Open 229Lane opened 2 years ago
Sorry about the long configuration, any help is much appreciated.
When running Get-DscConfiguration the error can be repro'd. If you add -verbose the below error shows a SDDL value.
VERBOSE: [
+ CategoryInfo : InvalidOperation: (Microsoft.Manag...InstanceCommand:root/Microsoft/...gurationManager)
[Get-DscConfiguration], CimException
+ FullyQualifiedErrorId : New-CimInstance,Microsoft.Management.Infrastructure.CimCmdlets.NewCimInstanceCommand,Get
-DscConfiguration
Confirmed fixed in version 3.0.0 preview06
Details of the scenario you tried and the problem that is occurring
Config file has a single SecurityOption enabled, all the rest are commented out for testing. Mof processes fine if the below SecurityOption is commented out, when enabled it (uncomment) the below errors occur and the mof fails to be applied.
Verbose logs showing the problem
[ Name] Microsoft-Windows-DSC [ Guid] {50df9e12-a8c4-4939-b281-47e1325ba63e} EventID 4097 Version 0 Level 2 Task 1 Opcode 0 Keywords 0x4000000000000000
Execution [ ProcessID] 4480 [ ThreadID] 6708 Channel Microsoft-Windows-DSC/Operational
JobId {DE8DF40C-2D11-11EC-A5B6-00155D180B00} ComponentName LCM ErrorId 0x1 ErrorDetail The SendConfigurationApply function did not succeed. ResourceId [SecurityOption]SecurityRegistry(INF): Microsoft_network_client_Send_unencrypted_password_to_third_party_SMB_servers::[Ws2019DomainControllerSecurityCompliance1_0]Ws2019DcSecurityCompliance::[name]GroupPolicyConfiguration SourceInfo C:\source\src\Modules\CedisDscModule\DscResources\CedisGroupPolicy\Ws2019DomainControllerSecurityCompliance1_0.ps1::1949::5::SecurityOption ErrorMessage The PowerShell DSC resource '[SecurityOption]SecurityRegistry(INF): Microsoft_network_client_Send_unencrypted_password_to_third_party_SMB_servers::[Ws2019DomainControllerSecurityCompliance1_0]Ws2019DcSecurityCompliance::[CedisGroupPolicy]GroupPolicyConfiguration' with SourceInfo 'C:\source\src\Modules\CedisDscModule\DscResources\CedisGroupPolicy\Ws2019DomainControllerSecurityCompliance1_0.ps1::1949::5::SecurityOption' threw one or more non-terminating errors while running the Test-TargetResource functionality. These errors are logged to the ETW channel called Microsoft-Windows-DSC/Operational. Refer to this channel for more details.
error log message
JobId {AA442DEE-2D18-11EC-A5B7-00155D180B00} MIResult 1 ErrorMessage The PowerShell DSC resource '[SecurityOption]SecurityRegistry(INF): Microsoft_network_client_Send_unencrypted_password_to_third_party_SMB_servers::[Ws2019DomainControllerSecurityCompliance1_0]Ws2019DcSecurityCompliance::[CedisGroupPolicy]GroupPolicyConfiguration' with SourceInfo 'C:\source\src\Modules\CedisDscModule\DscResources\CedisGroupPolicy\Ws2019DomainControllerSecurityCompliance1_0.ps1::1949::5::SecurityOption' threw one or more non-terminating errors while running the Test-TargetResource functionality. These errors are logged to the ETW channel called Microsoft-Windows-DSC/Operational. Refer to this channel for more details. MessageID NonTerminatingErrorFromProvider ErrorCategory 7 ErrorCode 1 ErrorType MI
error log message
ErrorDetail The SendConfigurationApply function did not succeed. ResourceId [SecurityOption]SecurityRegistry(INF): Microsoft_network_client_Send_unencrypted_password_to_third_party_SMB_servers::[Ws2019DomainControllerSecurityCompliance1_0]Ws2019DcSecurityCompliance::[CedisGroupPolicy]GroupPolicyConfiguration SourceInfo C:\source\src\Modules\CedisDscModule\DscResources\CedisGroupPolicy\Ws2019DomainControllerSecurityCompliance1_0.ps1::1949::5::SecurityOption ErrorMessage The PowerShell DSC resource '[SecurityOption]SecurityRegistry(INF): Microsoft_network_client_Send_unencrypted_password_to_third_party_SMB_servers::[Ws2019DomainControllerSecurityCompliance1_0]Ws2019DcSecurityCompliance::[CedisGroupPolicy]GroupPolicyConfiguration' with SourceInfo 'C:\source\src\Modules\CedisDscModule\DscResources\CedisGroupPolicy\Ws2019DomainControllerSecurityCompliance1_0.ps1::1949::5::SecurityOption' threw one or more non-terminating errors while running the Test-TargetResource functionality. These errors are logged to the ETW channel called Microsoft-Windows-DSC/Operational. Refer to this channel for more details.
Error message
JobId {CF8B7DCA-2D31-11EC-A5B7-00155D180B00} ComponentName DSCEngine OperationCmd Test-TargetResource ProviderName MSFT_SecurityOption FullyQualifiedErrorId New-CimInstance,Microsoft.Management.Infrastructure.CimCmdlets.NewCimInstanceCommand ErrorMessage Could not infer CimType from the provided .NET object.
Suggested solution to the issue
N/A
The DSC configuration that is used to reproduce the issue (as detailed as possible)
The operating system the target node is running
OsName : Microsoft Windows Server 2019 Datacenter OsOperatingSystemSKU : DatacenterServerEdition OsArchitecture : 64-bit WindowsVersion : 1809 WindowsBuildLabEx : 17763.1.amd64fre.rs5_release.180914-1434 OsLanguage : en-US OsMuiLanguages : {en-US}
Version and build of PowerShell the target node is running
Name Value
PSVersion 5.1.17763.2183 PSEdition Desktop PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...} BuildVersion 10.0.17763.2183 CLRVersion 4.0.30319.42000 WSManStackVersion 3.0 PSRemotingProtocolVersion 2.3 SerializationVersion 1.1.0.1
Version of the DSC module that was used
ModuleType Version Name ExportedCommands
Manifest 2.10.0.0 SecurityPolicyDsc