xremotedesktopsessionhost
Version information
This version is compatible with:
- Puppet Enterprise 2023.2.x, 2023.1.x, 2023.0.x, 2021.7.x, 2021.6.x, 2021.5.x, 2021.4.x, 2021.3.x, 2021.2.x, 2021.1.x, 2021.0.x, 2019.8.x, 2019.7.x, 2019.5.x, 2019.4.x, 2019.3.x, 2019.2.x, 2019.1.x, 2019.0.x
- Puppet >= 6.0.0 < 8.0.0
Start using this module
Add this module to your Puppetfile:
mod 'dsc-xremotedesktopsessionhost', '2.0.0-0-1'
Learn more about managing modules with a PuppetfileDocumentation
Table of Contents
Description
This is an auto-generated module, using the Puppet DSC Builder to vendor and expose the PowerShell module's DSC resources as Puppet resources. The functionality of this module comes entirely from the vendored PowerShell resources, which are pinned at v2.0.0. The PowerShell module describes itself like this:
Module with DSC Resources for Remote Desktop Session Host
For information on troubleshooting to determine whether any encountered problems are with the Puppet wrapper or the DSC resource, see the troubleshooting section below.
Requirements
This module, like all auto-generated Puppetized DSC modules, relies on two important technologies in the Puppet stack: the Puppet Resource API and the puppetlabs/pwshlib Puppet module.
The Resource API provides a simplified option for writing types and providers and is responsible for how this module is structured. The Resource API ships inside of Puppet starting with version 6. While it is technically possible to add the Resource API functionality to Puppet 5.5.x, the DSC functionality has not been tested in this setup. For more information on the Resource API, review the documentation.
The module also depends on the pwshlib module. This Puppet module includes two important things: the ruby-pwsh library for running PowerShell code from ruby and the base provider for DSC resources, which this module leverages.
All of the actual work being done to call the DSC resources vendored with this module is in this file from the pwshlib module. This is important for troubleshooting and bug reporting, but doesn't impact your use of the module except that the end result will be that nothing works, as the dependency is not installed alongside this module!
Usage
You can specify any of the DSC resources from this module like a normal Puppet resource in your manifests. The examples below use DSC resources from from the PowerShellGet repository, regardless of what module you're looking at here; the syntax, not the specifics, is what's important.
For reference documentation about the DSC resources exposed in this module, see the Reference Forge tab, or the REFERENCE.md file.
# Include a meaningful title for your resource declaration
dsc_psrepository { 'Add team module repo':
dsc_name => 'foo',
dsc_ensure => present,
# This location is nonsense, can be any valid folder on your
# machine or in a share, any location the SourceLocation param
# for the DSC resource will accept.
dsc_sourcelocation => 'C:\Program Files',
# You must always pass an enum fully lower-cased;
# Puppet is case sensitive even when PowerShell isn't
dsc_installationpolicy => untrusted,
}
dsc_psrepository { 'Trust public gallery':
dsc_name => 'PSGallery',
dsc_ensure => present,
dsc_installationpolicy => trusted,
}
dsc_psmodule { 'Make Ruby manageable via uru':
dsc_name => 'RubyInstaller',
dsc_ensure => present,
}
Credentials
Credentials are always specified as a hash of the username and password for the account. The password must use the Puppet Sensitive type; this ensures that logs and reports redact the password, displaying it instead as <Sensitive [value redacted]>.
dsc_psrepository { 'PowerShell Gallery':
dsc_name => 'psgAllery',
dsc_installationpolicy => 'Trusted',
dsc_psdscrunascredential => {
user => 'apple',
password => Sensitive('foobar'),
},
}
CIM Instances
Because the CIM instances for DSC resources are fully mapped, the types actually explain fairly precisely what the shape of each CIM instance has to be - and, moreover, the type definition means that you get checking at catalog compile time. Puppet parses CIM instances are structured hashes (or arrays of structured hashes) that explicitly declare their keys and the valid types of values for each key.
So, for the dsc_accesscontrolentry
property of the dsc_ntfsaccessentry
type, which has a MOF type of NTFSAccessControlList[]
, Puppet defines the CIM instance as:
Array[Struct[{
accesscontrolentry => Array[Struct[{
accesscontroltype => Enum['Allow', 'Deny'],
inheritance => Enum['This folder only', 'This folder subfolders and files', 'This folder and subfolders', 'This folder and files', 'Subfolders and files only', 'Subfolders only', 'Files only'],
ensure => Enum['Present', 'Absent'],
cim_instance_type => 'NTFSAccessControlEntry',
filesystemrights => Array[Enum['AppendData', 'ChangePermissions', 'CreateDirectories', 'CreateFiles', 'Delete', 'DeleteSubdirectoriesAndFiles', 'ExecuteFile', 'FullControl', 'ListDirectory', 'Modify', 'Read', 'ReadAndExecute', 'ReadAttributes', 'ReadData', 'ReadExtendedAttributes', 'ReadPermissions', 'Synchronize', 'TakeOwnership', 'Traverse', 'Write', 'WriteAttributes', 'WriteData', 'WriteExtendedAttributes']]
}]],
forceprincipal => Optional[Boolean],
principal => Optional[String],
}]]
A valid example of that in a puppet manifest looks like this:
dsc_accesscontrollist => [
{
accesscontrolentry => [
{
accesscontroltype => 'Allow',
inheritance => 'This folder only',
ensure => 'Present',
filesystemrights => 'ChangePermissions',
cim_instance_type => 'NTFSAccessControlEntry',
},
],
principal => 'veryRealUserName',
},
]
For more information about using a built module, check out our narrative documentation.
Properties
Note that the only properties specified in a resource declaration which are passed to Invoke-Dsc are all prepended with dsc.
If a property does _not start with dsc_ it is used to control how Puppet interacts with DSC/other Puppet resources - for example,
specifying a unique name for the resource for Puppet to distinguish between declarations or Puppet metaparameters (notifies,
before, etc).
Troubleshooting
In general, there are three broad categories of problems:
- Problems with the way the underlying DSC resource works.
- Problems with the type definition, where you can't specify a valid set of properties for the DSC resource
- Problems with calling the underlying DSC resource - the parameters aren't being passed correctly or the resource can't be found
Unfortunately, problems with the way the underlying DSC resource works are something we can't help directly with. You'll need to file an issue with the upstream maintainers for the PowerShell module.
Problems with the type definition are when a value that should be valid according to the DSC resource's documentation and code is not accepted by the Puppet wrapper. If and when you run across one of these, please file an issue with the Puppet DSC Builder; this is where the conversion happens and once we know of a problem we can fix it and regenerate the Puppet modules. To help us identify the issue, please specify the DSC module, version, resource, property and values that are giving you issues. Once a fix is available we will regenerate and release updated versions of this Puppet wrapper.
Problems with calling the underlying DSC resource become apparent by comparing <value passed in in puppet>
with <value received by DSC>
.
In this case, please file an issue with the puppetlabs/pwshlib module, which is where the DSC base provider actually lives.
We'll investigate and prioritize a fix and update the puppetlabs/pwshlib module.
Updating to the pwshlib version with the fix will immediately take advantage of the improved functionality without waiting for this module to be reconverted and published.
For specific information on troubleshooting a generated module, check the troubleshooting guide for the puppet.dsc module.
Known Limitations
Currently, because of the way Puppet caches files on agents, use of the legacy puppetlabs-dsc
module is not compatible with this or any auto-generated DSC module.
Inclusion of both will lead to pluginsync conflicts.
Reference
Table of Contents
Resource types
dsc_xrdcertificateconfiguration
: The DSC xRDCertificateConfiguration resource type. Automatically generated from version 2.0.0dsc_xrdgatewayconfiguration
: The DSC xRDGatewayConfiguration resource type. Automatically generated from version 2.0.0dsc_xrdlicenseconfiguration
: The DSC xRDLicenseConfiguration resource type. Automatically generated from version 2.0.0dsc_xrdremoteapp
: The DSC xRDRemoteApp resource type. Automatically generated from version 2.0.0dsc_xrdserver
: The DSC xRDServer resource type. Automatically generated from version 2.0.0dsc_xrdsessioncollection
: The DSC xRDSessionCollection resource type. Automatically generated from version 2.0.0dsc_xrdsessioncollectionconfiguration
: The DSC xRDSessionCollectionConfiguration resource type. Automatically generated from version 2.0.0dsc_xrdsessiondeployment
: The DSC xRDSessionDeployment resource type. Automatically generated from version 2.0.0
Resource types
dsc_xrdcertificateconfiguration
The DSC xRDCertificateConfiguration resource type. Automatically generated from version 2.0.0
Properties
The following properties are available in the dsc_xrdcertificateconfiguration
type.
dsc_importpath
Data type: String
The certificate that should be used, should point to a PFX file on the filesystem.
Parameters
The following parameters are available in the dsc_xrdcertificateconfiguration
type.
dsc_connectionbroker
namevar
Data type: String
The connection broker that this certificate configuration is applied to.
dsc_credential
Data type: Optional[Struct[{ user => String[1], password => Sensitive[String[1]] }]]
Specifies the password used to decrypt the PFX file. The username is ignored.
dsc_psdscrunascredential
Data type: Optional[Struct[{ user => String[1], password => Sensitive[String[1]] }]]
dsc_role
namevar
Data type: Enum['RDRedirector', 'RDPublishing', 'RDWebAccess', 'RDGateway']
The role to apply this certificate configuration to.
name
namevar
Data type: String
Description of the purpose for this resource declaration.
dsc_xrdgatewayconfiguration
The DSC xRDGatewayConfiguration resource type. Automatically generated from version 2.0.0
Properties
The following properties are available in the dsc_xrdgatewayconfiguration
type.
dsc_bypasslocal
Data type: Optional[Boolean]
dsc_externalfqdn
Data type: Optional[String]
dsc_gatewaymode
Data type: Optional[Enum['DoNotUse', 'Custom', 'Automatic']]
dsc_gatewayserver
Data type: Optional[String]
dsc_logonmethod
Data type: Optional[Enum['Password', 'Smartcard', 'AllowUserToSelectDuringConnection']]
dsc_usecachedcredentials
Data type: Optional[Boolean]
Parameters
The following parameters are available in the dsc_xrdgatewayconfiguration
type.
dsc_connectionbroker
namevar
Data type: String
dsc_psdscrunascredential
Data type: Optional[Struct[{ user => String[1], password => Sensitive[String[1]] }]]
name
namevar
Data type: String
Description of the purpose for this resource declaration.
dsc_xrdlicenseconfiguration
The DSC xRDLicenseConfiguration resource type. Automatically generated from version 2.0.0
Properties
The following properties are available in the dsc_xrdlicenseconfiguration
type.
dsc_licensemode
Data type: Enum['PerUser', 'PerDevice', 'NotConfigured']
dsc_licenseserver
Data type: Optional[Array[String]]
Parameters
The following parameters are available in the dsc_xrdlicenseconfiguration
type.
dsc_connectionbroker
namevar
Data type: String
dsc_psdscrunascredential
Data type: Optional[Struct[{ user => String[1], password => Sensitive[String[1]] }]]
name
namevar
Data type: String
Description of the purpose for this resource declaration.
dsc_xrdremoteapp
The DSC xRDRemoteApp resource type. Automatically generated from version 2.0.0
Properties
The following properties are available in the dsc_xrdremoteapp
type.
dsc_commandlinesetting
Data type: Optional[Enum['Allow', 'DoNotAllow', 'Require']]
Specifies whether the RemoteApp program accepts command-line arguments from the client at connection time. The acceptable values for this parameter are: Allow, DoNotAllow, Require
dsc_displayname
Data type: String
Specifies a name to display to users for the RemoteApp program.
dsc_ensure
Data type: Optional[Enum['Present', 'Absent']]
Present if the RemoteApp should exist, Absent if it should be removed
dsc_filepath
Data type: String
Specifies a path for the executable file for the application. Do not include any environment variables.
dsc_filevirtualpath
Data type: Optional[String]
Specifies a path for the application executable file. This path resolves to the same location as the value of the FilePath parameter, but it can include environment variables.
dsc_foldername
Data type: Optional[String]
Specifies the name of the folder that the RemoteApp program appears in on the Remote Desktop Web Access (RD Web Access) webpage and in the Start menu for subscribed RemoteApp and Desktop Connections.
dsc_iconindex
Data type: Optional[Integer[0, 4294967295]]
Specifies the index within the icon file (specified by the IconPath parameter) where the RemoteApp program's icon can be found.
dsc_iconpath
Data type: Optional[String]
Specifies the path to a file containing the icon to display for the RemoteApp program identified by the Alias parameter.
dsc_requiredcommandline
Data type: Optional[String]
Specifies a string that contains command-line arguments that the client can use at connection time with the RemoteApp program.
dsc_showinwebaccess
Data type: Optional[Boolean]
Specifies whether to show the RemoteApp program in the RD Web Access server, and in RemoteApp and Desktop Connections that the user subscribes to.
dsc_usergroups
Data type: Optional[String]
Specifies a domain group that can view the RemoteApp in RD Web Access, and in RemoteApp and Desktop Connections. To allow all users to see a RemoteApp program, provide a value of Null.
Parameters
The following parameters are available in the dsc_xrdremoteapp
type.
dsc_alias
namevar
Data type: String
Specifies an alias for the RemoteApp program.
dsc_collectionname
namevar
Data type: String
Specifies the name of the personal virtual desktop collection or session collection. The cmdlet publishes the RemoteApp program to this collection.
dsc_psdscrunascredential
Data type: Optional[Struct[{ user => String[1], password => Sensitive[String[1]] }]]
name
namevar
Data type: String
Description of the purpose for this resource declaration.
dsc_xrdserver
The DSC xRDServer resource type. Automatically generated from version 2.0.0
Properties
The following properties are available in the dsc_xrdserver
type.
dsc_connectionbroker
Data type: Optional[String]
dsc_gatewayexternalfqdn
Data type: Optional[String]
Parameters
The following parameters are available in the dsc_xrdserver
type.
dsc_psdscrunascredential
Data type: Optional[Struct[{ user => String[1], password => Sensitive[String[1]] }]]
dsc_role
namevar
Data type: Enum['RDS-Connection-Broker', 'RDS-Virtualization', 'RDS-RD-Server', 'RDS-Web-Access', 'RDS-Gateway', 'RDS-Licensing']
dsc_server
namevar
Data type: String
name
namevar
Data type: String
Description of the purpose for this resource declaration.
dsc_xrdsessioncollection
The DSC xRDSessionCollection resource type. Automatically generated from version 2.0.0
Properties
The following properties are available in the dsc_xrdsessioncollection
type.
dsc_collectiondescription
Data type: Optional[String]
Specifies a description for the collection.
dsc_connectionbroker
Data type: Optional[String]
Specifies the Remote Desktop Connection Broker (RD Connection Broker) server for a Remote Desktop deployment.
Parameters
The following parameters are available in the dsc_xrdsessioncollection
type.
dsc_collectionname
namevar
Data type: String
Specifies a name for the session collection.
dsc_psdscrunascredential
Data type: Optional[Struct[{ user => String[1], password => Sensitive[String[1]] }]]
dsc_sessionhost
namevar
Data type: String
Specifies an RD Session Host server to include in the session collection.
name
namevar
Data type: String
Description of the purpose for this resource declaration.
dsc_xrdsessioncollectionconfiguration
The DSC xRDSessionCollectionConfiguration resource type. Automatically generated from version 2.0.0
Properties
The following properties are available in the dsc_xrdsessioncollectionconfiguration
type.
dsc_activesessionlimitmin
Data type: Optional[Integer[0, 4294967295]]
Specifies the maximum time, in minutes, an active session runs. After this period, the RD Session Host server ends the session.
dsc_authenticateusingnla
Data type: Optional[Boolean]
Indicates whether to use Network Level Authentication (NLA). If this value is $True, Remote Desktop uses NLA to authenticate a user before the user sees a logon screen.
dsc_automaticreconnectionenabled
Data type: Optional[Boolean]
Indicates whether the Remote Desktop client attempts to reconnect after a connection interruption.
dsc_brokenconnectionaction
Data type: Optional[String]
Specifies an action for an RD Session Host server to take after a connection interruption. The acceptable values for this parameter are: None, Disconnect, LogOff.
dsc_clientdeviceredirectionoptions
Data type: Optional[String]
Specifies a type of client device to be redirected to an RD Session Host server in this session collection. The acceptable values for this parameter are: None, AudioVideoPlayBack, AudioRecording, COMPort, PlugAndPlayDevice, SmartCard, Clipboard, LPTPort, Drive, TimeZone. You can use binary-or to combine two or more values of this enum to specify multiple client device types.
dsc_clientprinterasdefault
Data type: Optional[Boolean]
Indicates whether to use the client printer or server printer as the default printer. If this value is $True, use the client printer as default. If this value is $False, use the server as default.
dsc_clientprinterredirected
Data type: Optional[Boolean]
Indicates whether to use client printer redirection, which routes print jobs from the Remote Desktop session to a printer attached to the client computer.
dsc_collectiondescription
Data type: Optional[String]
Specifies a description of the session collection.
dsc_connectionbroker
Data type: Optional[String]
Specifies the Remote Desktop Connection Broker (RD Connection Broker) server for a Remote Desktop deployment.
dsc_customrdpproperty
Data type: Optional[String]
Specifies Remote Desktop Protocol (RDP) settings to include in the .rdp files for all Windows Server 2012 RemoteApp programs and remote desktops published in this collection.
dsc_disconnectedsessionlimitmin
Data type: Optional[Integer[0, 4294967295]]
Specifies a length of time, in minutes. After client disconnection from a session for this period, the RD Session Host ends the session.
dsc_diskpath
Data type: Optional[String]
Specifies the target to store the User Profile Disks
dsc_enableuserprofiledisk
Data type: Optional[Boolean]
Specifies if this collection uses UserProfileDisks
dsc_encryptionlevel
Data type: Optional[String]
Specifies the level of data encryption used for a Remote Desktop session. The acceptable values for this parameter are: Low, ClientCompatible, High, FipsCompliant. The default value is ClientCompatible.
dsc_excludefilepath
Data type: Optional[Array[String]]
Specifies a list of strings for files to exclude from the user profile disk
dsc_excludefolderpath
Data type: Optional[Array[String]]
Specifies a list of strings for folders to exclude from the user profile disk
dsc_idlesessionlimitmin
Data type: Optional[Integer[0, 4294967295]]
Specifies the length of time, in minutes, to wait before an RD Session Host logs off or disconnects an idle session. The BrokenConnectionAction parameter determines whether to log off or disconnect.
dsc_includefilepath
Data type: Optional[Array[String]]
Specifies a list of strings for files to include in the user profile disk
dsc_includefolderpath
Data type: Optional[Array[String]]
Specifies a list of strings for folders to include in the user profile disk
dsc_maxredirectedmonitors
Data type: Optional[Integer[0, 4294967295]]
Specifies the maximum number of client monitors that an RD Session Host server can redirect to a remote session. The highest value for this parameter is 16.
dsc_maxuserprofiledisksizegb
Data type: Optional[Integer[0, 4294967295]]
Specifies the maximum size in GB for a User Profile Disk
dsc_rdeasyprintdriverenabled
Data type: Optional[Boolean]
Specifies whether to enable the Remote Desktop Easy Print driver.
dsc_securitylayer
Data type: Optional[String]
Specifies which security protocol to use. The acceptable values for this parameter are: RDP, Negotiate, SSL. The default value is Negotiate.
dsc_temporaryfoldersdeletedonexit
Data type: Optional[Boolean]
Specifies whether to delete temporary folders from the RD Session Host server for a disconnected session.
dsc_usergroup
Data type: Optional[String]
Specifies a domain group authorized to connect to the RD Session Host servers in a session collection.
Parameters
The following parameters are available in the dsc_xrdsessioncollectionconfiguration
type.
dsc_collectionname
namevar
Data type: String
Specifies the name of a session collection.
dsc_psdscrunascredential
Data type: Optional[Struct[{ user => String[1], password => Sensitive[String[1]] }]]
name
namevar
Data type: String
Description of the purpose for this resource declaration.
dsc_xrdsessiondeployment
The DSC xRDSessionDeployment resource type. Automatically generated from version 2.0.0
Parameters
The following parameters are available in the dsc_xrdsessiondeployment
type.
dsc_connectionbroker
namevar
Data type: String
Specifies the FQDN of a server to host the RD Connection Broker role service.
dsc_psdscrunascredential
Data type: Optional[Struct[{ user => String[1], password => Sensitive[String[1]] }]]
dsc_sessionhost
namevar
Data type: String
Specifies the FQDN of a server to host the RD Session Host role service.
dsc_webaccessserver
namevar
Data type: String
Specifies the FQDN of a server to host the RD Web Access role service.
name
namevar
Data type: String
Description of the purpose for this resource declaration.
[2.0.0] - 2020-09-29
Changed
- Updated filename for CHANGELOG.MD to CHANGELOG.md
2.0.0
Added
- xRemoteDesktopSessionHost
- Added automatic release with a new CI pipeline.
- Added DSC HQRM Tests
- xRDCertificateConfiguration
- New resource to configure the used certificate on a deployment
Changed
- Changes to xRDSessionCollectionConfiguration
- Fixing comparison of some RD Session Collection Configuration properties and
supplied parameters by moving to the DscResource.Common
Test-DscParameterState
cmdlet. (issue #82).
- Fixing comparison of some RD Session Collection Configuration properties and
supplied parameters by moving to the DscResource.Common
- Changes to xRDSessionDeployment
- Fixing Get-TargetResource to target the connection broker, instead of assuming localhost
- Changes to xRDServer
- Changed resouce key from Server alone to Role + Server. This allows the resource to be used multiple times for different roles on the same server. (Issue #62)
- Changes to xRemoteApp
- Fix xRDRemoteApp Test-TargetResource to not test PowerShell common parameters
- Changes to tests
- Pin tests to use Pester v4 instead of latest (v5)
1.9.0.0
- Changes to xRDRemoteApp
- Fixing typo in parameter name when calling the function ValidateCustomModeParameters (issue #50).
- Changes to xRDSessionDeployment
- When RDMS service does not exist the Get-TargetResource will no longer throw an error (issue #47).
- Rename Tests/Unit folder to use upper case on first letter.
- Update appveyor.yml to use the default template.
- Added default template files .codecov.yml, .gitattributes, and .gitignore, and .vscode folder.
- xRDSessionCollectionConfiguration:
- Changed CollectionName variable validation max length to 256
- xRDSessionCollection
- Changed CollectionName variable validation max length to 256
- xRDRemoteApp
- Changed CollectionName variable validation max length to 256
1.8.0.0
- Changes to xRDSessionDeployment
- Fixed issue where an initial deployment failed due to a convert to lowercase (issue #39).
- Added unit tests to test Get, Test and Set results in this resource.
- Change to xRDRemoteApp
- Fixed issue where this resource ignored the CollectionName provided in the parameters (issue #41).
- Changed key values in schema.mof to only Alias and CollectionName, DisplayName and FilePath are not key values.
- Added Ensure property (Absent or Present) to enable removal of RemoteApps.
- Added unit tests to test Get, Test and Set results in this resource.
1.7.0.0
- Added additional resources, copied from the Azure RDS quickstart templates.
- xRDSessionCollection:
- Fixed call to Add-RDSessionHost in Set-TargetResource by properly removing CollectionDescription from PSBoundParameters (issue #28)
- Fixed bug on Get-TargetResource that did return any collection instead of the one collection the user asked for (issue #27)
- Added unit tests to test Get, Test and Set results in this resource
1.6.0.0
- xRDSessionCollectionConfiguration: Add support to configure UserProfileDisks on Windows Server 2016
1.5.0.0
- Fix issue where DSC configuration gets into a reboot loop because sessionhost does not match (casing) and RDMS service is not started in time
1.4.0.0
- Updated CollectionName parameter to validate length between 1 and 15 characters, and added tests to verify.
1.3.0.0
- Converted appveyor.yml to install Pester from PSGallery instead of from Chocolatey.
1.2.0.0
- Fixed an issue with version checks where OS version greater than 9 would fail (Windows 10/Server 2016)
1.1.0.0
- Fixed encoding
1.0.1
1.0.0.0
- Initial release with the following resources
- xRDSessionDeployment
- xRDSessionCollection
- xRDSessionCollectionConfiguration
- xRDRemoteApp
Dependencies
- puppetlabs/pwshlib (>= 0.7.0 < 2.0.0)