Preliminary config for win servers

Set-Preliminaries.ps1

# AnisbleMe.ps1
# Preliminary conifguration for a windows host

# Make sure Network profile is Private
$InterfaceId = (Get-NetConnectionProfile | Select-Object -ExpandProperty InterfaceIndex)
Set-NetConnectionProfile -InterfaceIndex $InterfacId -NetworkCategory Private
Write-Output "Interface Id $InterfaceId Network Profile set to Private"

# Enable Remote Desktop
Get-NetFirewallRule -DisplayGroup "Remote Desktop" | Set-NetFirewallRule -Enabled true -Profile Private, Domain
Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\' -Name 'fDenyTSConnections' -Value 0
Write-Output "RDP enabled"

# Download and run prereq for Ansible remoting
$AnsibleYes= Read-Host -Prompt "Configure Ansible remoting? (y/n)"
If ($AnsibleYes -eq 'y') {
    Invoke-WebRequest -Uri https://raw.githubusercontent.com/ansible/ansible/devel/examples/scripts/ConfigureRemotingForAnsible.ps1 -OutFile ConfigureRemotingForAnsible.ps1
    .\ConfigureRemotingForAnsible.ps1 -Verbose
}

# Rename and set password for local admin, if not changed already
If (Get-LocalUser -Name Administrator -ErrorAction SilentlyContinue) {
    $RenameAdmin = Read-Host -Prompt "Enter new Local Admin username"
    Rename-LocalUser -Name "Administrator" -NewName $RenameAdmin
    $Password = Read-Host -AsSecureString -Prompt "Enter new Local Admin pw"
    Set-LocalUser -Name $RenameAdmin -Password $Password -PasswordNeverExpires $true
    Write-Output "Admin credentials updated"
}
Else {
    Write-Output "Admin account already renamed"
}