PowerShell

The PowerShell forum accepts bug reports as well as feedback and suggestions. For more information, check out the PowerShell Homepage

The following is a list of the states we use to track items.

status meaning
survey We saw this and we are considering it. Please upvote if it’s important to you.
needs more information We don’t understand the issue and need additional details.
investigating We are looking at this internally to understand things like: scenario, reproduction of issue, costing, or other technical details.
in queue The issue is understood and in our unprioritized backlog. Your votes will be used to drive prioritization of this work.
  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Control in Composite Resources

    Add option to use DependsOn inside a Composite Resource, between the inner members of the resource. Like in ServiceSet, running it with multiple services i cant use the DependsOn commands. Would be nice if i could do this:

    ServiceSet ServiceSetComposite{
    Name='audiosrv','winmgmt'
    Ensure='Present'
    Order = 'winmgmt',*
    }
    As in the order i want the services to be done is winmgmt first, then what ever comes after and then * to symbol the rest of the services

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  2. Enable PowerShell module auto-discovery in DSC

    I recently discovered that in my DSC resource I can't call a powershell cmdlet that internally calls into another powershell cmdlet - that fails because DSC doesn’t explicitly import the full powershell module, but only imports specific .psm1 files.

    Note, same (cmdlet calling another cmdlet) works perfectly fine when executed from Powershell cmd prompt. Let's fix it for DSC.

    12 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
    investigating  ·  Mark Gray responded

    Thank you for your feedback!

    Based on its current ranking compared to other feedback items and product schedule, work on this item is pending (and will be driven by) further customer input. If you did not open this issue and are also impacted by it, please vote this item up.

    MarkG

  3. BUG: Using ConfigurationNames generates a weak certificate

    If a Node is configured using a RegistrationKey so that ConfigurationNames can be used, then the CertificateID attribute is ignored under the ConfigurationRepositoryWeb block, and instead a self-signed certificate is generated called "DSC-OaaS".

    This certificate is used for both client authentication to the pull server as well as encrypting configuration Mofs at rest on the server host.

    The problem is two fold:


    1. Becuase the CertificateID gets ignored when using CONfigurationNames, admins cannot control the key length or encryption of the files.


    2. The certificate generated is a SHA-1 1024bit length. This is completely unacceptable as 1024 went out of use years…

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    planned  ·  3 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  4. Get-DSCResource -Syntax for WindowsFeatureSet incorrect

    Get-DscResource for WindowsFeatureSet showing "ensure" parameter as being optional, while it's actually required

    <PRE>

    PS C:\windows\system32> get-dscresource windowsfeatureset -Syntax
    WindowsFeatureSet [String] #ResourceName
    {

    [DependsOn = [String[]]]
    
    Name = [String[]]
    [Ensure = [String]]
    [Source = [String]]
    [IncludeAllSubFeature = [Boolean]]
    [Credential = [PSCredential]]
    [LogPath = [String]]

    }
    </PRE>

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
    survey  ·  Mark Gray responded

    Thanks for the feedback, Gregory! This certainly is a bug albeit a little different that what you have described. The Ensure property should be optional but it should default to ‘Present’ if it is not provided just like the underlying resource does. I have opened a bug for this.

    MarkG

  5. Having ";" in PSModulePath breaks Get-DSCResource cmdlet

    If your PSModulePath ends with ";" then Get-DSCResource fails on line 3810 which is using Test-path to check empty path with no -ErrorActionVariable set will always fail

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  6. ValidatePattern doesn't work as expected in class based DSC resources

    When using ValidatePattern in a class based resource, this should be evaluated once the configuration is generated. However, it's only evaluated the moment the LCM tries to apply the configuration, which then throws a not very helpful 'Failed to create an object of PowerShell class InsertNameOfClassHere' if the ValidatePattern check returns false.

    Demo code:
    [DscResource()]
    Class MyClass {

    [DscProperty(Key)]
    
    [ValidatePattern(&#39;Client|Server&#39;)]
    [string]$Input

    [myclass] Get () {
    $Class = $This.Input
    return [myclass]$Class
    }

    [Bool] Test () {
    return $false
    }

    Set () {
    $Class = $This.Input
    Write-Verbose $Class
    }

    }

    Configuration:
    configuration SetMyClass
    {

    Import-DscResource -ModuleName dscClass -Name MyClass -ModuleVersion 1.0.0.0
    
    

    MyClass…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  7. Officially release more DSC Resources

    We only have around 12 officially released DSC resources. I had expected PowerShell V5 would include more officially supported resources, but it was not to be. Please releae them, preferably via Windows Update.

    5 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    6 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →

    What would you describe as “official”? We are moving forward with some of the x-named DSC resources in the Gallery, with the intent of removing the x and fully supporting them once they hit a certain level of quality. Is that sufficient?

  8. why can't I use a http-based "Path" in the Archive Resource ?

    When I use the Archive Resource it appeares to be restricted to SMB or UNC Path's.

    I would like to configure a http based sourcepath.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    survey  ·  0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  9. Allow use "*" as PartialConfiguration property value in LCM

    Currently if we want to add another partial configuration, we have to reconfigure LCM on local machine to target new config.

    If LCM could use "*" (asterisk) as PartialConfiguration property value, then LCM reconfuguration wouldn't be necessary every time when new config was added.

    How it could work from my perspective:

    When LCM was reconfigured to pull every configuration (via asterisk as value) then it connect to PullSrv and pull every mof configuration with his own GUID like *.guid.mof.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    survey  ·  0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  10. KB3000850

    KB3000850 is not part of the Azure SQL 2014 image, and takes over an hour to install (often timing out) before DSC Extension can run. When update fails to install, causes DSC to fail as well. Easy to reproduce - configure VM image based on SQL 2014 and install DSC using templates.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  11. Multiple ConfigurationNames Results In Failure During Pull

    When multiple configurations names are specified in LCM configuration the pull fails get obtain any configuration.

    LCM Config Example

        ConfigurationRepositoryWeb HillIntl-Pull
    
    {
    ServerURL = &quot;<a rel="nofollow noreferrer" href="http://server1:8080/PSDSCPullServer.svc&quot;">http://server1:8080/PSDSCPullServer.svc&quot;</a>;
    AllowUnsecureConnection = $true;
    RegistrationKey = &quot;aaaa333-6c83-4636-a0cb-39b88a968849&quot;;
    ConfigurationNames = @(&#39;BaseConfig&#39;,&#39;WebServer&#39;);
    }

    Resulting errors

    Job {C7312E94-D405-11E5-80B5-00155D086627} :
    Message UpdateMetaConfig is not a valid value for GetActionResponse.
    HResult -2146233087
    StackTrack at System.Management.Automation.Internal.PipelineProcessor.SynchronousExecuteEnumerate(Object input, Hashtable errorResults, Boolean enumerate)
    at System.Management.Automation.Runspaces.LocalPipeline.InvokeHelper()
    at System.Management.Automation.Runspaces.LocalPipeline.InvokeThreadProc()

    Job {C7312E94-D405-11E5-80B5-00155D086627} :
    This event indicates that failure happens when LCM is trying to get the configuration from pull server using download manager NULL. ErrorId is 0x1. ErrorDetail is A generic exception occurred during…

    6 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    7 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
    investigating  ·  Mark Gray responded

    Thanks for the feedback Daniel. We are looking into the issue and will either get back to you with any follow-up questions or create a bug and fix the issue.

    Thanks for helping make DSC better!!
    MarkG

  12. Change the way ConfigurationNames works to accomodate easy management and software provisioning

    TL&DR - Make ConfigurationNames accept multiple values and Accept changes to the values of ConfigurationNames in a Live manner and not just for the initital regisration of the node.

    Today ConfiguratioNames is used on the initial regsitration of the node. Althugh it can accept an array, it wont work with more then one value and issue errors. That value is basically the name of the mof file on the pull server. This allows for friendly names of mof files while still maintaining uniqness of the nodes for reporting purposes that wasnt available in ps v4 using the same GUID.

    Everytime…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    survey  ·  0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  13. (WMF 4) Get-DscConfiguration fails to decrypt more than one credential

    Assume you have a DSC configuration which uses two or more resources, each of them having a PSCredential property. The credentials are encrypted using a certificate. The configuration is applied successfully to the target node. However, Get-DscConfiguration fails with the following error message:

    Get-DscConfiguration : Decryption failed.
    At line:1 char:1
    + Get-DscConfiguration
    + ~~~~~~~~~~~~~~~~~~~~

    + CategoryInfo          : NotSpecified: (MSFT_DSCLocalConfigurationManager:root/Microsoft/...gurationManager) [Get-DscConfiguration], CimException
    
    + FullyQualifiedErrorId : Windows System Error -2146893819,Get-DscConfiguration

    Analyzing the problem using a trivial resource which only writes diagnostic messages, it seems the credentials are correctly decrypted for the first resource, but the LCM fails to decrypt them for the…

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  14. Allow WildCard in PartialConfig name

    When a DSC Client Node gets his config from the DSC Pull Server, allow him to filter the config name with WildCards.

    For exemple the DSC Client named 'Target01' should be able to pull DSC configs named Target01.* (Target01.Apps , Target01.OS,...). So we could publish new DSC Configs without the need of re-configuring the target LCM.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
    survey  ·  Mark Gray responded

    I agree that this experience is not the most streamlined. I would really like to understand how you and other customers are using partial configs when in pull mode. For example why do you use partial configurations instead of composite configurations? Are you using WMF 5.0 RTM Pull functionality or WMF 4.0?

  15. Absent Or Stopped for Service DSC Resource

    I am in an environment where sometimes things might get pushed on some machines from other sources. I would like to have a base composite resource that ensures a Service is not running on a machine whether the service is present or not. The service is either Absent or if it is Present it is stopped. Currently, if I just configure "State = 'Stopped'" and do not specify Ensure, then Ensure defaults to present and the configuration fails on machines where the service is absent. In this case, I do not want ensure that it is present or absent just…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    survey  ·  0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  16. Add tar.gz support to Package DSC resource

    It would nice to be able to expand tar.gz packages using DSC

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    survey  ·  1 comment  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  17. Bug: WMF5 PullServer Configuration still accepts "IsComplianceServer" attribute

    When provisioning a new PullServer using WMF5, the "IsComplianceServer = $true" can still be specified a a valid attribute in the configuration despite the service being replaced by the reporting server role.

    It seems benign, however if this is done the resulting Pull Server will no longer work with ConfigurationNames and only work with ConfigurationID configured nodes. The process generates no errors, nodes will even state that registration of AgentID was successful, but clients will silently receive no files when they query for the appropriate <configurationname>.mof.

    This makes for a very difficult bug to track down if someone were to…

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
    survey  ·  Mark Gray responded

    Justin,

    Thank you for your feedback! We recognize that this adds confusion to the deployment of the WMF 5.0 pull server and are looking into a solution.

    MarkG

  18. Set ConfigurationMode per PartialConfiguration

    I would be nice to be able to set the ConfigurationMode on a PartialConfiguration. For example I want that my SQL config automatically remediated is, however the Windows OS config just alerts to changes. Similar to a Syntax like below

    [DSCLocalConfigurationManager()]
    configuration MyConfig
    {
    Node localhost
    {

      Settings
    
    {
    RefreshMode = &quot;Pull&quot;
    ConfigurationID = &#39;a5f86baf-f17f-4778-8944-9cc99ec9f992&#39;
    RebootNodeIfNeeded = $true
    }

    ConfigurationRepositoryWeb PullSvc1
    {
    URL = &#39;<a rel="nofollow noreferrer" href="http://pullserver1:8080/OSConfig/PSDSCPullServer.svc&#39">http://pullserver1:8080/OSConfig/PSDSCPullServer.svc&#39</a>;
    AllowUnSecureConnection = $true
    }

    ConfigurationRepositoryWeb PullSvc2
    {
    URL = &#39;<a rel="nofollow noreferrer" href="http://pullserver2:8080/SQLConfig/PSDSCPullServer.svc&#39">http://pullserver2:8080/SQLConfig/PSDSCPullServer.svc&#39</a>;
    AllowUnsecureConnection = $true
    }

    PartialConfiguration OSConfig
    {
    Description = &#39;Configuration for the Base OS&#39;
    ConfigurationSource = &#39;[ConfigurationRepositoryWeb]PullSvc1&#39;
    ConfigurationMode =…

    8 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    survey  ·  1 comment  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  19. If module version is not specified, composite configurations fail to load

    BUG
    Version occurs in: WMF5 Production Preview
    Previous versions? No.

    In a composite configuration scenario, if one of the composite resources contains an import-dscresource statement, and multiple versions of the module are available, the resource fails to load unless a moduleversion is specified.

    The resource works fine if there is only one version available on the machine in question, or a minimum version is specified.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
    investigating  ·  Mark Gray responded

    Justin,

    This behavior is common to all DSC resources, if I understand your issue correctly. If there are multiple versions of a module installed on your authoring system, you must specify the version that you intend to use in your configuration.

    What behavior are you expecting?

    MarkG

  20. Bug: Trouble Setting LCM for Partial Configurations

    I've been unable to set partial configurations with WMF 5 PP, so I waited to RTM to see if it was resolved. It's not. I originally posted on powershell.org but without success. Here's the original post and link:

    I'm using WMF 5 Production Preview on Server 2012 R2, trying to set a node to use Partial Configurations. I've tried with a remote node and localhost, but all give an error. Sample config (I've tried a few variations, with more or less partial configs):

    [DSCLocalConfigurationManager()]
    configuration foo
    {

    Node localhost
    {

    PartialConfiguration SomeConfig
    {
    RefreshMode = 'Push'
    }
    }
    }

    foo…

    12 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base