def clear_policy():
# Ensure the policy is not set
test_setting = "No Auditing"
win_lgpo.set_computer_policy(name="Audit User Account Management",
setting=test_setting)
assert (win_lgpo.get_policy(policy_name="Audit User Account Management",
policy_class="machine") == test_setting)
def test_get_policy_id_full_return_full_names_hierarchical(self):
result = win_lgpo.get_policy(
policy_name="WfwPublicSettingsNotification",
policy_class="machine",
return_value_only=False,
return_full_policy_names=True,
hierarchical_return=True,
)
expected = {
"Computer Configuration": {
"Windows Settings": {
"Security Settings": {
"Windows Firewall with Advanced Security": {
"Windows Firewall with Advanced Security - Local "
"Group Policy Object": {
"Network firewall: Public: Settings: Display a "
"notification":
"Not configured"
}
}
}
}
}
}
self.assertDictEqual(result, expected)
def set_policy():
# Ensure the policy is set
test_setting = "Success"
win_lgpo_module.set_computer_policy(name="Audit account management",
setting=test_setting)
assert (win_lgpo_module.get_policy(policy_name="Audit account management",
policy_class="machine") == test_setting)
def test_get_policy_id_full_return_ids(self):
result = win_lgpo.get_policy(policy_name='AllowTelemetry',
policy_class='machine',
return_value_only=False,
return_full_policy_names=False,
hierarchical_return=False)
expected = {'AllowTelemetry': 'Not Configured'}
self.assertDictEqual(result, expected)
def test_get_policy_id_full_return_ids(self):
result = win_lgpo.get_policy(
policy_name='WfwPublicSettingsNotification',
policy_class='machine',
return_value_only=False,
return_full_policy_names=False,
hierarchical_return=False)
expected = {'WfwPublicSettingsNotification': 'Not configured'}
self.assertDictEqual(result, expected)
def test_get_policy_id(self):
result = win_lgpo.get_policy(
policy_name="WfwPublicSettingsNotification",
policy_class="machine",
return_value_only=True,
return_full_policy_names=True,
hierarchical_return=False,
)
expected = "Not configured"
self.assertEqual(result, expected)
def test_get_policy_name(self):
result = win_lgpo.get_policy(
policy_name='Network firewall: Public: Settings: Display a '
'notification',
policy_class='machine',
return_value_only=True,
return_full_policy_names=True,
hierarchical_return=False)
expected = 'Not configured'
self.assertEqual(result, expected)
def test_get_policy_id_full_return_full_names(self):
result = win_lgpo.get_policy(policy_name='AllowTelemetry',
policy_class='machine',
return_value_only=False,
return_full_policy_names=True,
hierarchical_return=False)
expected = {
'Windows Components\\Data Collection and Preview Builds\\'
'Allow Telemetry': 'Not Configured'}
self.assertDictEqual(result, expected)
def test_get_policy_id_full_return_ids(self):
result = win_lgpo.get_policy(
policy_name="AllowTelemetry",
policy_class="machine",
return_value_only=False,
return_full_policy_names=False,
hierarchical_return=False,
)
expected = {"AllowTelemetry": "Not Configured"}
self.assertDictEqual(result, expected)
def _test_auditing(setting):
"""
Helper function to set an audit setting and assert that it was successful
"""
computer_policy = {"Audit Account Management": setting}
win_lgpo_state.set_(name="junk", computer_policy=computer_policy)
# Clear the context so we're getting the actual settings from the machine
win_lgpo_module._get_secedit_data(refresh=True)
result = win_lgpo_module.get_policy(policy_name="Audit Account Management",
policy_class="machine")
assert result == setting
def _test_auditing(setting):
"""
Helper function to set an audit setting and assert that it was successful
"""
win_lgpo.set_computer_policy(name="Audit account management", setting=setting)
# Clear the context so we're getting the actual settings from the machine
win_lgpo._get_secedit_data(refresh=True)
result = win_lgpo.get_policy(
policy_name="Audit account management", policy_class="machine"
)
assert result == setting
def test_cumulative_rights_assignments(stage_single):
expected = ["BUILTIN\\Administrators", "BUILTIN\\Backup Operators"]
win_lgpo_state.set_(
name="SeTakeOwnershipPrivilege",
setting=["BUILTIN\\Backup Operators"],
policy_class="machine",
cumulative_rights_assignments=True,
)
result = win_lgpo_module.get_policy(
policy_name="SeTakeOwnershipPrivilege", policy_class="machine",
)
assert sorted(result) == sorted(expected)
def test_non_cumulative_rights_assignments_resolve_name(stage_multiple):
expected = ["BUILTIN\\Administrators"]
win_lgpo_state.set_(
name="SeTakeOwnershipPrivilege",
setting=["Administrators"],
policy_class="machine",
cumulative_rights_assignments=False,
)
result = win_lgpo_module.get_policy(
policy_name="SeTakeOwnershipPrivilege", policy_class="machine",
)
assert sorted(result) == sorted(expected)
def test_get_policy_name_return_full_names_hierarchical(self):
result = win_lgpo.get_policy(policy_name='Allow Telemetry',
policy_class='machine',
return_value_only=False,
return_full_policy_names=True,
hierarchical_return=True)
expected = {
'Computer Configuration': {
'Administrative Templates': {
'Windows Components': {
'Data Collection and Preview Builds': {
'Allow Telemetry': 'Not Configured'}}}}}
self.assertDictEqual(result, expected)
def test_get_policy_name_full_return_full_names(self):
result = win_lgpo.get_policy(
policy_name="Allow Telemetry",
policy_class="machine",
return_value_only=False,
return_full_policy_names=True,
hierarchical_return=False,
)
expected = {
"Windows Components\\Data Collection and Preview Builds\\Allow Telemetry":
("Not Configured")
}
self.assertDictEqual(result, expected)
def test_get_policy_id_full_return(self):
result = win_lgpo.get_policy(
policy_name="WfwPublicSettingsNotification",
policy_class="machine",
return_value_only=False,
return_full_policy_names=True,
hierarchical_return=False,
)
expected = {
"Network firewall: Public: Settings: Display a notification":
"Not configured"
}
self.assertDictEqual(result, expected)
def stage_multiple():
current_setting = win_lgpo_module.get_policy(
policy_name="SeTakeOwnershipPrivilege", policy_class="machine",
)
try:
win_lgpo_module.set_computer_policy(
name="SeTakeOwnershipPrivilege",
setting=["BUILTIN\\Administrators", "BUILTIN\\Backup Operators"],
cumulative_rights_assignments=False,
)
yield
finally:
win_lgpo_module.set_computer_policy(
name="SeTakeOwnershipPrivilege",
setting=current_setting,
cumulative_rights_assignments=False,
)
def test_get_policy_id_full_return_ids_hierarchical(self):
result = win_lgpo.get_policy(
policy_name='WfwPublicSettingsNotification',
policy_class='machine',
return_value_only=False,
return_full_policy_names=False,
hierarchical_return=True)
expected = {
'Computer Configuration': {
'Windows Settings': {
'Security Settings': {
'Windows Firewall with Advanced Security': {
'Windows Firewall with Advanced Security - Local '
'Group Policy Object': {
'WfwPublicSettingsNotification':
'Not configured'}}}}}}
self.assertDictEqual(result, expected)
def test_get_policy_name_return_full_names_hierarchical(self):
result = win_lgpo.get_policy(
policy_name="Allow Telemetry",
policy_class="machine",
return_value_only=False,
return_full_policy_names=True,
hierarchical_return=True,
)
expected = {
"Computer Configuration": {
"Administrative Templates": {
"Windows Components": {
"Data Collection and Preview Builds": {
"Allow Telemetry": "Not Configured"
}
}
}
}
}
self.assertDictEqual(result, expected)
