How to lock down settings in VM using Powershell DSC?

Lakshmi Narayanan 71

Hi,

I want to clear "Windows web servers should be configured to use secure communication protocols" in Azure Advisor issues for windows VM. Some one was replied to clear this things using Powershell DSC to lock down settings in VM. Is this any special powershell code or any documents to achieve this?

1 answer

prmanhas-MSFT 17,906 Reputation points Microsoft Employee

2021-08-03T10:25:00.49+00:00

@Lakshmi Narayanan Thank you for your query!!!

I can see you have posted same query here as well and seems like the link you are following should do the trick.

As a suggestion I would recommend you to go through this thread as well since it has solution mentioned based upon internal team interaction by fellow team mate and has resolved issue in many case.

Hope it helps :)

Please "Accept as Answer" if it helped so it can help others in community looking for help on similar topics.
Please sign in to rate this answer.

1 person found this answer helpful.
Lakshmi Narayanan 71 Reputation points

2021-08-03T11:22:22.027+00:00

Before 10 days, Advisor don't have no issues with VM. But now its again shown. Thats why i have confusing about this. I have already seen this thread, but no luck. I dont know where i'm wrong?

Lakshmi Narayanan 71 Reputation points

2021-08-03T11:26:49.227+00:00

I just followed this link to install Guest Configuration.
https://learn.microsoft.com/en-us/azure/governance/policy/how-to/guest-configuration-create

But its thrown errors while running powershell commands

PackageManagement\Install-Package : The module 'GuestConfiguration' cannot be installed or updated because the
authenticode signature of the file 'GuestConfiguration.psd1' is not valid.
At C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSModule.psm1:1772 char:21

... $null = PackageManagement\Install-Package @PSBoundParameters

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : InvalidOperation: (Microsoft.Power....InstallPackage:InstallPackage) [Install-Package],
Exception

FullyQualifiedErrorId : InvalidAuthenticodeSignature,ValidateAndGet-AuthenticodeSignature,Microsoft.PowerShell.P
ackageManagement.Cmdlets.InstallPackage
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to lock down settings in VM using Powershell DSC?

1 answer

Your answer