# Question on Win\_Module for modifying Security Policy

**URL:** <https://forum.ansible.com/t/question-on-win-module-for-modifying-security-policy/24606>\
**Category:** Ansible Project\
**Tags:** windows\
**Created:** [May 31, 2017, 4:32am UTC](https://forum.ansible.com/t/question-on-win-module-for-modifying-security-policy/24606 "2017-05-31T04:32:19Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![David\_Rose](https://avatars.discourse-cdn.com/v4/letter/d/cdc98d/32.png) [@David\_Rose](https://forum.ansible.com/u/David_Rose)\
**Post date:** [May 31, 2017, 4:32am UTC](https://forum.ansible.com/t/question-on-win-module-for-modifying-security-policy/24606/1 "2017-05-31T04:32:19Z")

</div>

Hello all!  
My co-workers harden and configure base images for Windows 2008r2 using an importable .INF file. It has entries such as:

[System Access]  
MinimumPasswordAge = 2  
MaximumPasswordAge = 30  
MinimumPasswordLength = 8  
PasswordComplexity = 1

[System Log]  
MaximumLogSize = 81920  
AuditLogRetentionPeriod = 0  
RestrictGuestAccess = 1

[Service General Setting]  
“WinHttpAutoProxySvc”,4,“”  
“MpsSvc”,4,“”  
“SharedAccess”,4,“”  
“upnphost”,4,“”

[Version]  
signature=“$CHICAGO$”  
Revision=1

As well as Registry entries. I’ve found the module for importing registry entries easily; however, how can I merge in keys & values for SecPol entries? What win\_ module would be used for that?

I would like to know how to add these via a module, which would show granular import success / failure, rather than a CLI raw command. I’m interested in running this action against newly-instantiated cloud VMs.

Thank you for advice / direction!  
-dave