1. 在windows开启winrm

    winrm service 默认都是未启用的状态，先查看状态；如无返回信息，则是没有启动；

    winrm enumerate winrm/config/listener

    针对winrm service 进行基础配置：

    winrm quickconfig

    查看winrm service listener:

    winrm e winrm/config/listener

    为winrm service 配置auth:

    winrm set winrm/config/service/auth @{Basic="true"}

    为winrm service 配置加密方式为允许非加密：

    winrm set winrm/config/service @{AllowUnencrypted="true"}

2. Ansible 官方提供初始化脚本

https://github.com/ansible/ansible/blob/devel/examples/scripts/ConfigureRemotingForAnsible.ps1

    安装winrm(ansible主机)

    pip install "pywinrm>=0.1.1"

    编译安装方式:https://pypi.org/project/pywinrm/#files

    在windows主机powershell执行:.\Desktop\ConfigureRemotingForAnsible.ps1(上图)
　　 wget http://download.baiyongjie.com/python/pip/pip-8.1.0.tar.gz
　　 wget http://download.baiyongjie.com/python/pip/setuptools-33.1.1.zip
　　 tar xzf pip-8.1.0.tar.gz && unzip setuptools-33.1.1.zip
　　 yum install -y epel-release yum install -y python36
　　 cd setuptools-33.1.1 && python3 setup.py install
    cd pip-8.1.0 && python3 setup.py instll
    pip3 install --upgrade pip 
    pip3.6 install  pywinrm 或者pip安装ansible:pip install ansible或者pip3 install ansible

3. 将windows信息写入变量文件

    cat group_vars/windows.yml

    ansible_user: Administrator

    ansible_ssh_pass: Mlxg2234

    ansible_ssh_port: 5986

    ansible_connection: winrm

    ansible_winrm_server_cert_validation: ignore

    加密文件:ansible-vault encrypt group_vars/windows.yml

    解密文件:ansible-vault decrypt group_vars/windows.yml

    关闭windows server防火墙或者开放5986端口

4. 将windows主机写入hosts文件

    [windows]

    192.168.20.35 #ansible_ssh_user="Administrator"     ---不写变量写入host也行

    ansible_ssh_pass="Mlxg2234" ansible_ssh_port=5986

    ansible_connection="winrm" ansible_winrm_server_cert_validation=ignore ansible_winrm_transport=ntlm

5. 执行命令测试

    ansible -i hosts windows -m win_ping --ask-vault-pass（输入windows文件密码）

6. 测试文件

    ansible -i hosts windows -m win_file -a 'dest=c:\ConfigureRemotingForAnsible.ps1 state=directory' --ask-vault-pass

    ansible -i hosts windows -m win_copy -a 'src=/etc/hosts dest=c:\config_dir\hosts.txt' --ask-vault-pass

7. 删除文件/目录

    ansible -i hosts windows -m win_file -a 'dest=c:\config_dir\hosts.txt state=absent' --ask-vault-pass

    ansible -i hosts windows -m win_file -a 'dest=c:\config state=absent' --ask-vault-pass

8. 测试远程执行cmd命令

    ansible -i hosts windows  -m win_shell -a 'ipconfig' --ask-vault-pass

9.  远程重启windows服务器

    ansible -i hosts windows -m win_reboot --ask-vault-pass --ask-vault-pass

    ansible -i hosts windows -m win_shell -a 'shutdown -r -t 0' --ask-vault-pass

10. 测试创建用户(远程在windows客户端上创建用户)

    ansible -i hosts windows -m win_user -a "name=test1 passwd=Mlxg2234" --ask-vault-pass

11. 安装iis服务

    ansible -i hosts windows -m win_feature -a "name=Web-Server" --ask-vault-pass

    ansible -i hosts windows -m win_feature -a "name=Web-Server,Web-Common-Http" --ask-vault-pass

12. 获取iis站点信息

    ansible -i hosts -m win_iis_website -a "name='Default Web Site'" windows --ask-vault-pass

13. 停止启动IIS站点(started', 'restarted', 'stopped' or 'absent)

    ansible -i hosts windows -m win_iis_website -a "name='Default Web Site' state=stopped" --ask-vault-pass

    ansible -i hosts windows -m win_iis_website -a "name='Default Web Site' state=started" --ask-vault-pass

14. 添加站点

    ansible -i hosts windows -m win_iis_website -a "name=acme physical_path=c:\site_test" --ask-vault-pass

15. 从网站下下载文件

    ansible -i hosts -c winrm -m win_get_url -a "url=文件url dest='C:\site_test'"  windows --ask-vault-pass

    playbook下载

- hosts: windows

  gather_facts: false

  tasks:

  - name: Download png

    win_get_url:

        url: 'url下载链接'

        dest: 'C:\site_test'

        force: no     ---playbook方式发生变化时才下载

16. 管理Windows服务

    - hosts: windows

      gather_facts: false

      tasks:

      - name: DNS Client(Dnscache)

        win_service:

               name: Dnscache

               start_mode: auto    ----开机自启动

               state: started