Setting registry ACLs using win_acl is broken by ALL APPLICATION PACKAGES

[Novex]

ISSUE TYPE

• Bug Report

COMPONENT NAME

win_acl

ANSIBLE VERSION

ansible 2.4.0
  config file =
  configured module search path = Default w/o overrides
  python version = 2.7.5 (default, Nov  6 2016, 00:28:07) [GCC 4.8.5 20150623 (R
ed Hat 4.8.5-11)]

CONFIGURATION

n/a

OS / ENVIRONMENT

CentOS 7 Docker Image as controller configuring a Windows Server 2016 host

SUMMARY

The ability to set ACLs in the Windows Registry (introduced in #19443) doesn't appear to work on Windows Server 2016 (and I assume Server 2012 too).

The underlying issue is the same as the filesystem problem in #20553. This was fixed by #20555 but unfortunately the code to fix it was not applies to the path which deals with setting registry ACLs

STEPS TO REPRODUCE

After configuring a valid connection to a windows server under the group windows, run the following command:

# ansible windows -m win_acl -a 'path="HKLM:\SOFTWARE" user="Administrator" type="allow" rights="ReadKey"'

EXPECTED RESULTS

An entry on the HKEY_LOCAL_MACHINE\SOFTWARE ACL assigning the Read permission to Administrator

ACTUAL RESULTS

[root@70daada2e2f6 /]# ansible windows -m win_acl -a 'path="HKLM:\SOFTWARE" user="Administrator" type="allow" rights="ReadKey"' -vvvv
No config file found; using defaults
Loading callback plugin minimal of type stdout, v2.0 from /opt/ansible/lib/ansible/plugins/callback/__init__.pyc
META: ran handlers
Using module file /opt/ansible/lib/ansible/modules/windows/win_acl.ps1
<iis-services> ESTABLISH WINRM CONNECTION FOR USER: Administrator on PORT 5986 TO iis-services
/usr/lib/python2.7/site-packages/urllib3/connectionpool.py:769: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html
  InsecureRequestWarning)
EXEC (via pipeline wrapper)
iis-services | FAILED! => {
    "changed": false,
    "failed": true,
    "msg": "an error occurred when attempting to present ReadKey permission(s) on HKLM:\\SOFTWARE for Administrator - Exception calling \"Translate\" with \"1\" argument(s): \"Some or all identity references could not be translated.\""

[ansibot]

cc @schwartzmx @trondhindenes
click here for bot help