What is the correct placement and permissions of .ssh and authorized_key for Ansible's use on a Windows target?

another reason this could be failing, it did for me anyway, was that I had another language install ( German ) of windows and the openssh group match line matches administrators using the text string administrators. BUT in German MS use administratoren instead. ;-(

English: ( current shipping default )

Match Group administratoren
  AuthorizedKeysFile __PROGRAMDATA__/ssh/administrators_authorized_keys

German:

Match Group administratoren
  AuthorizedKeysFile __PROGRAMDATA__/ssh/administrators_authorized_keys

Instead of this insanity. Please change the current Match rule to something like this:

Match Group *S-1-5-32-544
  AuthorizedKeysFile __PROGRAMDATA__/ssh/administrators_authorized_keys

They really should allow use of SIDs for this and also even more importantly for the DenyGroups matching.

If they only use text string matching there too, then this is a security hole as using a different language windows install will circumvent the intended 'deny'.