Initial Commit

2025-02-04 19:23:56 +10:00
commit ac08902f9f
13 changed files with 809 additions and 0 deletions
--- a/Enable_Local_Security_Authority_Protection_Mode.tf
+++ b/Enable_Local_Security_Authority_Protection_Mode.tf
@ -0,0 +1,20 @@
+resource "microsoft365wp_device_configuration_custom" "enable_lsa" {
+  display_name = "Enable Local Security Authority Protection Mode"
+  windows10 = {
+    oma_settings = [
+      {
+        display_name = "Enable Local Security Authority Protection Mode"
+        oma_uri      = "./Device/Vendor/MSFT/Policy/Config/LocalSecurityAuthority/ConfigureLsaProtectedProcess"
+        integer      = { value = 1 }
+      }
+    ]
+  }
+  depends_on = [azuread_group.mem_windows_devices]
+  assignments = [
+    for x in [
+      "${data.azuread_group.mem_windows_devices.object_id}"
+    ] :
+    { target = { group = { group_id = x } } }
+  ]
+
+}