Fixes #37927 - Enable remote desktop in Windows template

theforeman · Nov 5, 2024 · 8e36aee · 8e36aee
1 parent 27d8e28
commit 8e36aee
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 0 deletions.
diff --git a/app/services/foreman/template_snapshot_service.rb b/app/services/foreman/template_snapshot_service.rb
@@ -86,6 +86,7 @@ def define_host_params(host)
         "ansible_user" => "win_ansible_user",
         "create_ansible_user" => "true",
         "ansible_ssh_pass" => "win_ansible_user_ssh_pass",
+        "remote_desktop" => "true",
       }
       host_params.each_pair do |name, value|
         FactoryBot.build(:host_parameter, host: host, name: name, value: value)

diff --git a/app/views/unattended/provisioning_templates/user_data/windows_default_user_data.erb b/app/views/unattended/provisioning_templates/user_data/windows_default_user_data.erb
@@ -22,6 +22,8 @@ identity:
         <% if host_param('remote_desktop') %>
         - "<%= powershell %> -NonInteractive -Command \"netsh advfirewall firewall set rule group=\"remote desktop\" new enable=Yes\""
         - "<%= powershell %> -NonInteractive -Command \"netsh advfirewall firewall set rule group=\"remotedesktop\" new enable=Yes\""
+        - "<%= powershell %> -NonInteractive -Command \"Set-ItemProperty -Path 'HKLM:\\System\\CurrentControlSet\\Control\\Terminal Server' -Name 'fDenyTSConnections' -Value 0\""
+        - "<%= powershell %> -NonInteractive -Command \"Set-ItemProperty -Path 'HKLM:\\System\\CurrentControlSet\\Control\\Terminal Server\\WinStations\\RDP-Tcp' -Name 'UserAuthentication' -Value 0\""
         <% end %>
         <% if host_param('ping') %>
         - "<%= powershell %> -NonInteractive -Command \"netsh advfirewall firewall add rule name=\"Enable IPv4 ICMP\" dir=in protocol=icmpv4 action=allow\""

diff --git a/...erer/snapshots/ProvisioningTemplate/finish/Windows_default_finish.windows10_dhcp.snap.txt b/...erer/snapshots/ProvisioningTemplate/finish/Windows_default_finish.windows10_dhcp.snap.txt
@@ -53,6 +53,8 @@ cmd /c winrm set winrm/config/client/auth @{Basic="true"}
 cmd /c winrm set winrm/config/service/auth @{Basic="true"}
 
 
+cmd /c "netsh advfirewall firewall set rule group=\"remote desktop\" new enable=Yes"
+cmd /c "netsh advfirewall firewall set rule group=\"remotedesktop\" new enable=Yes"
 
 echo Downloading Puppet installer
 wget "" -O C:\puppet-agent-latest.msi