How to set up Ansible to manage a domain controller?

Question

Active Directory

Please tell me how to set up Ansible on centos to manage domain computers?
What specifically needs to be registered to a configuration?

As I understand it, you need to configure the control machine connections to the DC via kerberos, then enable winRM support on all PCs of the domain on the DC through group policy, create an admin user on the DC through which ansible will act and then launch playbooks. But this is the general scheme.

Answer 1

Ansible, of course, works through winrm, but over ssh it works much better.
If you have workstations and servers running OS Windows 10 version > 1803 and Windows Server 2016+, then it is better to connect to them via ssh.
winrm without encryption is unsafe to use, and winrm with encryption is configured, IMHO, more difficult than ssh.
ssh to windows:
https://docs.microsoft.com/en-us/windows-server/ad... Ansible
has very good documentation, use it:
https://docs.ansible.com/ansible/latest/user_guide ...