Examples/Resources/SecurityOption/4-SecurityOption_Restricted_Remote_Call_To_Sam_Config.ps1

<#PSScriptInfo
.VERSION 1.0
.GUID b65a2743-d89e-4a06-8cb1-a4650f7435e7
.AUTHOR Microsoft Corporation
.COMPANYNAME Microsoft Corporation
.COPYRIGHT (c) Microsoft Corporation. All rights reserved.
.TAGS DSCConfiguration
.LICENSEURI https://github.com/PowerShell/SecurityPolicyDsc/blob/master/LICENSE
.PROJECTURI https://github.com/PowerShell/SecurityPolicyDsc
.ICONURI
.EXTERNALMODULEDEPENDENCIES
.REQUIREDSCRIPTS
.EXTERNALSCRIPTDEPENDENCIES
.RELEASENOTES
.PRIVATEDATA
#>


#Requires -module SecurityPolicyDsc

<#
    .DESCRIPTION
        This configuration will manage two network access security options using the
        MSFT_RestrictedRemoteSamSecurityDescriptor class to specify the permission
        and identity for each option.
#>

configuration SecurityOption_Restricted_Remote_Call_To_Sam_Config
{
    Import-DscResource -ModuleName SecurityPolicyDsc

    node localhost
    {
        SecurityOption RemoteSam
        {
            Name                                                                = 'test'
            Network_access_Restrict_clients_allowed_to_make_remote_calls_to_SAM = @(
                MSFT_RestrictedRemoteSamSecurityDescriptor
                {
                    Permission = 'Deny'
                    Identity   = 'ServerAdmin'
                }
                MSFT_RestrictedRemoteSamSecurityDescriptor
                {
                    Permission = 'Allow'
                    Identity   = 'Administrators'
                }
            )
            Network_access_Allow_anonymous_SID_Name_translation                 = 'Disabled'
        }
    }
}