EOL Notice

Requirements

Platforms

Chef

Resources

windows_certificate_binding

Actions

Properties

Examples

# Bind the first certificate matching the subject to the default TLS portwindows_certificate_binding"me.acme.com"doend

# Bind a cert from the CA store with the given hash to port 4334windows_certificate_binding"me.acme.com"docert_name"d234567890a23f567c901e345bc8901d34567890"name_kind:hashstore_name"CA"port4334end

windows_dns

Actions

Properties

Examples

# Create A record linked to 2 addresses with a 10 minute ttlwindows_dns"m1.chef.test"dotarget['10.9.8.7','1.2.3.4']ttl600end

# Delete records. target is mandatory although not usedwindows_dns"m1.chef.test"doaction:deletetarget[]end

# Set an alias against the node in a rolenodes=search(:node,"role:my_service")windows_dns"myservice.chef.test"dorecord_type'CNAME'targetnodes[0]['fqdn']end

windows_http_acl

Actions

Properties

Examples

windows_http_acl'http://+:50051/'douser'pc\\fred'end

# Grant access to users "NT SERVICE\WinRM" and "NT SERVICE\Wecsvc" via sddlwindows_http_acl'http://+:5985/'dosddl'D:(A;;GX;;;S-1-5-80-569256582-2953403351-2909559716-1301513147-412116970)(A;;GX;;;S-1-5-80-4059739203-877974739-1245631912-527174227-2996563517)'end

windows_http_acl'http://+:50051/'doaction:deleteend

windows_schannel

Actions

Properties

windows_user_privilege

Actions

Properties

Examples

windows_user_privilege'Administrator'doprivilege%w(SeBatchLogonRightSeServiceLogonRight)end

windows_user_privilege'Administrator'doprivilege%w(SeBatchLogonRight)action:removeend

Available Privileges

SeTrustedCredManAccessPrivilege      Access Credential Manager as a trusted callerSeNetworkLogonRight                  Access this computer from the networkSeTcbPrivilege                       Act as part of the operating systemSeMachineAccountPrivilege            Add workstations to domainSeIncreaseQuotaPrivilege             Adjust memory quotas for a processSeInteractiveLogonRight              Allow log on locallySeRemoteInteractiveLogonRight        Allow log on through Remote Desktop ServicesSeBackupPrivilege                    Back up files and directoriesSeChangeNotifyPrivilege              Bypass traverse checkingSeSystemtimePrivilege                Change the system timeSeTimeZonePrivilege                  Change the time zoneSeCreatePagefilePrivilege            Create a pagefileSeCreateTokenPrivilege               Create a token objectSeCreateGlobalPrivilege              Create global objectsSeCreatePermanentPrivilege           Create permanent shared objectsSeCreateSymbolicLinkPrivilege        Create symbolic linksSeDebugPrivilege                     Debug programsSeDenyNetworkLogonRight              Deny access this computer from the networkSeDenyBatchLogonRight                Deny log on as a batch jobSeDenyServiceLogonRight              Deny log on as a serviceSeDenyInteractiveLogonRight          Deny log on locallySeDenyRemoteInteractiveLogonRight    Deny log on through Remote Desktop ServicesSeEnableDelegationPrivilege          Enable computer and user accounts to be trusted for delegationSeRemoteShutdownPrivilege            Force shutdown from a remote systemSeAuditPrivilege                     Generate security auditsSeImpersonatePrivilege               Impersonate a client after authenticationSeIncreaseWorkingSetPrivilege        Increase a process working setSeIncreaseBasePriorityPrivilege      Increase scheduling prioritySeLoadDriverPrivilege                Load and unload device driversSeLockMemoryPrivilege                Lock pages in memorySeBatchLogonRight                    Log on as a batch jobSeServiceLogonRight                  Log on as a serviceSeSecurityPrivilege                  Manage auditing and security logSeRelabelPrivilege                   Modify an object labelSeSystemEnvironmentPrivilege         Modify firmware environment valuesSeManageVolumePrivilege              Perform volume maintenance tasksSeProfileSingleProcessPrivilege      Profile single processSeSystemProfilePrivilege             Profile system performanceSeUnsolicitedInputPrivilege          "Read unsolicited input from a terminal device"SeUndockPrivilege                    Remove computer from docking stationSeAssignPrimaryTokenPrivilege        Replace a process level tokenSeRestorePrivilege                   Restore files and directoriesSeShutdownPrivilege                  Shut down the systemSeSyncAgentPrivilege                 Synchronize directory service dataSeTakeOwnershipPrivilege             Take ownership of files or other objects

windows_zipfile

Actions

Properties

Examples

windows_zipfile'c:/bin'dosource'http://download.sysinternals.com/Files/SysinternalsSuite.zip'action:unzipnot_if{::File.exists?('c:/bin/PsExec.exe')}end

windows_zipfile'c:/the_codez'dosource'c:/foo/baz/the_codez.zip'action:unzipend

windows_zipfile'c:/foo/baz/the_codez.zip'dosource'c:/the_codez'action:zipend

Libraries

WindowsHelper

installed_packages

# usage in a recipe::Chef::DSL::Recipe.send(:include,Windows::Helper)hash_of_installed_packages=installed_packages

is_package_installed?

# usage in a recipe to not download a file if package is already installed::Chef::DSL::Recipe.send(:include,Windows::Helper)is_win_sdk_installed=is_package_installed?('Windows Software Development Kit')remote_file'C:\windows\temp\windows_sdk.zip'dosource'http://url_to_download/windows_sdk.zip'action:create_if_missingnot_if{is_win_sdk_installed}end

# usage in a providerincludeWindows::Helperifis_package_installed?('Windows Software Development Kit')# do something if package is installedend

Windows::VersionHelper

core_version?

if ::Windows::VersionHelper.core_version?nodefail'Windows Core is not supported'end

workstation_version?

if ::Windows::VersionHelper.workstation_version?nodefail'Only server version of windows are supported'end

server_version?

if ::Windows::VersionHelper.server_version?nodeputs'Server version of windows are cool'end

nt_version

case ::Windows::VersionHelper.nt_versionnodewhen'6.0'then'Windows vista or Server 2008'when'6.1'then'Windows 7 or Server 2008R2'when'6.2'then'Windows 8 or Server 2012'when'6.3'then'Windows 8.1 or Server 2012R2'when'10.0'then'Windows 10'end

Usage

depends'windows'

License & Authors

Copyright 2011-2018, Chef Software, Inc.Copyright 2010, VMware, Inc.Copyright 2011, Business Intelligence Associates, IncCopyright 2012, Nordstrom, Inc.Licensed under the Apache License, Version 2.0 (the "License");you may not use this file except in compliance with the License.You may obtain a copy of the License at    http://www.apache.org/licenses/LICENSE-2.0Unless required by applicable law or agreed to in writing, softwaredistributed under the License is distributed on an "AS IS" BASIS,WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.See the License for the specific language governing permissions andlimitations under the License.