PowerShell

The PowerShell forum accepts bug reports as well as feedback and suggestions. For more information, check out the PowerShell Homepage

The following is a list of the states we use to track items.

status meaning
survey We saw this and we are considering it. Please upvote if it’s important to you.
needs more information We don’t understand the issue and need additional details.
investigating We are looking at this internally to understand things like: scenario, reproduction of issue, costing, or other technical details.
in queue The issue is understood and in our unprioritized backlog. Your votes will be used to drive prioritization of this work.
  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. dsc Partial configuration - pull server

    0
    down vote
    favorite
    I have a big issue that I cant solve, need help!

    Im using partial configuration to configure 3 servers. The problem is mof file name. In Microsoft documentation (https://docs.microsoft.com/en-us/powershell/dsc/partialconfigs) says: "If you are pulling more than one partial configuration from a pull server, the configuration document can be named (...) ..mof, where ConfigurationName is the name of the partial configuration, and NodeName is the name of the target node."

    I'm trying ..mof and it returns the warning "WARNING: [DSC-3]: [] Executing Get-Action on partial configuration 'PreStagging' Failed. Please ensure the parital configuration and its…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  2. [Bug] DSC configuration allows multiple resource instances with duplicate key values

    Before PowerShell 5.1, compilation of DSC configurations having resource instances with duplicate keys resulted in a compilation error.

    However, with 5.1, this seems to have changed.

    Configuration FileDemo
    {

    Import-DscResource -ModuleName PSDesiredStateConfiguration -ModuleVersion 1.1

    Node Localhost
    {
    File TestFile1
    {
    DestinationPath = 'C:\Scripts\Test.txt'
    Contents = ''
    Type = 'File'
    }

    File TestFile2
    {
    DestinationPath = 'C:\Scripts\Test.txt'
    Contents = ''
    Type = 'File'
    }
    }

    }

    FileDemo

    This configuration will compile with no errors.

    PS C:> $PSVersionTable

    Name Value


    PSVersion 5.1.14393.1914

    PSEdition Desktop

    PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...}

    BuildVersion 10.0.14393.1914

    CLRVersion 4.0.30319.42000

    WSManStackVersion 3.0

    PSRemotingProtocolVersion 2.3

    SerializationVersion 1.1.0.1

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  3. Add support for Conditions on DSC Resources

    Currently the only way to apply conditions is using the Script resource. However the Script Resource has limitations especially when dealing with Azure credential objects. Conditions would be very useful, similar to what SCCM uses for it's Configuration Items.
    Syntax would be:

     Condition = [Boolean PowerShell Expression]
    

    Example #1: Apply a Package Resource only for SQL servers
    Example #2: Apply a WindowsFeature Resource only for IIS servers.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  4. DSC Archive Resource (unzip) holds zip-file

    This is more a indirect failure experience. Please bear with me if this is the wrong place: Expanding a zip-file with DSC in an Archive Resource leaves a process holding the zip-file. This gives that the zip-file can not be deleted by the same script or in the same PowerShell session.
    The error message from Remove-Item on the zip-file is like this: "Remove-Item : Cannot remove item C:\temp\jjdk1.8.0112-CE.zip: The process cannot access the file 'jdk1.8.0112-CE.zip' because it is being used by another process.".
    In issue 240 to Plaster on GitHub (https://github.com/PowerShell/Plaster/issues/240) it is mentioned by Keith…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  5. Disable SSL CRL check on Linux boxes

    I tried to follow "How to Script Disabling CRL Checking With Netsh and Powershell" guide: (https://blogs.msdn.microsoft.com/timomta/2013/06/24/how-to-script-disabling-crl-checking-with-netsh-and-powershell/)
    However netsh is not available on Powershell 6.0.0-alpha Linux version. Could you provide me an alternative?

    Regards,

    ~~~
    PS /root> $PSVersionTable

    Name Value


    PSVersion 6.0.0-alpha

    PSEdition Core

    PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...}

    BuildVersion 3.0.0.0

    GitCommitId v6.0.0-alpha.14

    CLRVersion

    WSManStackVersion 3.0

    PSRemotingProtocolVersion 2.3

    SerializationVersion 1.1.0.1

    PS /root> netsh netsh : The term 'netsh' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling

    of the name, or if a path was included, verify that the path…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  6. [BUG] Cannot import both PSDesiredStateConfiguration in-box module and PSDscResources (gallery module) in the same configuration

    OS: Windows Server 2016 1607 (14393.1593)
    PSVersionTable:
    Name Value


    PSVersion 5.1.14393.1532

    PSEdition Desktop

    PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...}

    BuildVersion 10.0.14393.1532

    CLRVersion 4.0.30319.42000

    WSManStackVersion 3.0

    PSRemotingProtocolVersion 2.3

    SerializationVersion 1.1.0.1

    PSDscResource module: v2.8.0.0

    Take a look at this configuration:
    Configuration DependentConfig
    {

    Import-DscResource -ModuleName PSDscResources -Name Registry
    
    

    Node MyNode01
    {

    File SetupScript
    {
    DestinationPath = 'C:\Scripts\hello.txt'
    Contents = 'somecommand'
    Type = 'File'
    Ensure = 'Present'
    DependsOn = '[Registry]regCheck'
    }

    Registry regCheck
    {
    Key = 'HKEY_LOCAL_MACHINE\SYSTEM\SomeKey'
    ValueName = 'SomeValue'
    ValueData = 0
    ValueType = 'DWord'
    Ensure = 'Present'
    }
    }

    }

    DependentConfig -OutputPath C:\DependentConfig

    This requires PSDscResources module version 2.8.0.0 from the gallery…

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    investigating  ·  4 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  7. Position of PowerShell window appears behind Windows taskbar when taskbar is at top

    Dynamically detecting the taskbar position, and dynamically modifying the starting position of the powershell window when opening powershell might be a good solution. I am on Windows 10 with three monitors. The taskbar is locked, not automatically hidden, taskbar is only shown on main display.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  8. Double DependsOn in mof when using foreach loops

    When using a foreach loop to create a set of resources and trying to set the previous item key as the dependsOn resource, it adds it twice in the mof file.

    Configuration example:
    configuration Test-DependsOnWithLoop {

    param([string[]]$Directories)
    
    Import-DscResource -ModuleName PSDesiredStateConfiguration
    node localhost {
    $dependsOn = $null
    $dirs.ForEach({
    $res = $_ -replace '\\|:', '_'
    File $res {
    Ensure = 'Present'
    DestinationPath = $_
    DependsOn = $dependsOn
    Type = 'Directory'
    }
    $dependsOn = "[File]$res"
    })
    }

    }

    $dirs = 1..10 | % { "C:\Temp_$_" }
    Test-DependsOnWithLoop -Directories $dirs

    And if you look at the localhost.mof you'll see:
    DependsOn = { "[File]CTemp

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    In Queue  ·  0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  9. Composite DSC Resources DependOn Bug?

    Composite Resources DependsOn Bug?

    Bumped into this URL and it seems I'm experiencing the same issue with composite resources DependsOn:

    https://powershell.org/forums/topic/composite-resource-dependson-bug/

    > $psversiontable

    Name Value


    PSVersion 5.1.15063.502
    PSEdition Desktop
    PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...}
    BuildVersion 10.0.15063.502
    CLRVersion 4.0.30319.42000
    WSManStackVersion 3.0
    PSRemotingProtocolVersion 2.3
    SerializationVersion 1.1.0.1

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  10. BUG: GetMetaConfiguration should validate property values against allowed values of MSFT_DSCMetaConfiguration CIM Properties

    Once a node meta configuration is enacted, it is easy for an administrator or process (with malicious intent) to modify the MetaConfig.mof file in C:\Windows\System32\Configuration directory. The GetMetaConfiguration method in MSFT_DscMetaConfiguration class does not validate the property values against the allowed values of the CIM properties.

    Steps to reproduce this behavior:
    - Enact a simple meta configuration and enact it.
    - Open the MetaConfig.MOF file in your favorite editor and change the value of ConfigurationMode to some random text.
    - Save the file and close it.
    - Run Get-DscLocalConfigurationManager.
    - You will see the random value assigned to ConfigurationMode in…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
    In Queue  ·  Mark Gray responded

    Ravikanth,

    We have validated this issue and created two bugs for it.

    1. We will validate the MOF when it is passed in as part of our API (i.e. Set-DscLocalConfigurationManager) and error if the values are not valid.
    2. We will write a warning when Get-DscLocalConfigurationManager reads a MOF that has invalid values and at LCM startup. The resultant behavior will behave like it does today where invalid values will be read as the default value by the LCM.

    Please let us know if this meets your expectations.

    Regards,

    MarkG

  11. Bug comparing identical DSC resources with complex properties

    I have system modules that are deployed in nodes according to the configuration data file (psd1). For example, one node can have three modules, or there may be three nodes each one with a module.
    All modules have a common configuration, so I put this configuration in a separate composite resource. Then, if there are more than one module in a node, the resulting configuration will have duplicate resources.
    The problem occur when one of these duplicate resources have some complex property. Here is a simplified version of my configuration:

    Configuration BaseWebConfiguration
    {

    Import-DscResource -ModuleName xWebAdministration
    
    

    xWebsite DefaultSite
    {
    Ensure…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  12. Type restrictions when rendering a property as a string in a MOF-file

    Dear,

    As we use Powershell V5 Classes extensively, we create instances of a class and add them to a Hashtable.

    This hashtable is assigned to an member of a DSC Resource. When creating the .MOF file, I receive an System.ArgumentException on the DSC resource "PSDesiredStateConfiguration.psm1"

    -> Only certain basic-types are allowed to be serialized to MOF-file :

            $elementsAsStrings = foreach ($p in $Value.GetEnumerator())
    
    {
    if($p.Value -isnot [string] -and
    $p.Value -isnot [char] -and
    $p.Value -isnot [int64] -and
    $p.Value -isnot [uint64] -and
    $p.Value -isnot [double] -and
    $p.Value -isnot [bool] -and
    $p.Value -isnot [datetime] -and
    $p.Value -isnot [ScriptBlock])
    {
    $errorMessage = $LocalizedData.HashtableElementTypeNotAllowed -f
    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  13. DSC need to use full width of command processor in output

    DSC output is not respecting width of console and wraps text around despite full width is not utilized.
    Please see details here (https://github.com/PowerShell/PowerShell/issues/4030)

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  14. Bug: DSC Decryption across Servers not Working

    I have created a Pull Server Configuration. I have created the DSC Signing Certificate using a custom template on a Enterprise Root CA which has worked for 2012R2 nodes and also tested using xDSCUtils New-xSelfSignedDscEncryptionCertificate. Using the same Certificate to Compile and Execute the MOF on the same Computer works, it is only if you compile on one and execute on another that the problems arise.
    I kept getting errors when passing in credentials. I therefore wrote a tiny custom DSC Resource that Displays the Password as clear text when I run Start-DSCConfiguration -Wait -Verbose
    You can find it here …

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    4 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  15. Get-TargetResource should not use 'Required' parameters

    I'm not sure why this is, but for some reason Get-TargetResource requires not only the 'Key' parameters, but also the 'Required' parameters. My understanding is only 'Keys' should be necessary to find an existing resource and the 'Required' parameters are necessary when you want to create/update/delete something related to a resource.

    This really makes no sense and will hinder our ability to build higher level tech on top of DSC. If I have the key values for any piece of data in any system, I should be able to retrieve it without any additional information.

    In almost all of the…

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  16. Message Cannot unprotect message. The input contained no encrypted content

    When upgrading to WMF 5.1, we are seeing errors in the DSC event log on servers that use a configuration with encrypted content (passwords). We are using encrypted credentials to create application pools and assign a service account as the identity. The data gets decrypted fine and the app pools get created with the correct identities. However the following error gets logged in the DSC event log every time a consistency check runs:

    Job :
    Message Cannot unprotect message. The input contained no encrypted content. Specify the '-IncludeContext' parameter if you wish to output the original content when no encrypted…

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    investigating  ·  0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  17. Add enhanced reporting, allowing you to view the status of all nodes instead of one at a time.

    Currently, the DSC reporting server only offers the ability to query a single node at a time. I think for any environment, it would be crucial to get a list of the last reported compliance for all nodes. I'd really like to see this feature added in a future release.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
    survey  ·  Mark Gray responded

    Eric,

    Thanks for the feedback! This is something that we are aware of. We intentionally did not want to do this without having a way to authenticate the requests.

    Have you seen this community project? It should help you get the functionality that you are looking for including authentication:
    https://github.com/claudiospizzi/DSCPullServerWeb

    MarkG

  18. Bug: DSC Decryption across Servers not Working

    On 2 Fully Updated Windows Server 2016 Machines running and provisioned from Azure I have created a Pull Server Configuration. I have created the DSC Signing Certificate using a custom template on a Enterprise Root CA which has worked for 2012R2 nodes and also tested using xDSCUtils New-xSelfSignedDscEncryptionCertificate. Using the same Certificate to Compile and Execute the MOF on the same Computer works, it is only if you compile on one and execute on another that the problems arise.
    I kept getting errors when passing in credentials. I therefore wrote a tiny custom DSC Resource that Displays the Password as…

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    investigating  ·  0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  19. partial

    Hi all,
    I am using DSC partials to create role-based architectures with Azure virtual machines.
    When switching to Windows 2016 (everything works great on Windows 2012 R2), I get errors when DSC is compiling the MOF.
    The idea is that I have multiple partials that contain the same Windows Feature installation, because it's needed for a certain roles. When I apply more roles on the same machine, the partials need to merge. So I have one partial that contains this:

        WindowsFeature DotNetFrameworkRole1
    
    {
    Name = 'AS-NET-Framework'
    }

    and another partial that contains this:

        WindowsFeature DotNetFrameworkRole2
    
    {
    Name = 'AS-NET-Framework'
    }
    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    investigating  ·  1 comment  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  20. ConfigurationAST should include resource modules being imported

    The ConfigurationAST added in v4 for PowerShell DSC does a good job at providing resource configuration details. However, to determine what modules are being imported, we should still use the keyword AST to find the resource module names from the Import-DSCResource command. While this is a workaround, it will be easier if ConfigurationAST can provide this information for simplicity.

    14 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)

    We’ll send you updates on this idea

    survey  ·  0 comments  ·  Desired State Configuration (DSC)  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base