Files
IntunePolicies/Enable_Local_Security_Authority_Protection_Mode.tf
2025-02-04 19:23:56 +10:00

21 lines
626 B
HCL

resource "microsoft365wp_device_configuration_custom" "enable_lsa" {
display_name = "Enable Local Security Authority Protection Mode"
windows10 = {
oma_settings = [
{
display_name = "Enable Local Security Authority Protection Mode"
oma_uri = "./Device/Vendor/MSFT/Policy/Config/LocalSecurityAuthority/ConfigureLsaProtectedProcess"
integer = { value = 1 }
}
]
}
depends_on = [azuread_group.mem_windows_devices]
assignments = [
for x in [
"${data.azuread_group.mem_windows_devices.object_id}"
] :
{ target = { group = { group_id = x } } }
]
}