Anybody has suggestion concerning Ansible Regedit vs GPO? Thank you!
-Simon ________________________________ From: ansible-project@googlegroups.com <ansible-project@googlegroups.com> on behalf of Simon-Pierre Diamond <sdiam...@harriscomputer.com> Sent: August 22, 2019 7:32 AM To: ansible-project@googlegroups.com <ansible-project@googlegroups.com> Subject: [ansible-project] Ansible and Windows Project Hi Ansible Community, It is my first post here. I am coming to get more information about Windows management with Ansible. I have been using Ansible for about a year now, and I am able to manage Windows with the WinRM with certificate. My playbooks manage the initial set up for all of the Windows servers (Create ansible user, Set DNS, Join AD, Add AD users to Local Administrator). What I am wondering is for GPOs. We can agree that all GPOs or LGPOs are linked to Registry Keys in Windows. At this point I am at a split road. Where I work, we don't have extensive GPOs from the domain controller, and our structure is not made so we don't have a central Domain Controller. At this point we have maybe 4-5 environment running a Domain Controller with Simple AD in AWS or AD in AWS. We are looking at potentially having way more in the future. Although we are at a point where we need to securely and configure application, users and other stuff. Usually, I would go and just make GPOs, but we can also agree that GPOs can come repetitive and long to do as it is manual through the GPO manager or AGPM. There is no way I can have a central AD to manage the others. My question for you guys is: should I use Ansible and the win_regedit module to manage and configure all of our windows machine? or I should keep GPOs and manage it that way and how windows is supposed to be? I am looking at a solution easy and reproducible where it can scale and provide some kind of version control. Also, money is an important factor, where I do not want to spend much more than what we already use. Please let me know your thoughts and if you have done something like that, I would be more than happy to get some information. If you have questions for me, let me know as well! Thank you very much! -Simon -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email toansible-project+unsubscr...@googlegroups.com<mailto:ansible-project+unsubscr...@googlegroups.com>. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/YT1PR01MB25530F725B2C5D92116975ECB6A50%40YT1PR01MB2553.CANPRD01.PROD.OUTLOOK.COM<https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%2fd%2fmsgid%2fansible-project%2fYT1PR01MB25530F725B2C5D92116975ECB6A50%2540YT1PR01MB2553.CANPRD01.PROD.OUTLOOK.COM%3futm_medium%3demail%26utm_source%3dfooter&c=E,1,638A8a7gCse2ebBARIKHEwpGUDhH6vjK2QFJNQLCZOL7VySSOWsRjecpTcQgi_434pqN6VPJQA2N2_GfoVjsk2dFnwzzhZMjFG4PGe0jvrc-_YqpTETm&typo=1>. This message has been sent on behalf of a company that is part of the Harris Operating Group of Constellation Software Inc. These companies are listed here<http://subscribe.harriscomputer.com/>. If you prefer not to be contacted by Harris Operating Group please notify us<http://subscribe.harriscomputer.com/>. This message is intended exclusively for the individual or entity to which it is addressed. This communication may contain information that is proprietary, privileged or confidential or otherwise legally exempt from disclosure. If you are not the named addressee, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this message in error, please notify the sender immediately by e-mail and delete all copies of the message. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/YT1PR01MB2553F1A47C70F157F9E593DCB6A40%40YT1PR01MB2553.CANPRD01.PROD.OUTLOOK.COM.