Questions tagged [dsc]
Windows PowerShell Desired State Configuration is a tool akin Chef or Puppet, meant to automate keeping Windows servers in a known state.
96
questions
0
votes
1answer
17 views
Additional info request on DSC Syntax for Binary Registry Key
I have more questions about implementing the solution found in: DSC Syntax for Binary Registry Key
For the most part the solution suggested by Matthew Whetmore worked... but if the data starts with &...
0
votes
0answers
13 views
xFailOverCluster DSC push from one domain to another results in WinRM error
Our tfs/build server also acts as our DSC push server.
It is in domain "a" and is pushing onto servers in domain "b". Both on different clouds.
When running the compiled .mof it instantly fails with:
...
1
vote
0answers
117 views
Is it possible to write a PowerShell DSC configuration that waits for a manual installation?
I would like to use DSC to check and correct Service resources as State = Running. The issue is that these services don't exist until I have manually run a software installer on the target node. I am ...
1
vote
1answer
351 views
Manage Group Policy across multiple domains
I am looking for a way to manage Group Policy across a number of domains, some in the same forest and others in separate forests.
I haven't seen this done before and can't find anything around the ...
0
votes
1answer
66 views
SSL Certificate management with Windows DSC
I have a third-party issued certificate that I need to ensure is running on all targets in a given domain. Is there a way to ensure this certificate is installed by way of DSC?
0
votes
1answer
47 views
Resize-Partition errors after first execution in DSC script
I'm trying to use the following piece of code in a powershell DSC script. It runs fine on first execution but on following executions it throws an error as it's already expanded.
Here's the command:
...
0
votes
1answer
75 views
DSC SMB Pullserver - clients are unable to locate mof file
I have configured the LCM of my target node like this:
[DSCLocalConfigurationManager()]
configuration SMBPullClientConfig
{
param
(
[PARAMETER(Mandatory=$false)]
$NodeName = 'localhost',
...
0
votes
1answer
488 views
Installing Module during OSD Task Sequence from NuGet not found
I have an OSD task sequence which one of the steps runs a package containing the PowerShell DSC '.ps1' file and the '.MOF' configuration. Now during the task sequence it looks like it can't find the ...
1
vote
1answer
64 views
DSC not pulling config
my DSC node is not pulling the DSC config from my SMB DSC server. Get-DSCConfigurationStatus says the pull was successfull but Get-DSCConfiguration remains the same(old config).
Im testing it with a ...
1
vote
0answers
47 views
DSC switching back to push
Hi there i got a small problem. I have configured a node to pull the config from my HTTP DSC server. But once it pulls its config the node switched back to push.
My node config looks like this:
[...
1
vote
1answer
519 views
Powershell DSC composite resource, partial configuration, or roles. What's the best approach that's maintainable?
I'm having a little bit of a hard to trying to decipher what the best approach is when creating configurations based off Powershell DSC.
It appears that partial configurations are meant to allow ...
2
votes
1answer
300 views
DSC Resource for SSL and TLS and Ciphers
I need to ensure that servers have been properly configured to prevent the usage of SSL2/3 and TLS1.0/1.1 and ensure that only TLS1.2 is enabled.
In addition I need to ensure that certain ciphers are ...
1
vote
1answer
96 views
Only include a CertReq in a PowerShell DSC if needed
I'm currently using the CertificateDSC CertReq resource to generate a certificate request within a DSC configuration. I'm pretty new to DSC, I'm checking it out using a push approach and my workflow ...
1
vote
1answer
159 views
How to assign a static IP to linux host using Powershell DSC / Lability?
Setup: I am using Lability to deploy a hacking lab consisting of 3 virtual machines. One of the machines is Kali Linux. How could I automatically set a static IP for the Kali when it is first deployed ...
1
vote
1answer
123 views
Puppet unable to add user to AD group
I'm trying to add user to group on my DC using puppet:
dsc_xgroup {'DomainAdministrators':
dsc_ensure => 'present',
dsc_memberstoinclude => 'tfl@ad.contoso.com',...
1
vote
1answer
1k views
How to Use PowerShell DSC to Keep Services on Windows Server Running?
I've recently noticed that our Windows Server 2016 VMs on Azure sometimes fail to start some of their services after rebooting the system (for example ADFS, Remote Desktop Broker and others) even ...
0
votes
0answers
124 views
Applying PowerShell Desired State Configuration to Windows host from Linux control machine
I'm interested in using my Linux work machine to apply DSC configuration to Windows machines. I can find lots about using DSC to manage Linux, but that isn't what I'm interested in, I want to use it ...
0
votes
1answer
17 views
What Installtion is needed before desired state configuration can be used?
I want to know what is installed on a bare mental machine (real or virtual) to allow it to be further configured by DSC.
All the demos I have seen already have "something" installed on the target so ...
4
votes
1answer
2k views
Can DSC be used to configure IIS on a Windows 10 workstation
I couldn't find this on the interwebs and it seems like a obvious use case to me
Is it possible run Windows Desired State Configuration / DSC on a Windows 10 workstation?
For example, setting up IIS ...
1
vote
0answers
153 views
PowerShell JEA RoleDefinitions Trusted Domain
This one may be a bit tricky, and may not be possible. I have a PowerShell JEA endpoint configured in my DSC. It runs fine. The trouble is the users that are listed in the RoleDefinitions section of ...
1
vote
1answer
921 views
Manual PowerShell DSC module installation
I am working on servers without access to the Internet. I am uploading DSC modules to the server, E.g. AccessControlDSC.
The modules are being installed in c:\Program Files\WindowsPowerShell\Modules
...
2
votes
1answer
347 views
Is it possible to manage Server Manager Properties through PowerShell DSC?
For example:
Server Manager → Manage → Server Manager Properties "Do not Start manager automatically at logon"
Server Manager → Local Server → IE Enhanced Security Configuration → Off
3
votes
1answer
1k views
Is it possible to download a file using a Powershell DSC resource from Azure File storage account?
I have a file in an Azure File storage. I would like to download it using a DSC resource (xRemoteFile, for example).
The Azure File storage gives me an HTTPS url to that file, but it is not directly ...
0
votes
1answer
282 views
Is it possible to ensure a certain schedule for the windows updates on a Windows Server 2016 using Powershell DSC?
Part of configuration is to run all the Windows Updates. I am trying to figure out how to express it with Powershell DSC. Seems like the best is to ensure that the windows updates are scheduled ...
0
votes
1answer
135 views
Is Azure Automation DSC at all suitable for configuring client machines (not servers)?
I am trying to create a DSC configuration for a developer workstation and facing difficulties.
A developer machine has a well defined owner - the developer who is going to get it. Some ...
0
votes
1answer
504 views
How to install SSMS on a client workstation using Azure Automation DSC?
I found the following post - https://blogs.msdn.microsoft.com/troy_aults_blog/2017/01/13/automating-installation-of-ssms-with-dsc/
Great, all I need to know now is the Product Id of SSMS-Setup-ENU....
1
vote
1answer
3k views
How to use DSC to install .NET windows feature on a non server machine?
Observe the following DSC configuration:
Configuration Example
{
Import-DscResource –ModuleName PSDesiredStateConfiguration
node localhost
{
WindowsFeature 'NetFramework45'
...
2
votes
1answer
88 views
When using Azure Automation DSC is it possible to install a product on a non SSD drive if the latter exists?
Suppose I have a product which I want to install on a non SSD drive, if exists. Otherwise, I want it to go on the drive C.
For example, the following configuration is supposed to install the Sql ...
1
vote
1answer
100 views
How to automatically deploy a new resource from Azure Automation to DSC nodes?
Scenario:
I have a Windows 10 workstation on-boarded to Azure Automation (AA). It is configured to pull configuration from AA correctly - checked.
I wish to install Sql Server 2016 Developer edition ...
0
votes
1answer
87 views
Is it possible to keep all the DSC configurations in Version Control and make Azure Automation fetch it from there automatically?
The Azure Automation DSC seems to know to integrate with GitHub, but it seems to expect only runbooks there. At least, this is what I understand from the following UI screen:
I have just started to ...
0
votes
1answer
283 views
Passing arguments to Set-AzureRmVmDscExtension
I'm trying to pick up a passed-in argument to a PowerShell DSC configuration fired by Set-AzureRmVMDscExtension and not having much luck. The idea is to have a xRemoteFile section download a file at a ...
1
vote
0answers
661 views
Configuring NICs on Windows safely in DSC or Puppet
We've been using DSC basically since its day 1 release, but one thing we've never been able to do successfully (either by direct plain DSC or via invoking DSC via puppet) is configure Windows ...
1
vote
1answer
431 views
How do ARM projects in Visual Studio upload their DSC (and other) assets?
I've worked with ARM templates a bit but building ARM projects in Visual Studio is new. When you create VM resources and then subsequently create a script or DSC extension, in addition to the new JSON,...
4
votes
2answers
1k views
Failure joining on-prem to Azure DSC Automation (Response code: Unauthorized)
I'm having difficulties joining a Windows machine to Azure DSC automation. I'm getting the following error:
Registration of the Dsc Agent with the server https://azureserver/accounts/...
0
votes
1answer
69 views
Desired State for MsSQL and IIS (puppet or chef)
In our infrastructure, some developers/consultants change some mssql or iis configurations without any notification which cause us problems.
For example, if somebody change mssql recovery simple to ...
4
votes
1answer
947 views
Why can't I use a DSC resource in push mode from a module that is installed in my user's module path?
I have a Powershell DSC custom resource, embedded in a module. The full code is available here if you want to see it, but that may not be necessary; my problem isn't (I think) in the code I wrote, but ...
0
votes
1answer
79 views
Server configuration management [closed]
We have windows servers hosting our software. There is a third party company doing something like penetration testing and provides us with reports and recommendations about the servers' setup/...
2
votes
1answer
2k views
DSC Syntax for Binary Registry Key
What should be a simple registry DSC configuration has turned into a somewhat frustrating piece of guesswork. I'm trying to setting a binary registry key. I am finding it impossible to find the right ...
1
vote
1answer
163 views
Azure DSC validation error on portal
Any ideas on the cause value for the template parameter 'modulesUrl' at line '11' and column '20' is not provided returned when validating a new VM in the Azure Portal with the DSC extension. It's no ...
3
votes
1answer
118 views
DSC pull schedule randomly stops working
I am using DSC to configure 30 servers.
They are configured to pull with ApplyAndAutoCorrect.
This generally works great, but randomly, servers will stop all DSC activity. The servers never ...
0
votes
1answer
293 views
Desired State Configuration HTTPS Pull Site Doesn't Work
I've created a domain certificate for my DSC web pull server (issued by my internal CA) and retrieved the thumbprint.
I exported the certificate from inetmgr and installed it on the pull server (both ...
3
votes
2answers
1k views
Investigating Sysvol replication issues when promoting domain controllers with DSC in Azure
We're using PowerShell DSC to automate the deployment of a number of small self contained environments, in these environments we are deploying 2 domain controllers and use DSC to setup the domain etc. ...
4
votes
1answer
509 views
DSC Environment Resource no longer working after WMF5.1 - not detecting PATH values?
I have a number of Partial DSC scripts that use the Environment Resource to set a Path value. I have two scripts that does this and after upgrading from WMF5.0 to WMF5.1, I am getting the following ...
3
votes
1answer
3k views
Enable-PSRemoting or Set-WSManQuickConfig?
I'm getting pumped up for DSC and I want to cover my bases. I see that Enable-PSRemoting actually runs Set-WSManQuickConfig according to help documentation, I guess my main question is, what is the ...
1
vote
0answers
393 views
DSC Environment resource failing to see environment variable it has set
I'm using DSC to provision virtual machines. The VMs are setup to pull a DSC configuration from a pull server. All is well with this. However, I noticed that I am frequently seeing:
Job {8B376B76-...
0
votes
1answer
305 views
Get-DscResource not returning full list when run from Jenkins on Windows
I have a Windows Server 2016 Jenkins build box. I want to run some powershell in a Jenkins job.
As a test I have set the job to do this in a Execute Windows batch command build step:
powershell -...
2
votes
1answer
1k views
How to create a Hyper-V VM with Powershell DSC and module xHyper-V?
I've been trying to create a VM on my Hyper-V 2016 host from my Windows 10 workstation using module xHyper-V with not a lot of joy.
My Hyper-V host is called Lithium and my DSC Script is below.
...
0
votes
1answer
1k views
Azure Automation DSC: how to unregister old/misconfigured DSC Nodes from the pull server?
Every now and then I am facing a situation where some old DSC Node remains on the registration list in the Azure Automation DSC pull server.
The nodes appear for a brief moment (1-2 seconds) after ...
2
votes
1answer
157 views
How to install DSC on Azure Windows 2016 Nano Server deployed from Microsoft's image?
All information I could find regarding DSC on Nano Server suggest the DSC should be added to the server image upon creation, e.g. Using DSC on Nano Server:
DSC on Nano Server is an optional package ...
0
votes
1answer
1k views
How can I copy a custom package from Azure Storage to install on a machine with DSC?
I'm currently using Azure Resource Manager to create virtual machines with DSC to configure basic state and install IIS. I already have a build environment that dumps websites as .zip files to Azure ...
