25 lines
763 B
HCL
25 lines
763 B
HCL
resource "microsoft365wp_device_management_configuration_policy" "disable_enumeration" {
|
|
name = "Disable Enumeration of SAM Accounts and Shares"
|
|
settings = [
|
|
{ instance = {
|
|
definition_id = "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares"
|
|
choice = {
|
|
value = {
|
|
value = "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares_1"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
]
|
|
depends_on = [azuread_group.mem_windows_devices]
|
|
assignments = [
|
|
for x in [
|
|
"${data.azuread_group.mem_windows_devices.object_id}"
|
|
] :
|
|
{ target = { group = { group_id = x } } }
|
|
]
|
|
|
|
}
|
|
|
|
|