To update modified Group Policy on windows by using Ansible playbook

Introduction:

Ansible is an automatic configuration tool that works on a wide range of windows and UNIX-like systems. The win_shell module is used to run commands on windows systems. The win_unzip module is used to manage achieved files

Master Server Requirements:

ansible

python3-pip

pywinrm (python package)

Windows Requirements:

powershell 3+

Dot net 4

Installation Procedure:

Step 1 : Update the group policy in windows client system

Step 2: Check the OS version by using the following command

root@linuxhelp:~# lsb_release -a
No LSB modules are available.
Distributor ID:	Ubuntu
Description:	Ubuntu 21.04
Release:	21.04
Codename:	hirsute
  

Step 3: Check the availability of Ansible package

root@linuxhelp:~# apt list -a ansible
Listing... Done
ansible/hirsute,hirsute,now 4.8.0-1ppa~hirsute all [installed]
ansible/hirsute,hirsute 2.10.7-1 all

Step 4: Check the availability of python3-pip package

root@linuxhelp:~# apt list -a python3
Listing... Done
python3/hirsute,now 3.9.4-1 amd64 [installed,automatic]

python3/hirsute 3.9.4-1 i386

Step 5: Check the availability of python package pywinrm

root@linuxhelp:~# pip list | grep pywinrm
pywinrm                0.4.2

root@linuxhelp:~# vi /etc/ansible/hosts 


[windows]
192.168.6.104

[windows:vars]
ansible_user=Admin
ansible_password=Admin@123
ansible_port=5986
ansible_connection=winrm
ansible_winrm_server_cert_validation=ignore

root@linuxhelp:~# vi policy.yml

- hosts: windows
  gather_facts: true
  tasks:
  - name: Extract the zip file
    win_unzip:
         src: E:\Policy\Modified.zip
         dest: C:\Windows\System32\GroupPolicy
  - name: Updating the Group Policy
    win_shell: gpupdate /force

root@linuxhelp:~# ansible-playbook policy.yml --syntax-check

playbook: policy.yml

root@linuxhelp:~# ansible-playbook policy.yml

PLAY [windows] ****************************************************************************************************

TASK [Gathering Facts] ********************************************************************************************
ok: [192.168.6.104]

TASK [Extract the zip file] ***************************************************************************************
changed: [192.168.6.104]

TASK [Updating the Group Policy] **********************************************************************************
changed: [192.168.6.104]

PLAY RECAP ********************************************************************************************************
192.168.6.104              : ok=3    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0