Azure / Azure/ArcEnabledServersGroupPolicy

Deploygpo.ps1 hangs on $encryptedSecret = [DpapiNgUtil]::ProtectBase64($descriptor, $ServicePrincipalSecret)

Open
#13 8 comments 0 reactions 0 assignees View on GitHub
Dominant language
PowerShell
Stars
17
Forks
25
PR merge metrics
No merged PRs in 30d

Description

Im trying to deploy the gpo, but it doesnt get past encrypting the secret, it hangs and never finishes.
I ran the script step by step and the hang happens on line 231, importing the module doesnt give any errors.
Name Value
---- -----
PSVersion 5.1.20348.1366
PSEdition Desktop
PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...}
BuildVersion 10.0.20348.1366
CLRVersion 4.0.30319.42000
WSManStackVersion 3.0
PSRemotingProtocolVersion 2.3
SerializationVersion 1.1.0.1

log:
Remote path \\Domain-LAN.local\appdata\beheer\AzureArc found!
Creating remote folder's structure...
Assigning appropriate permissions...

Replacing the data the scheduled task...
Report Server FQDN Domain-LAN.local was successfully set in the scheduled task
Arc Remote share appdata\beheer\AzureArc was successfully set in the scheduled task...

Adding ReportServerFQDN Domain-LAN.local to the scheduled task ...
ReportServerFQDN was successfully added to the scheduled task

Creating the new GPO...

DisplayName : [MSFT] Azure Arc Servers Onboarding20230320032055
DomainName : Domain-LAN.local
Owner : DOMAIN-LAN\Domain Admins
Id : ae8c42ea-3180-48e3-895b-aef71df2709c
GpoStatus : AllSettingsEnabled
Description :
CreationTime : 20-3-2023 15:20:56
ModificationTime : 20-3-2023 15:20:56
UserVersion : AD Version: 0, SysVol Version: 0
ComputerVersion : AD Version: 0, SysVol Version: 0
WmiFilter :

GPO '[MSFT] Azure Arc Servers Onboarding20230320032055' was successfully created in Domain Domain-LAN.local

Contributor guide

No contributing guide indexed for this repository

Research direction

Start in Deploygpo.ps1 at line 231, where [DpapiNgUtil]::ProtectBase64($descriptor, $ServicePrincipalSecret) is called, and review the preceding deployment steps and module import. Reproduce the deployment far enough to confirm the hang and determine what allows execution to continue past secret encryption; done means the GPO deployment completes beyond this step.

Written by the indexing model from the issue text.

Assessment

Tech stack
powershell
Domain
devops, infrastructure
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.