resource "microsoft365wp_device_configuration_custom" "enable_lsa" {
  display_name = "Enable Local Security Authority Protection Mode"
  windows10 = {
    oma_settings = [
      {
        display_name = "Enable Local Security Authority Protection Mode"
        oma_uri      = "./Device/Vendor/MSFT/Policy/Config/LocalSecurityAuthority/ConfigureLsaProtectedProcess"
        integer      = { value = 1 }
      }
    ]
  }
  depends_on = [azuread_group.mem_windows_devices]
  assignments = [
    for x in [
      "${data.azuread_group.mem_windows_devices.object_id}"
    ] :
    { target = { group = { group_id = x } } }
  ]

}