PowerShell

The PowerShell forum accepts bug reports as well as feedback and suggestions. For more information, check out the PowerShell Homepage

The following is a list of the states we use to track items.

status meaning
survey We saw this and we are considering it. Please upvote if it’s important to you.
needs more information We don’t understand the issue and need additional details.
investigating We are looking at this internally to understand things like: scenario, reproduction of issue, costing, or other technical details.
in queue The issue is understood and in our unprioritized backlog. Your votes will be used to drive prioritization of this work.

Please feel free to provide feedback or file bugs here.

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Enable configuration version tracking for compiled DSC configurations

    As a part of infrastructure as code or using DSC in the deployment pipelines, it is desired that we be able to identify the version of the node configuration. With all configurations being put into a source / version control repository, it won't be difficult to promote the version number for a given configuration document. However, at this point in time, there is no way to specify the version of the configuration document itself anywhere. This makes it hard to determine or identify what version of the configuration is being used on a target node without using a 3rd party…

    34 votes
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)

      We’ll send you updates on this idea

      3 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
    • issue with encrypted mofs on a pull server [partialconfigs]

      i have a pull server with 2 non-encrypted mofs, and 1 encrypted mof. The LCM on the lab node is configured to pull the 3 different configs as partialconfigs. When I run Start-DSCConfiguration, the encrypted mof fails with the following:

      PowerShell DSC resource MSFT_UserResource failed to execute Set-TargetResource functionality with error message: There could be a possible multiple matches exception while trying to use the System.DirectoryServices API's.Exception calling "Save" with "0" argument(s): "The
      password does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirements.
      "
      + CategoryInfo : InvalidOperation: (:) [], CimException …

      1 vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)

        We’ll send you updates on this idea

        0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
      • Automatic Conflict Resolution For Partial Configurations

        The LCM is already able to detect conflicts, with a fairly small change you could make it automatically resolve it.
        In my opinion we should be able to set a priority of each partial configuration in the meta config of the LCM.
        With a priority set and when a conflict is detected, the LCM could look at the priority and choose a winner.

        You could than create a layered approach of partial configs (by different teams) without having to be afraid of running into conflicts.

        This is something I see more people struggling with, which results in solutions like datum…

        1 vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)

          We’ll send you updates on this idea

          0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
        • Import-DSCResource for File, others fails

          When using Import-DSCResource -Name, various OOB resources do not work. Consider 'File' which is a built in resource, the following code will fail.

          Configuration Sample
          {
          Import-DSCResource -Name File

          # This will generate two .mof files, a localhost.mof, and a server02.mof
          Node @('localhost', 'server02')
          {
          File SampleFile
          {
          DestinationPath = 'C:\Temp\temp.txt'
          Contents = 'This is a simple resource to show Configuration functionality on a Node.'
          }
          }
          }

          Sample -OutputPath P:\temp\

          Start-DSCConfiguration P:\temp -computername localhost -wait -verbose

          If you change the resource to Service, it works as expected.

          I'm guessing this is because File is a binary resource under System32\Configuration,…

          1 vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)

            We’ll send you updates on this idea

            0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
          • Find-DSCResource does not find resources.

            Find-DSCResource does not find resources. The wildcarded -Name parameter does not find anything when used, the Filter parameter seems to map Module names only, and even used seems to miss resources.

            To reproduce:

            Find-DSCResource -Name *time* - finds nothing
            Find-DSCResource -Filter time - does not find newer TimeZone resource (only xTimeZone)

            Find-DSCResource -Filter *time* does not find anything.

            1 vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)

              We’ll send you updates on this idea

              0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
            • DSC File resource Encoding Property

              The file resource really needs an encoding property.

              Need to have some control over this as it makes the resource unusable in a lot of situations, which is a shame.

              3 votes
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)

                We’ll send you updates on this idea

                0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
              • Bring the Azure Automation DSC MOF encryption into the on-premises DSC pull server

                In Azure Automation DSC the whole MOF file gets encrypted without the need to manually issue certificates for every node and then to collect the public keys.

                From Azure documentation:
                "Keeping credentials secure in node configurations (MOF configuration documents) requires encrypting the credentials in the node configuration MOF file. Azure Automation takes this one step further and encrypts the entire MOF file."

                This extremely useful feature sould also be implemented in the on-premises DSC pull server. Especially because the needed functionality must alread be in the WMF 5 as nothing more than WMF 5 is needed to use the Azure…

                11 votes
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)

                  We’ll send you updates on this idea

                  survey  ·  0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                • DSC: Should allow Credentials with Blank Passwords, so you can use GMSA accounts

                  For some reason DSC errors out with a credential object contains a null password. Unfortunately that is the mechanism use to set group managed service accounts.
                  Here is a link to a relevant bug in xWebAdministration: https://github.com/PowerShell/xWebAdministration/issues/80#issuecomment-171364644

                  And here is an example of the output your recieve when you attempt to use a managed service account:

                  "VERBOSE: [COMPUTERNAME]: LCM: [ End Test ] [[xWebAppPool]testpool] in 0.0070 seconds.
                  The password supplied to the Desired State Configuration resource MSFT_xWebAppPool is not valid. The password cannot be null or empty.
                  + CategoryInfo : InvalidResult: (:) [], CimException
                  + FullyQualifiedErrorId : InvalidPassword
                  + PSComputerName…

                  98 votes
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)

                    We’ll send you updates on this idea

                    6 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                    survey  ·  Mark Gray responded

                    Thanks for the feedback! I have personally heard this request from a number of customers. IMHO having the ability to use GMS accounts would be a quite useful in DSC configurations. If this is an important feature for you as well, vote it up so that we can appropriately prioritize it as we move forward.

                    MarkG

                  • OpenSource the Pull Server

                    Advances to the current PullServer are, quite frankly, slow and moving in a direction questionable to most MVPs. Microsoft should follow their own lead they took with the DSC modules: opensource it and place it on GitHub so that the community can invest in making a tool that we'd actually like to use.

                    Example of features still missing that everyone wants:
                    1. certificate management (use self-signed or pki)
                    2. web interface for compliance reporting

                    Example of features added that are questionable/actually bad ideas:
                    1. partial configurations (multiple pull server sources, mofs, and reports all being _managed_ by the node? who…

                    92 votes
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)

                      We’ll send you updates on this idea

                      12 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                      survey  ·  Mark Gray responded

                      Justin,

                      We totally understand that a robust Pull server / central management solution is something that is critical to your success with DSC. We have invested quite heavily in Azure Automation DSC (AA DSC) to fill many of these needs. With that said, I would be very interested to understand if the AA DSC solution does not work for you (and other customers) and why? Vote and comment if this is important to you.

                      Also interesting feedback on our ‘bad ideas’. Thanks!

                      MarkG

                    • Add maintenance window awareness to DSC / LCM

                      Votes from Connect: 17

                      Original Date Submitted: 8/13/2015 12:17:49 AM

                      Description:
                      ********Contact Information********
                      Handle: PowerShellDon
                      Site Name: PowerShell
                      Feedback ID: 1659904
                      ***************************************

                      Problem Description:
                      Suggestion one:

                      Add maintenance window awareness to the Local Configuration Manager. Edited via metaconfig, it specifies times when configuration changes are acceptable, when automated reboots are acceptable. Further automates configuration maintenance especially when you're implementing changes vs. correcting drift.

                      Suggestion two:

                      Add universal "DoNotImplementBefore" and "ImplementBy" settings to DSC resources. Just as "Present=" specifies to add/remove something, these would indicate a date/time for the setting to become valid (e.g., "we want to implement a bunch of…

                      134 votes
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)

                        We’ll send you updates on this idea

                        3 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                        investigating  ·  Mark Gray responded

                        Your votes on this and other features helps us in our feature prioritization.

                        Thank you!!

                        MarkG

                      • Invoke-DSCResource on WindowsFeatureSet fails

                        As subject says. Example is below

                        PS C:\Windows\system32> Invoke-DscResource -Name WindowsFeatureSet -Property @{Name = "Storage-Services"; Ensure = "Present" } -Method test -ModuleName PSDesiredStateConfiguration
                        Invoke-DscResource : Failed to serialize properties into CimInstance.
                        At line:1 char:1
                        + Invoke-DscResource -Name WindowsFeatureSet -Property @{Name = "Storag ...
                        + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                        + CategoryInfo : NotSpecified: (:) [Invoke-DscResource], SerializationException
                        + FullyQualifiedErrorId : System.Runtime.Serialization.SerializationException,Microsoft.PowerShell.DesiredStateConfiguration.C
                        ommands.InvokeDscResourceMethodCommand

                        17 votes
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)

                          We’ll send you updates on this idea

                          4 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                          survey  ·  Mark Gray responded

                          Thanks for the feedback! Based on its current ranking compared to other feedback items and product schedule, work on this item is pending (and will be driven by) further customer input. If you did not open this issue and are also impacted by it, please vote this item up.

                          MarkG

                        • Enable service restart and similar scenarios in DSC configurations

                          Renamed from "Provide additional resource control methods in DSC" for clarity
                          Votes from Connect: 13

                          Original Date Submitted: 5/28/2015 12:15:20 AM

                          Description:
                          ********Contact Information********
                          Handle: Ben Gelens
                          Site Name: PowerShell
                          Feedback ID: 1373894
                          ***************************************

                          Problem Description:
                          Scenario:
                          A MOF file is compiled for a node serving a website. The service resource is used to declare the W3SVC service to be started and the file resource is used to copy in the web content.
                          Next an update is deployed to the website by compiling a new MOF file and for the new content to become active, the W3SVC service needs to…

                          70 votes
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)

                            We’ll send you updates on this idea

                            3 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                          • Generate DSC from existing servers

                            For those of us with heavily-configured snowflake servers, it would great if it were possible to generate DSC files from existing builds. This may not be possible in all areas, but perhaps a subset of areas could be supported, with IIS 7.0+ at the top of the list.

                            13 votes
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)

                              We’ll send you updates on this idea

                              survey  ·  3 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                            • [Bug] Creating Local Users Fails Test-DSCConfiguration if the Users are Disabled

                              I can successfully create a disabled local user account on a non-domain joined server which has a password policy enforced.

                              If I try to create the disabled account with out a password, or one in violation of the policy, the configuration fails. This is expected.

                              If I create a disabled local user account with a password that meets the requirements, the configuration applies. When I run Test-DSCConfiguration the test fails with:
                              PowerShell DSC resource MSFT_UserResource failed to execute Test-TargetResource functionality with error message:
                              There could be a possible connection error while trying to use the System.DirectoryServices API's.Exception calling
                              "ValidateCredentials" with…

                              2 votes
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)

                                We’ll send you updates on this idea

                                1 comment  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                                survey  ·  Mark Gray responded

                                Phil,

                                Sounds like a valid bug. Thanks for bringing it to our attention. I have opened a bug in our internal system to track this to resolution.

                                MarkG

                              • Reset LCM configuration

                                Reset LCM configuration.

                                Hi and sorry for my funny English.
                                When I configure my LCM, it's impossible to reset state.
                                If I want a default configuration, I send a new configuration this default value for all Settings (here, no value, just settings).

                                [DscLocalConfigurationManager()]
                                Configuration ResetLCM {
                                Node MyNode {
                                Settings {
                                ActionAfterReboot =
                                AllowModuleOverwrite =
                                CertificateID =
                                ConfigurationDownloadManagers =
                                ConfigurationID =
                                ConfigurationMode =
                                ConfigurationModeFrequencyMins =
                                DebugMode =
                                MaximumDownloadSizeMB =
                                RebootNodeIfNeeded =
                                RefreshFrequencyMins =
                                RefreshMode =
                                ReportManagers =
                                ResourceModuleManagers =
                                SignatureValidations =
                                StatusRetentionTimeInDays =
                                }}

                                I think it's easier to use command.

                                For example, there is a reset configuration for DSCConfigurationDocument. …

                                8 votes
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)

                                  We’ll send you updates on this idea

                                  0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                                • Test-DscConfiguration returns a String instead of a Boolean value

                                  Test-DscConfiguration returns a String instead of a Boolean value.

                                  Contrary to what is mentionned in the documentation, the function Test-DscConfiguration does not return a boolean value.

                                  When you do a GetType() of the return value of Test-DscConfiguration you get a string with 'true' or 'false'.

                                  It's impossible to do a simple if (Test-DscConfiguration) because the string 'false' enter inside the if, we are forced to cast the return value of this cmdlet in boolean or to do the comparison with -eq $True, which seems to cast it automatically.

                                  6 votes
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)

                                    We’ll send you updates on this idea

                                    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Fix Add-DnsServerResourceRecord TXT Records Limit

                                    When attempting to add a TXT DNS record via the "Add-DnsServerResourceRecord" command, the DescriptiveText property only accepts strings up to 254 characters but should support up to 255 characters. Ideally the command should accept an array for the DescriptiveText so that multiple lines of up to 255 characters can be passed through. Currently it requires using `r`n to insert a line break but over all must still be under 254 characters. This is an issue as we are trying to implement automation around TXT records and DKIM records tend to be well over this 254 character limit and require multiple…

                                    2 votes
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)

                                      We’ll send you updates on this idea

                                      0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                                    • ¿Pienso?

                                      Creo, que si los Hispano-Hablantes, pudiesen tener acceso a los comentarios e ideas que la gente detendrían mas de 1000.000.000, si en números, Por favor empecemos por respetar a todos, no solo los Anglo-Sajones, y la gente de sus colonias (coman GUEL ) lo pongo en Español, por dignidad, Creo (estoy, seguro) que pagan lo mismo.

                                      2 votes
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)

                                        We’ll send you updates on this idea

                                        1 comment  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                                      • At line:4 char:1 + Import-DscResource -ModuleName cNtfsAccessControl + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Could not find the

                                        Can you provide solution for this error.
                                        I am getting it even after i downloaded NTFS security files.

                                        1 vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)

                                          We’ll send you updates on this idea

                                          0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                                        • MICROSOFT RAILWAY CORPORATION

                                          Now at this time called India,Pakistan & Bangladesh whose name was India.Yow know there are a lot of spaces for travelling.Indian Microsoft will be set up, a open independent Railway corp in the Whole India.Its will be a great way for our child,brother,sister,parents & all classes people.If Microsoft will be set up that way,many peoples will be satisfied for the way.& besides the way,many grounds are so many blank to a few year.There will be growing a lots of food & this foods will suppliers the Whole World.Otherwise,there are will be planning many trouthfull industries for our peoples worktivities.Trust,that IDEA…

                                          1 vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)

                                            We’ll send you updates on this idea

                                            0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1 3 4 5 6 7 8
                                          • Don't see your idea?

                                          Feedback and Knowledge Base