1289 through acceptance tests.
Other rights can be considered:
Some useful links found for implementation:
https://docs.microsoft.com/en-us/windows/win32/secbp/assigning-privileges-to-an-account
https://docs.microsoft.com/en-us/windows/win32/api/ntsecapi/nf-ntsecapi-lsaaddaccountrights