43 lines
1.6 KiB
HCL
43 lines
1.6 KiB
HCL
resource "microsoft365wp_device_management_configuration_policy" "enable_laps" {
|
|
name = "LAPS"
|
|
settings = [
|
|
{ instance = {
|
|
definition_id = "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd"
|
|
choice = {
|
|
value = {
|
|
value = "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_1"
|
|
children = [
|
|
{
|
|
definition_id = "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordagedays"
|
|
simple = { value = { integer = { value = "14" } } }
|
|
},
|
|
{
|
|
definition_id = "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordcomplexity"
|
|
choice = { value = { value = "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordcomplexity_4" } }
|
|
},
|
|
{
|
|
definition_id = "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordlength"
|
|
simple = { value = { integer = { value = "14" } } }
|
|
}
|
|
|
|
]
|
|
}
|
|
}
|
|
} },
|
|
{ instance = {
|
|
definition_id = "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus"
|
|
choice = { value = { value = "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus_1" } }
|
|
} }
|
|
]
|
|
depends_on = [azuread_group.mem_windows_devices]
|
|
assignments = [
|
|
for x in [
|
|
"${data.azuread_group.mem_windows_devices.object_id}"
|
|
] :
|
|
{ target = { group = { group_id = x } } }
|
|
]
|
|
|
|
}
|
|
|
|
|