Hello, I use Ansible to manage Linux hosts and just recently had a requirement to manage Windows Servers.
I have Ansible working against a Windows 2012 R2 host using an account (test_user) that is part of the "administrators" group. I would like reduce the rights of test_user, so it is no longer in the "administrators" group, but can still connect and copy files to its own homedrive, and basically run commands that a user that is part of the "Users" group can. On removing the user Ansible provives the following error: fatal: [servername] => 401 Unauthorized. basic auth failed I did a bit of research and found the user needed to be part of the "Remote Management Users", this would allow test_user to run Powershell remotely. I tested this from another Windows host, and yes it works. PS> $options=New-PSSessionOption -SkipCACheck -SkipCNCheck PS> Enter-PSSession -ComputerName servername -Credential servername\test_user -UseSSL -SessionOption $options However via Ansible I get the following error: fatal: [servername] => failed to exec cmd PowerShell -NoProfile -NonInteractive -EncodedCommand... Does anyone know if it's possible to run Ansible against a Windows hosts with a non admin user? Thanks. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/bfe0aed3-7b9f-4ec9-89d2-befff706787c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
