Initial Commit

Disable_Enumeration_of_SAM_Accounts_and_Shares.tf

@@ -0,0 +1,24 @@
+resource "microsoft365wp_device_management_configuration_policy" "disable_enumeration" {
+  name = "Disable Enumeration of SAM Accounts and Shares"
+  settings = [
+    { instance = {
+      definition_id = "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares"
+      choice = {
+        value = {
+          value = "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares_1"
+        }
+      }
+      }
+    }
+  ]
+  depends_on = [azuread_group.mem_windows_devices]
+  assignments = [
+    for x in [
+      "${data.azuread_group.mem_windows_devices.object_id}"
+    ] :
+    { target = { group = { group_id = x } } }
+  ]
+
+}
+
+