Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Overall Review of Changes:
New Features
Added the ability to create tailored Group Policy Objects (GPOs) compliant with CIS benchmarks using Ansible:
Custom GPOs based on variables in defaults/main.
New variables for GPO creation.
Ability to toggle controls on/off for GPO inclusion.
Improved flexibility for Level 1 and Level 2 GPO creation.
Enhancements & Fixes
General Updates:
Banner update.
Added NIST Tags.
Verified all controls meet new CIS 3.0.1 standards.
Updated prelim Set system facts based on gather_facts module naming.
Updated win_regedit paths to reflect capitalized System/Software registry entries.
Removed unnecessary state: present values from win_regedit.
Standardized task headers in prelim and post sections.
Standardized "primary domain controller" to "domain controller" across all tasks.
Fixed metadata for Galaxy.
Control Changes:
Control 9.2.3: Removed, and tasks from 9.2.4 - 9.2.8 shifted to 9.2.3 - 9.2.7.
Control 9.2.8: Removed from defaults/main.
Control 18.9.5.2: Added new variable option.
Enhancements & Fixes
Aligned tasks with Windows2019CIS v3.0.1 release.
Updated LegalNoticeCaption variable title fix – Thanks @rlmass.
Standardized "primary domain controller" to "domain controller".
Updated PRELIM | Set Fact If Cloud-Based System to include ansible_system_vendor – Thanks @mfortin.
Updated CI/CD Pipelines – Thanks @mfortin.
Updated DisableBkGndGroupPolicy to 0 (Disabled) – Thanks @dennisharder-alight.
Updated ManagePreviewBuildsPolicyValue to 0 (Disabled) – Thanks @dennisharder-al.
Removed unnecessary state: present values from win_regedit.
Updated set_fact prelim vars with prefix prelim_ throughout the playbook.
Issue Fixes:
Please Check the Changelog
Enhancements:
Please Check the Changelog
How has this been tested?:
Locally And Azure