From 93bfa4b07ad30cce58a30ffda5db866895aad075 Mon Sep 17 00:00:00 2001
From: Jordan Borean <jborean93@gmail.com>
Date: Fri, 10 Jan 2020 06:33:00 +1000
Subject: [PATCH] win_user_right - docs to show how to remove all (#66315)

---
 lib/ansible/modules/windows/win_user_right.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/lib/ansible/modules/windows/win_user_right.py b/lib/ansible/modules/windows/win_user_right.py
index 90d8bd3276e..5588208333c 100644
--- a/lib/ansible/modules/windows/win_user_right.py
+++ b/lib/ansible/modules/windows/win_user_right.py
@@ -35,6 +35,8 @@ options:
     - For local users/groups it can be in the form user-group, .\user-group,
       SERVERNAME\user-group where SERVERNAME is the name of the remote server.
     - You can also add special local accounts like SYSTEM and others.
+    - Can be set to an empty list with I(action=set) to remove all accounts
+      from the right.
     type: list
     required: yes
   action:
@@ -83,6 +85,11 @@ EXAMPLES = r'''
     - DOMAIN\User
     - group@DOMAIN.COM
     action: remove
+
+- name: Remove all accounts who cannot log on remote interactively
+  win_user_right:
+    name: SeDenyRemoteInteractiveLogonRight
+    users: []
 '''
 
 RETURN = r'''