Learning PowerShell DSC - Second Edition

LCM gotchas

The LCM service runs under the system account and has high privilege access to the system. However, the system account is not a user account, which causes trouble when you assume DSC can perform an action just like you did a moment ago. Common gotchas include accessing network file shares or accessing parts of the system that require user credentials. In PowerShell V4, these will typically fail with a generic Access Denied, which will most likely lead you down the wrong path when troubleshooting. Unfortunately, the only way to know this beforehand is to hope that the DSC resource or application you are executing documented the permissions they needed to run in PowerShell V4. Some DSC resources have parameters that accept a PSCredential ...