在没有手动干预的情况下，Azure自动化DSC不会强制节点回到合规性 [英] Azure Automation DSC not forcing Node back into compliance without manual intervention

问题描述

有人可以帮助我解决以下问题吗?

Can someone please help me with the following questions,

我已设置要由Azure自动化DSC管理的节点(Azure VM)

I have set up a Node (Azure VM) to by managed by Azure Automation DSC 

我设置并应用了简单的配置来停止服务(Adobe更新服务)，并将启动模式设置为手动(默认设置为自动启动和自动启动).

I setup and applied a simple configuration to stop a service (Adobe update service) and set the start-up mode to manual (default settings are started and automatic).

当我第一次将配置应用于节点时，它可以工作，例如停止服务并将配置设置为手动

When I first applied the configuration to the Node it worked e.g. stopped the service and set the configuration to manual

该节点上的LCM(本地配置管理器)设置为ApplyAndMontior

the LCM (local configuration manager) on the node is set to ApplyAndMontior

但是，尽管LCM设置为ApplyAndMonitor，但节点仍未达到合规性(可以在Azure控制台中通过test-DscConfigruation看到)，它不会被拉回合规性.

However then the Node goes out of compliance (which can be seen in the Azure console and via test-DscConfigruation) it does not get pulled back into compliance despite the fact the LCM is set to ApplyAndMonitor

如果我运行以下命令

Start-DscConfiguration-等待-Force -ComputerName $ ENV:computername -UseExisting

Start-DscConfiguration -Wait -Force -ComputerName $ENV:computername -UseExisting

节点立即恢复合规性，这反映在Azure控制台中

The Node immediately comes back into compliance and this is reflected in the Azure console 

我的大问题是，我似乎无法依靠Azure自动化DSC强制节点自行恢复合规性(这是重点)

My big problem is I cannot appear to rely on Azure Automation DSC to force the node back into compliance on its own (which is the whole point) 

如何解决此问题?有人有什么建议吗?

How can I troubleshoot this issue? does anyone have any suggestions ?

谢谢

CXMelga

推荐答案

When you say, "I setup and applied a simple configuration to stop a service (Adobe update service) and set the start-up mode to manual (default settings are started and automatic)".

可以与屏幕截图一起分享更多详细信息，以了解您的问题并提供相应的解决方案.

如果您不允许发布图片，则可以在此处验证您的帐户:

在将所需状态应用于节点之前，DSC配置会定义该状态必须编译为一个或多个节点配置(MOF文档)并放在 自动化DSC拉取服务器.有关在Azure自动化状态配置中编译配置的更详细说明，请参见在Azure中编译配置 自动化状态配置.有关编译配置的更多信息，请参见 DSC配置.

Before you can apply a desired state to a node, a DSC configuration defining that state must be compiled into one or more node configurations (MOF document) and placed on the Automation DSC Pull Server. For a more detailed description of compiling configurations in Azure Automation State Configuration, see Compiling configurations in Azure Automation State Configuration. For more information about compiling configurations, see DSC Configurations.

这篇关于在没有手动干预的情况下，Azure自动化DSC不会强制节点回到合规性的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！