chore(e2e): Added the option to make member server kerberos only (#5997)

* chore(e2e): Added the option to make member server kerberos only

enos/modules/aws_rdp_member_server/main.tf

@@ -192,6 +192,12 @@ ${var.domain_admin_password}
                   (Get-WmiObject Win32_ComputerSystem).Domain
                   Get-Process -Name *ssh* -ErrorAction SilentlyContinue
 
+                  # Enable Kerberos only authentication if required
+                  %{if var.kerberos_only~}
+                    Set-ItemProperty  -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0"  -Name RestrictSendingNTLMTraffic -Value 2
+                    Set-ItemProperty  -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0"  -Name RestrictReceivingNTLMTraffic -Value 2
+                  %{endif~}
+
                   # Enable audio
                   Set-Service -Name "Audiosrv" -StartupType Automatic
                   Start-Service -Name "Audiosrv"

enos/modules/aws_rdp_member_server/variables.tf

@@ -71,3 +71,9 @@ variable "domain_controller_sec_group_id_list" {
   type        = list(any)
   description = "ID's of AWS Network Security Groups created during creation of the domain controller."
 }
+
+variable "kerberos_only" {
+  type        = bool
+  description = "Only allow kerberos auth"
+  default     = false
+}