Desired State Configuration (DSC) basics in PowerShell - Mini Project: Build & Apply

Desired State Configuration (DSC) Basics

📖 Scenario: You are a system administrator who wants to ensure a server always has a specific folder with the right permissions. You will use Desired State Configuration (DSC) in PowerShell to define and enforce this setup automatically.

🎯 Goal: Build a simple DSC configuration script that creates a folder at a specified path and sets its permissions. You will define the configuration, set parameters, apply the configuration, and check the result.

📋 What You'll Learn

Create a DSC configuration named FolderSetup

Use the File resource to create a folder at C:\DSCTestFolder

Set the folder to be present with Ensure = 'Present'

Add a configuration data variable $FolderPath with the folder path

Apply the configuration using Start-DscConfiguration

Output the status of the DSC application

💡 Why This Matters

🌍 Real World

DSC helps system administrators automatically keep servers in a desired state, reducing manual errors and saving time.

💼 Career

Understanding DSC is valuable for roles in system administration, DevOps, and cloud infrastructure management.

1

Create the DSC Configuration

Write a DSC configuration named FolderSetup that uses the File resource to create a folder at C:\DSCTestFolder. Set Ensure = 'Present' and Type = 'Directory' inside the resource block.

PowerShell

# Define the DSC configuration named FolderSetup
# Your code here

Hint

Use the configuration keyword to start. Inside, use File resource with the exact name TestFolder. Set DestinationPath to 'C:\DSCTestFolder'.

2

Add a Configuration Data Variable

Create a variable called $FolderPath and set it to the string 'C:\\DSCTestFolder'. Then update the DestinationPath in the File resource inside FolderSetup to use this variable.

PowerShell

configuration FolderSetup {
    File TestFolder {
        DestinationPath = $FolderPath
        Ensure = 'Present'
        Type = 'Directory'
    }
}

# Create the variable $FolderPath with the folder path
# Your code here

Hint

Define $FolderPath after the configuration block. Replace the hardcoded path in DestinationPath with $FolderPath.

3

Apply the DSC Configuration

Call the FolderSetup configuration to generate the MOF file by running FolderSetup. Then apply the configuration using Start-DscConfiguration with the path ./FolderSetup and the -Wait and -Verbose flags.

PowerShell

FolderSetup

# Apply the configuration using Start-DscConfiguration
# Your code here

Hint

Run the configuration name as a command to create the MOF file. Then use Start-DscConfiguration with the folder path where the MOF file is generated.

4

Output the DSC Application Status

After applying the configuration, run Get-DscConfigurationStatus and print its output to show the status of the DSC application.

PowerShell

# Run Get-DscConfigurationStatus and print the result
# Your code here

Hint

Use Get-DscConfigurationStatus to get the status object. Then use Format-List to print it nicely.

Practice

1. What is the main purpose of Desired State Configuration (DSC) in PowerShell?

easy

A. To monitor network traffic continuously

B. To write scripts that run only once manually

C. To automatically keep your computer setup as you want it

D. To create user accounts interactively

Solution

1. Step 1: Understand DSC's role

   DSC is designed to keep system configurations consistent automatically.

2. Step 2: Compare options

   Only To automatically keep your computer setup as you want it describes automatic maintenance of computer setup, which is DSC's goal.

3. Final Answer:

   To automatically keep your computer setup as you want it -> Option C

4. Quick Check:

   DSC purpose = automatic setup maintenance [OK]

Hint: DSC means automatic setup enforcement [OK]

Common Mistakes:

• Thinking DSC only runs scripts once
• Confusing DSC with network monitoring
• Assuming DSC manages user accounts interactively

2. Which of the following is the correct way to start a DSC configuration block in PowerShell?

easy

A. Start-DSCConfig MyConfig { }

B. Configuration MyConfig { }

C. Config MyConfig { }

D. New-DSCConfig -Name MyConfig { }

Solution

1. Step 1: Recall DSC syntax

   The DSC configuration block always starts with the keyword 'Configuration' followed by the name.

2. Step 2: Check options

   Only Configuration MyConfig { } uses the correct keyword 'Configuration' to define the block.

3. Final Answer:

   Configuration MyConfig { } -> Option B

4. Quick Check:

   DSC block starts with 'Configuration' [OK]

Hint: DSC configs start with 'Configuration' keyword [OK]

Common Mistakes:

• Using 'Config' instead of 'Configuration'
• Trying to use cmdlets to start config blocks
• Confusing DSC syntax with other PowerShell commands

3. Given this DSC configuration snippet, what will be the output file name generated after running MyConfig?

Configuration MyConfig {
  Node 'localhost' {
    File ExampleFile {
      DestinationPath = 'C:\temp\example.txt'
      Contents = 'Hello DSC'
    }
  }
}
MyConfig

medium

A. localhost.mof

B. MyConfig.ps1

C. example.txt

D. MyConfig.mof

Solution

1. Step 1: Understand DSC output files

   Running a DSC configuration generates a MOF file named after the Node, here 'localhost'.

2. Step 2: Identify the MOF file name

   The MOF file will be 'localhost.mof' because the Node is 'localhost'.

3. Final Answer:

   localhost.mof -> Option A

4. Quick Check:

   DSC MOF file = NodeName.mof [OK]

Hint: DSC MOF file named after Node, not config [OK]

Common Mistakes:

• Assuming MOF file is named after config
• Confusing MOF with script files
• Expecting output as the destination file

4. You wrote this DSC configuration but get an error when running it:

Configuration SampleConfig {
  Node 'localhost' {
    File MyFile {
      DestinationPath = 'C:\temp\file.txt'
      Content = 'Test content'
    }
  }
}
SampleConfig

What is the error in this script?

medium

A. The Node name 'localhost' is invalid

B. The configuration block must end with 'End-Configuration' command

C. The DestinationPath must be a folder, not a file

D. The property 'Content' should be 'Contents' in the File resource

Solution

1. Step 1: Check File resource properties

   The File resource requires the property 'Contents' (plural), not 'Content'.

2. Step 2: Validate other parts

   Node 'localhost' is valid, DestinationPath can be a file path, and no 'End-Configuration' command exists.

3. Final Answer:

   The property 'Content' should be 'Contents' in the File resource -> Option D

4. Quick Check:

   File resource uses 'Contents' property [OK]

Hint: File resource property is 'Contents' plural [OK]

Common Mistakes:

• Using 'Content' instead of 'Contents'
• Thinking Node names must be IP addresses
• Expecting a special end command for configuration

5. You want to ensure a folder C:\Logs always exists on a remote computer using DSC. Which configuration snippet correctly enforces this desired state?

hard

A. Configuration EnsureFolder {
Node 'RemotePC' {
File LogsFolder {
DestinationPath = 'C:\Logs'
Type = 'Directory'
Ensure = 'Present'
}
}
}

B. Configuration EnsureFolder {
Node 'RemotePC' {
Directory LogsFolder {
Path = 'C:\Logs'
State = 'Exists'
}
}
}

C. Configuration EnsureFolder {
Node 'RemotePC' {
File LogsFolder {
DestinationPath = 'C:\Logs'
Ensure = 'Present'
}
}
}

D. Configuration EnsureFolder {
Node 'RemotePC' {
File LogsFolder {
DestinationPath = 'C:\Logs'
Type = 'File'
Ensure = 'Present'
}
}
}

Solution

1. Step 1: Identify correct resource and properties

   To ensure a folder exists, use the File resource with Type='Directory' and Ensure='Present'.

2. Step 2: Check options for correctness

   Configuration EnsureFolder {
     Node 'RemotePC' {
       File LogsFolder {
         DestinationPath = 'C:\Logs'
         Type = 'Directory'
         Ensure = 'Present'
       }
     }
   }

   correctly uses File resource with Type='Directory' and Ensure='Present'.

   Configuration EnsureFolder {
     Node 'RemotePC' {
       File LogsFolder {
         DestinationPath = 'C:\Logs'
         Ensure = 'Present'
       }
     }
   }

   misses Type, D wrongly uses Type='File', B uses a non-existent Directory resource.

3. Final Answer:

   Option A snippet correctly ensures folder presence -> Option A

4. Quick Check:

   File resource + Type='Directory' + Ensure='Present' = folder exists [OK]

Hint: Use File resource with Type='Directory' to create folders [OK]

Common Mistakes:

• Using Type='File' for folders
• Omitting Type property for directories
• Using non-existent 'Directory' resource