PowerShell

The PowerShell forum accepts bug reports as well as feedback and suggestions. For more information, check out the PowerShell Homepage

The following is a list of the states we use to track items.

status meaning
survey We saw this and we are considering it. Please upvote if it’s important to you.
needs more information We don’t understand the issue and need additional details.
investigating We are looking at this internally to understand things like: scenario, reproduction of issue, costing, or other technical details.
in queue The issue is understood and in our unprioritized backlog. Your votes will be used to drive prioritization of this work.

Please feel free to provide feedback or file bugs here.

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. issue with encrypted mofs on a pull server [partialconfigs]

    i have a pull server with 2 non-encrypted mofs, and 1 encrypted mof. The LCM on the lab node is configured to pull the 3 different configs as partialconfigs. When I run Start-DSCConfiguration, the encrypted mof fails with the following:

    PowerShell DSC resource MSFT_UserResource failed to execute Set-TargetResource functionality with error message: There could be a possible multiple matches exception while trying to use the System.DirectoryServices API's.Exception calling "Save" with "0" argument(s): "The
    password does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirements.
    "
    + CategoryInfo : InvalidOperation: (:) [], CimException …

    1 vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)

      We’ll send you updates on this idea

      0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
    • Automatic Conflict Resolution For Partial Configurations

      The LCM is already able to detect conflicts, with a fairly small change you could make it automatically resolve it.
      In my opinion we should be able to set a priority of each partial configuration in the meta config of the LCM.
      With a priority set and when a conflict is detected, the LCM could look at the priority and choose a winner.

      You could than create a layered approach of partial configs (by different teams) without having to be afraid of running into conflicts.

      This is something I see more people struggling with, which results in solutions like datum…

      1 vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)

        We’ll send you updates on this idea

        0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
      • Import-DSCResource for File, others fails

        When using Import-DSCResource -Name, various OOB resources do not work. Consider 'File' which is a built in resource, the following code will fail.

        Configuration Sample
        {
        Import-DSCResource -Name File

        # This will generate two .mof files, a localhost.mof, and a server02.mof
        Node @('localhost', 'server02')
        {
        File SampleFile
        {
        DestinationPath = 'C:\Temp\temp.txt'
        Contents = 'This is a simple resource to show Configuration functionality on a Node.'
        }
        }
        }

        Sample -OutputPath P:\temp\

        Start-DSCConfiguration P:\temp -computername localhost -wait -verbose

        If you change the resource to Service, it works as expected.

        I'm guessing this is because File is a binary resource under System32\Configuration,…

        1 vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)

          We’ll send you updates on this idea

          0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
        • Find-DSCResource does not find resources.

          Find-DSCResource does not find resources. The wildcarded -Name parameter does not find anything when used, the Filter parameter seems to map Module names only, and even used seems to miss resources.

          To reproduce:

          Find-DSCResource -Name *time* - finds nothing
          Find-DSCResource -Filter time - does not find newer TimeZone resource (only xTimeZone)

          Find-DSCResource -Filter *time* does not find anything.

          1 vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)

            We’ll send you updates on this idea

            0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
          • DSC File resource Encoding Property

            The file resource really needs an encoding property.

            Need to have some control over this as it makes the resource unusable in a lot of situations, which is a shame.

            3 votes
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)

              We’ll send you updates on this idea

              0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
            • Bring the Azure Automation DSC MOF encryption into the on-premises DSC pull server

              In Azure Automation DSC the whole MOF file gets encrypted without the need to manually issue certificates for every node and then to collect the public keys.

              From Azure documentation:
              "Keeping credentials secure in node configurations (MOF configuration documents) requires encrypting the credentials in the node configuration MOF file. Azure Automation takes this one step further and encrypts the entire MOF file."

              This extremely useful feature sould also be implemented in the on-premises DSC pull server. Especially because the needed functionality must alread be in the WMF 5 as nothing more than WMF 5 is needed to use the Azure…

              11 votes
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)

                We’ll send you updates on this idea

                survey  ·  0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
              • DSC: Should allow Credentials with Blank Passwords, so you can use GMSA accounts

                For some reason DSC errors out with a credential object contains a null password. Unfortunately that is the mechanism use to set group managed service accounts.
                Here is a link to a relevant bug in xWebAdministration: https://github.com/PowerShell/xWebAdministration/issues/80#issuecomment-171364644

                And here is an example of the output your recieve when you attempt to use a managed service account:

                "VERBOSE: [COMPUTERNAME]: LCM: [ End Test ] [[xWebAppPool]testpool] in 0.0070 seconds.
                The password supplied to the Desired State Configuration resource MSFT_xWebAppPool is not valid. The password cannot be null or empty.
                + CategoryInfo : InvalidResult: (:) [], CimException
                + FullyQualifiedErrorId : InvalidPassword
                + PSComputerName…

                97 votes
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)

                  We’ll send you updates on this idea

                  6 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                  survey  ·  Mark Gray responded

                  Thanks for the feedback! I have personally heard this request from a number of customers. IMHO having the ability to use GMS accounts would be a quite useful in DSC configurations. If this is an important feature for you as well, vote it up so that we can appropriately prioritize it as we move forward.

                  MarkG

                • Add maintenance window awareness to DSC / LCM

                  Votes from Connect: 17

                  Original Date Submitted: 8/13/2015 12:17:49 AM

                  Description:
                  ********Contact Information********
                  Handle: PowerShellDon
                  Site Name: PowerShell
                  Feedback ID: 1659904
                  ***************************************

                  Problem Description:
                  Suggestion one:

                  Add maintenance window awareness to the Local Configuration Manager. Edited via metaconfig, it specifies times when configuration changes are acceptable, when automated reboots are acceptable. Further automates configuration maintenance especially when you're implementing changes vs. correcting drift.

                  Suggestion two:

                  Add universal "DoNotImplementBefore" and "ImplementBy" settings to DSC resources. Just as "Present=" specifies to add/remove something, these would indicate a date/time for the setting to become valid (e.g., "we want to implement a bunch of…

                  134 votes
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)

                    We’ll send you updates on this idea

                    3 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                    investigating  ·  Mark Gray responded

                    Your votes on this and other features helps us in our feature prioritization.

                    Thank you!!

                    MarkG

                  • Change from edb file to SQL Server database for Desired State Configuration Pull services

                    Votes from Connect: 6

                    Original Date Submitted: 4/25/2015 5:54:58 AM

                    Description:
                    ********Contact Information********
                    Handle: Ihadadream
                    Site Name: PowerShell
                    Feedback ID: 1275973
                    ***************************************

                    Problem Description:
                    If Pull services databases change to SQL Server, we could have high availability and build a real pull infrastructure. It also brings possibility to have tierce applications that read datas and build reports using SSRS, etc.

                    Product Studio item created by Connect Synchronizer due to creation of feedback ID 1275973 (http://connect.microsoft.com/PowerShell/feedback/ViewFeedback.aspx?FeedbackID=1275973).

                    Repro Steps:

                    Internal BugId: 14408

                    71 votes
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)

                      We’ll send you updates on this idea

                      5 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                    • Enable service restart and similar scenarios in DSC configurations

                      Renamed from "Provide additional resource control methods in DSC" for clarity
                      Votes from Connect: 13

                      Original Date Submitted: 5/28/2015 12:15:20 AM

                      Description:
                      ********Contact Information********
                      Handle: Ben Gelens
                      Site Name: PowerShell
                      Feedback ID: 1373894
                      ***************************************

                      Problem Description:
                      Scenario:
                      A MOF file is compiled for a node serving a website. The service resource is used to declare the W3SVC service to be started and the file resource is used to copy in the web content.
                      Next an update is deployed to the website by compiling a new MOF file and for the new content to become active, the W3SVC service needs to…

                      70 votes
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)

                        We’ll send you updates on this idea

                        3 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                      • Invoke-DSCResource on WindowsFeatureSet fails

                        As subject says. Example is below

                        PS C:\Windows\system32> Invoke-DscResource -Name WindowsFeatureSet -Property @{Name = "Storage-Services"; Ensure = "Present" } -Method test -ModuleName PSDesiredStateConfiguration
                        Invoke-DscResource : Failed to serialize properties into CimInstance.
                        At line:1 char:1
                        + Invoke-DscResource -Name WindowsFeatureSet -Property @{Name = "Storag ...
                        + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                        + CategoryInfo : NotSpecified: (:) [Invoke-DscResource], SerializationException
                        + FullyQualifiedErrorId : System.Runtime.Serialization.SerializationException,Microsoft.PowerShell.DesiredStateConfiguration.C
                        ommands.InvokeDscResourceMethodCommand

                        16 votes
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)

                          We’ll send you updates on this idea

                          4 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                          survey  ·  Mark Gray responded

                          Thanks for the feedback! Based on its current ranking compared to other feedback items and product schedule, work on this item is pending (and will be driven by) further customer input. If you did not open this issue and are also impacted by it, please vote this item up.

                          MarkG

                        • [Bug] Creating Local Users Fails Test-DSCConfiguration if the Users are Disabled

                          I can successfully create a disabled local user account on a non-domain joined server which has a password policy enforced.

                          If I try to create the disabled account with out a password, or one in violation of the policy, the configuration fails. This is expected.

                          If I create a disabled local user account with a password that meets the requirements, the configuration applies. When I run Test-DSCConfiguration the test fails with:
                          PowerShell DSC resource MSFT_UserResource failed to execute Test-TargetResource functionality with error message:
                          There could be a possible connection error while trying to use the System.DirectoryServices API's.Exception calling
                          "ValidateCredentials" with…

                          2 votes
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)

                            We’ll send you updates on this idea

                            1 comment  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                            survey  ·  Mark Gray responded

                            Phil,

                            Sounds like a valid bug. Thanks for bringing it to our attention. I have opened a bug in our internal system to track this to resolution.

                            MarkG

                          • Reset LCM configuration

                            Reset LCM configuration.

                            Hi and sorry for my funny English.
                            When I configure my LCM, it's impossible to reset state.
                            If I want a default configuration, I send a new configuration this default value for all Settings (here, no value, just settings).

                            [DscLocalConfigurationManager()]
                            Configuration ResetLCM {
                            Node MyNode {
                            Settings {
                            ActionAfterReboot =
                            AllowModuleOverwrite =
                            CertificateID =
                            ConfigurationDownloadManagers =
                            ConfigurationID =
                            ConfigurationMode =
                            ConfigurationModeFrequencyMins =
                            DebugMode =
                            MaximumDownloadSizeMB =
                            RebootNodeIfNeeded =
                            RefreshFrequencyMins =
                            RefreshMode =
                            ReportManagers =
                            ResourceModuleManagers =
                            SignatureValidations =
                            StatusRetentionTimeInDays =
                            }}

                            I think it's easier to use command.

                            For example, there is a reset configuration for DSCConfigurationDocument. …

                            8 votes
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)

                              We’ll send you updates on this idea

                              0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                            • Test-DscConfiguration returns a String instead of a Boolean value

                              Test-DscConfiguration returns a String instead of a Boolean value.

                              Contrary to what is mentionned in the documentation, the function Test-DscConfiguration does not return a boolean value.

                              When you do a GetType() of the return value of Test-DscConfiguration you get a string with 'true' or 'false'.

                              It's impossible to do a simple if (Test-DscConfiguration) because the string 'false' enter inside the if, we are forced to cast the return value of this cmdlet in boolean or to do the comparison with -eq $True, which seems to cast it automatically.

                              6 votes
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)

                                We’ll send you updates on this idea

                                0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                              • Fix Add-DnsServerResourceRecord TXT Records Limit

                                When attempting to add a TXT DNS record via the "Add-DnsServerResourceRecord" command, the DescriptiveText property only accepts strings up to 254 characters but should support up to 255 characters. Ideally the command should accept an array for the DescriptiveText so that multiple lines of up to 255 characters can be passed through. Currently it requires using `r`n to insert a line break but over all must still be under 254 characters. This is an issue as we are trying to implement automation around TXT records and DKIM records tend to be well over this 254 character limit and require multiple…

                                2 votes
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)

                                  We’ll send you updates on this idea

                                  0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                                • ¿Pienso?

                                  Creo, que si los Hispano-Hablantes, pudiesen tener acceso a los comentarios e ideas que la gente detendrían mas de 1000.000.000, si en números, Por favor empecemos por respetar a todos, no solo los Anglo-Sajones, y la gente de sus colonias (coman GUEL ) lo pongo en Español, por dignidad, Creo (estoy, seguro) que pagan lo mismo.

                                  2 votes
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)

                                    We’ll send you updates on this idea

                                    1 comment  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Enable configuration version tracking for compiled DSC configurations

                                    As a part of infrastructure as code or using DSC in the deployment pipelines, it is desired that we be able to identify the version of the node configuration. With all configurations being put into a source / version control repository, it won't be difficult to promote the version number for a given configuration document. However, at this point in time, there is no way to specify the version of the configuration document itself anywhere. This makes it hard to determine or identify what version of the configuration is being used on a target node without using a 3rd party…

                                    32 votes
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)

                                      We’ll send you updates on this idea

                                      3 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                                    • At line:4 char:1 + Import-DscResource -ModuleName cNtfsAccessControl + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Could not find the

                                      Can you provide solution for this error.
                                      I am getting it even after i downloaded NTFS security files.

                                      1 vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)

                                        We’ll send you updates on this idea

                                        0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                                      • MICROSOFT RAILWAY CORPORATION

                                        Now at this time called India,Pakistan & Bangladesh whose name was India.Yow know there are a lot of spaces for travelling.Indian Microsoft will be set up, a open independent Railway corp in the Whole India.Its will be a great way for our child,brother,sister,parents & all classes people.If Microsoft will be set up that way,many peoples will be satisfied for the way.& besides the way,many grounds are so many blank to a few year.There will be growing a lots of food & this foods will suppliers the Whole World.Otherwise,there are will be planning many trouthfull industries for our peoples worktivities.Trust,that IDEA…

                                        1 vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)

                                          We’ll send you updates on this idea

                                          0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                                        • dsc Partial configuration - pull server

                                          0
                                          down vote
                                          favorite
                                          I have a big issue that I cant solve, need help!

                                          Im using partial configuration to configure 3 servers. The problem is mof file name. In Microsoft documentation (https://docs.microsoft.com/en-us/powershell/dsc/partialconfigs) says: "If you are pulling more than one partial configuration from a pull server, the configuration document can be named (...) ..mof, where ConfigurationName is the name of the partial configuration, and NodeName is the name of the target node."

                                          I'm trying ..mof and it returns the warning "WARNING: [DSC-3]: [] Executing Get-Action on partial configuration 'PreStagging' Failed. Please ensure the parital configuration and its…

                                          1 vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)

                                            We’ll send you updates on this idea

                                            0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1 3 4 5 6 7 8
                                          • Don't see your idea?

                                          Feedback and Knowledge Base