ansible winrm question

Question

another team wants to implement ansible and integrate it with windows AD.

They want to run these commands on the Domain Controller:
winrm set winrm/config/service/auth '@{Basic="true"}'
winrm set winrm/config/service '@{AllowUnencrypted="true"}

Now we have 8 Domain Controllers, If I run this command to just one Domain Controller will it replicate to other DCs?

What will be the implications if basic authentication and allowunencrypted is set to true?

Answer 1

If you’re running a network of any kind and only have one domain controller, you’re living in a house with one door. If something happens to that domain controller, your whole system of servers falls apart. Always have more than one domain controller (DC).

But how do you make sure that both domain controllers have the same information? Let’s say you made a security-related change on one DC. You want to make sure that change is replicated on your other DCs immediately. Why wait 15 minutes or more for it to happen by schedule? You need to force replication of the domain controllers in Active Directory.

There are 3 ways to approach this; through the graphical user interface (GUI), through the command-line interface (CLI), or via PowerShell.

reference：https://helpdeskgeek.com/how-to/active-directory-force-replication/

Hope this information can help you

Best wishes

Vicky

Answer 2

Hi,

Welcome to share your current situation if there are any updates.

Please feel free to let us know if you need further assistance.

Best Regards,
Vicky

Answer 3

Hi,

Welcome to share your current situation if there are any updates.

Please feel free to let us know if you need further assistance.

Best Regards,
Vicky

Answer 4

Hi Sorry for the late reply.

How about this? if these commands are ran in a domain environment what would be the security implications?
winrm set winrm/config/service/auth '@{Basic="true"}'
winrm set winrm/config/service '@{AllowUnencrypted="true"}