22

✏️ Editing: win_dsc.py

"""
Module for working with Windows PowerShell DSC (Desired State Configuration)

This module is Alpha

This module applies DSC Configurations in the form of PowerShell scripts or
MOF (Managed Object Format) schema files.

Use the ``psget`` module to manage PowerShell resources.

The idea is to leverage Salt to push DSC configuration scripts or MOF files to
the Minion.

:depends:
    - PowerShell 5.0
"""

import logging
import os

import salt.utils.json
import salt.utils.platform
import salt.utils.versions
from salt.exceptions import CommandExecutionError, SaltInvocationError

# Set up logging
log = logging.getLogger(__name__)

# Define the module's virtual name
__virtualname__ = "dsc"

def __virtual__():
    """
    Set the system module of the kernel is Windows
    """
    # Verify Windows
    if not salt.utils.platform.is_windows():
        log.debug("DSC: Only available on Windows systems")
        return False, "DSC: Only available on Windows systems"

# Verify PowerShell
    powershell_info = __salt__["cmd.shell_info"]("powershell")
    if not powershell_info["installed"]:
        log.debug("DSC: Requires PowerShell")
        return False, "DSC: Requires PowerShell"

# Verify PowerShell 5.0 or greater
    if salt.utils.versions.compare(powershell_info["version"], "<", "5.0"):
        log.debug("DSC: Requires PowerShell 5 or later")
        return False, "DSC: Requires PowerShell 5 or later"

return __virtualname__

def _pshell(cmd, cwd=None, json_depth=2, ignore_retcode=False):
    """
    Execute the desired PowerShell command and ensure that it returns data
    in json format and load that into python. Either return a dict or raise a
    CommandExecutionError.
    """
    if "ConvertTo-Json" not in cmd.lower():
        cmd = f"{cmd} | ConvertTo-Json -Depth {json_depth}"
    log.debug("DSC: %s", cmd)
    results = __salt__["cmd.run_all"](
        cmd,
        shell="powershell",
        cwd=cwd,
        python_shell=True,
        ignore_retcode=ignore_retcode,
    )

if "pid" in results:
        del results["pid"]

if "retcode" not in results or results["retcode"] != 0:
        # run_all logs an error to log.error, fail hard back to the user
        raise CommandExecutionError(f"Issue executing PowerShell {cmd}", info=results)

# Sometimes Powershell returns an empty string, which isn't valid JSON
    if results["stdout"] == "":
        results["stdout"] = "{}"

try:
        ret = salt.utils.json.loads(results["stdout"], strict=False)
    except ValueError:
        raise CommandExecutionError("No JSON results from PowerShell", info=results)

log.info('DSC: Returning "%s"', ret)
    return ret

def run_config(
    path,
    source=None,
    config_name=None,
    config_data=None,
    config_data_source=None,
    script_parameters=None,
    salt_env="base",
):
    r"""
    Compile a DSC Configuration in the form of a PowerShell script (.ps1) and
    apply it. The PowerShell script can be cached from the master using the
    ``source`` option. If there is more than one config within the PowerShell
    script, the desired configuration can be applied by passing the name in the
    ``config`` option.

This command would be the equivalent of running ``dsc.compile_config``
    followed by ``dsc.apply_config``.

Args:

path (str):
            The local path to the PowerShell script that contains the DSC
            Configuration. Required.

source (:obj:`str`, optional):
            The path to the script on ``file_roots`` to cache at the location
            specified by ``path``. The source file will be cached locally and
            then executed. If source is not passed, the config script located at
            ``path`` will be compiled.
            Default is ``None``.

config_name (:obj:`str`, optional):
            The name of the Configuration within the script to apply. If the
            script contains multiple configurations within the file a
            ``config_name`` must be specified. If the ``config_name`` is not
            specified, the name of the file will be used as the ``config_name``
            to run.
            Default is ``None``.

config_data (:obj:`str`, optional):
            Configuration data in the form of a hash table that will be passed
            to the ``ConfigurationData`` parameter when the ``config_name`` is
            compiled. This can be the path to a ``.psd1`` file containing the
            proper hash table or the PowerShell code to create the hash table.
            Default is ``None``.

.. versionadded:: 2017.7.0

config_data_source (:obj:`str`, optional):
            The path to the ``.psd1`` file on ``file_roots`` to cache at the
            location specified by ``config_data``. If this is specified,
            ``config_data`` must be a local path instead of a hash table.
            Default is ``None``.

.. versionadded:: 2017.7.0

script_parameters (:obj:`str`, optional):
            Any additional parameters expected by the configuration script.
            These must be defined in the script itself. Note that these are
            passed to the script (the outermost scope), and not to the dsc
            configuration inside the script (the inner scope).
            Default is ``None``.

.. versionadded:: 2017.7.0

salt_env (:obj:`str`, optional):
            The salt environment to use when copying the source.
            Default is ``base``.

Returns:
        bool: ``True`` if successfully compiled and applied, otherwise ``False``

CLI Example:

.. code-block:: bash

# To compile a config from a script that already exists on the system
        salt '*' dsc.run_config 'C:\\DSC\\WebsiteConfig.ps1'

.. code-block:: bash

# To cache a config script to the system from the master and compile it
        salt '*' dsc.run_config 'C:\\DSC\\WebsiteConfig.ps1' salt://dsc/configs/WebsiteConfig.ps1

.. code-block:: bash

# To cache a config script to the system from the master and compile it, passing in `script_parameters`:
        salt '*' dsc.run_config path='C:\\DSC\\WebsiteConfig.ps1' source=salt://dsc/configs/WebsiteConfig.ps1 script_parameters='-hostname "my-computer" -ip "192.168.1.10" -DnsArray "192.168.1.3","192.168.1.4","1.1.1.1"'
    """
    ret = compile_config(
        path=path,
        source=source,
        config_name=config_name,
        config_data=config_data,
        config_data_source=config_data_source,
        script_parameters=script_parameters,
        salt_env=salt_env,
    )

if ret.get("Exists"):
        config_path = os.path.dirname(ret["FullName"])
        return apply_config(config_path)
    else:
        return False

def compile_config(
    path,
    source=None,
    config_name=None,
    config_data=None,
    config_data_source=None,
    script_parameters=None,
    salt_env="base",
):
    r"""
    Compile a config from a PowerShell script (``.ps1``)

Args:

path (str):
            Path (local) to the script that will create the ``.mof``
            configuration file. If no source is passed, the file must exist
            locally.

source (:obj:`str`, optional):
            Path to the script on ``file_roots`` to cache at the location
            specified by ``path``. The source file will be cached locally and
            then executed. If source is not passed, the config script located at
            ``path`` will be compiled.
            Default is ``None``.

.. versionadded:: 2017.7.0

script_parameters (:obj:`str`, optional):
            Any additional parameters expected by the configuration script.
            These must be defined in the script itself.
            Default is ``None``.

.. versionadded:: 2017.7.0

salt_env (Optional[str]):
        salt_env (Optional[str]):
            The salt environment to use when copying the source.
            Default is ``base``.

Returns:
        dict: A dictionary containing the results of the compilation

CLI Example:

.. code-block:: bash

# To compile a config from a script that already exists on the system
        salt '*' dsc.compile_config 'C:\\DSC\\WebsiteConfig.ps1'

.. code-block:: bash

# To cache a config script to the system from the master and compile it:
        salt '*' dsc.compile_config 'C:\\DSC\\WebsiteConfig.ps1' salt://dsc/configs/WebsiteConfig.ps1
    """
    if source:
        log.info("DSC: Caching %s", source)
        cached_files = __salt__["cp.get_file"](
            path=source, dest=path, saltenv=salt_env, makedirs=True
        )
        if not cached_files:
            error = f"Failed to cache {source}"
            log.error("DSC: %s", error)
            raise CommandExecutionError(error)

if config_data_source:
        log.info("DSC: Caching %s", config_data_source)
        cached_files = __salt__["cp.get_file"](
            path=config_data_source, dest=config_data, saltenv=salt_env, makedirs=True
        )
        if not cached_files:
            error = f"Failed to cache {config_data_source}"
            log.error("DSC: %s", error)
            raise CommandExecutionError(error)

# Make sure the path exists
    if not os.path.exists(path):
        error = f"{path} not found"
        log.error("DSC: %s", error)
        raise CommandExecutionError(error)

if config_name is None:
        # If the name of the config isn't passed, make it the name of the .ps1
        config_name = os.path.splitext(os.path.basename(path))[0]

cwd = os.path.dirname(path)

# Run the script and see if the compile command is in the script
    cmd = [path]
    # Add any script parameters
    if script_parameters:
        cmd.append(script_parameters)
    # Select properties of the generated .mof file to return, avoiding the .meta.mof
    cmd.append(
        r"| Where-Object FullName -match '(?<!\.meta)\.mof$' "
        "| Select-Object -Property FullName, Extension, Exists, "
        "@{Name='LastWriteTime';Expression={Get-Date ($_.LastWriteTime) -Format g}}"
    )

cmd = " ".join(cmd)

ret = _pshell(cmd, cwd)

if ret:
        # Script compiled, return results
        if ret.get("Exists"):
            log.info("DSC: Compile Config: %s", ret)
            return ret

# If you get to this point, the script did not contain a compile command
    # dot source the script to compile the state and generate the mof file
    cmd = [".", path]
    if script_parameters:
        cmd.append(script_parameters)
    cmd.extend([";", config_name])
    if config_data:
        cmd.extend(["-ConfigurationData", config_data])
    cmd.append(
        r"| Where-Object FullName -match '(?<!\.meta)\.mof$' "
        "| Select-Object -Property FullName, Extension, Exists, "
        "@{Name='LastWriteTime';Expression={Get-Date ($_.LastWriteTime) "
        "-Format g}}"
    )

cmd = " ".join(cmd)

ret = _pshell(cmd, cwd)

if ret:
        # Script compiled, return results
        if ret.get("Exists"):
            log.info("DSC: Compile Config: %s", ret)
            return ret

error = f"Failed to compile config: {path}"
    error += f"\nReturned: {ret}"
    log.error("DSC: %s", error)
    raise CommandExecutionError(error)

def apply_config(path, source=None, salt_env="base"):
    r"""
    Run an compiled DSC configuration (a folder containing a .mof file). The
    folder can be cached from the salt master using the ``source`` option.

Args:

path (str):
            Local path to the directory that contains the .mof configuration
            file to apply.

source (:obj:`str`, optional):
            Path to the directory that contains the .mof file on the
            ``file_roots``. The source directory will be copied to the path
            directory and then executed. If the path and source directories
            differ, the source directory will be applied. If source is not
            passed, the config located at ``path`` will be applied.
            Default is ``None``.

salt_env (:obj:`str`, optional):
            The salt environment to use when copying your source.
            Default is ``base``.

Returns:
        bool: ``True`` if successful, otherwise ``False``

CLI Example:

.. code-block:: bash

# To apply a config that already exists on the system
        salt '*' dsc.apply_config 'C:\\DSC\\WebSiteConfiguration'

.. code-block:: bash

# To cache a configuration from the master and apply it
        salt '*' dsc.apply_config 'C:\\DSC\\WebSiteConfiguration' salt://dsc/configs/WebSiteConfiguration

"""
    # If you're getting an error along the lines of "The client cannot connect
    # to the destination specified in the request.", try the following:
    # Enable-PSRemoting -SkipNetworkProfileCheck
    config = path
    if source:
        # Make sure the folder names match
        path_name = os.path.basename(os.path.normpath(path))
        source_name = os.path.basename(os.path.normpath(source))
        if path_name.lower() != source_name.lower():
            # Append the Source name to the Path
            path = f"{path}\\{source_name}"
            log.debug("DSC: %s appended to the path.", source_name)

# Destination path minus the basename
        dest_path = os.path.dirname(os.path.normpath(path))
        log.info("DSC: Caching %s", source)
        cached_files = __salt__["cp.get_dir"](source, dest_path, salt_env)
        if not cached_files:
            error = f"Failed to copy {source}"
            log.error("DSC: %s", error)
            raise CommandExecutionError(error)
        else:
            config = os.path.dirname(cached_files[0])

# Make sure the path exists
    if not os.path.exists(config):
        error = f"{config} not found"
        log.error("DSC: %s", error)
        raise CommandExecutionError(error)

# Run the DSC Configuration
    # Putting quotes around the parameter protects against command injection
    cmd = f"Start-DscConfiguration -Path '{config}' -Wait -Force"
    _pshell(cmd)

cmd = "$status = Get-DscConfigurationStatus; $status.Status"
    ret = _pshell(cmd)
    log.info("DSC: Apply Config: %s", ret)

return ret == "Success" or ret == {}

def get_config():
    """
    Get the current DSC Configuration

Returns:
        dict: A dictionary representing the DSC Configuration on the machine

Raises:
        CommandExecutionError: On failure

CLI Example:

.. code-block:: bash

salt '*' dsc.get_config
    """
    cmd = "Get-DscConfiguration | Select-Object * -ExcludeProperty Cim*"

try:
        raw_config = _pshell(cmd, ignore_retcode=True)
    except CommandExecutionError as exc:
        if "Current configuration does not exist" in exc.info["stderr"]:
            raise CommandExecutionError("Not Configured")
        raise

config = dict()
    if not raw_config:
        raise CommandExecutionError("Not Configured")
    else:
        # Does this Configuration contain a single resource
        if "ConfigurationName" in raw_config:
            # Load the single resource
            config_name = raw_config.pop("ConfigurationName")
            resource_id = raw_config.pop("ResourceId")
            config.setdefault(config_name, {resource_id: raw_config})
        else:
            # Load multiple resources by Id
            for item in raw_config:
                if "ConfigurationName" in item:
                    config_name = item.pop("ConfigurationName")
                    resource_id = item.pop("ResourceId")
                    config.setdefault(config_name, {})
                    config[config_name].setdefault(resource_id, item)

if not config:
        raise CommandExecutionError("Unable to parse config")

return config

def remove_config(reset=False):
    """
    Remove the current DSC Configuration. Removes current, pending, and previous
    dsc configurations.

.. versionadded:: 2017.7.5

Args:

reset (:obj:`bool`, optional):
            Attempts to reset the DSC configuration by removing the following
            from ``C:\\Windows\\System32\\Configuration``:

- File: DSCStatusHistory.mof
            - File: DSCEngineCache.mof
            - Dir: ConfigurationStatus

Default is ``False``.

.. warning::
                ``remove_config`` may fail to reset the DSC environment if any
                of the files in the ``ConfigurationStatus`` directory are in
                use. If you wait a few minutes and run again, it may complete
                successfully.

Returns:
        bool: ``True`` if successful

Raises:
        CommandExecutionError: On failure

CLI Example:

.. code-block:: bash

salt '*' dsc.remove_config True
    """
    # Stopping a running config (not likely to occur)
    cmd = "Stop-DscConfiguration"
    log.info("DSC: Stopping Running Configuration")
    try:
        _pshell(cmd)
    except CommandExecutionError as exc:
        if exc.info["retcode"] != 0:
            raise CommandExecutionError(
                "Failed to Stop DSC Configuration", info=exc.info
            )
        log.info("DSC: %s", exc.info["stdout"])

# Remove configuration files
    cmd = "Remove-DscConfigurationDocument -Stage Current, Pending, Previous -Force"
    log.info("DSC: Removing Configuration")
    try:
        _pshell(cmd)
    except CommandExecutionError as exc:
        if exc.info["retcode"] != 0:
            raise CommandExecutionError(
                "Failed to remove DSC Configuration", info=exc.info
            )
        log.info("DSC: %s", exc.info["stdout"])

if not reset:
        return True

def _remove_fs_obj(path):
        if os.path.exists(path):
            log.info("DSC: Removing %s", path)
            if not __salt__["file.remove"](path):
                error = f"Failed to remove {path}"
                log.error("DSC: %s", error)
                raise CommandExecutionError(error)

dsc_config_dir = "{}\\System32\\Configuration".format(
        os.getenv("SystemRoot", "C:\\Windows")
    )

# Remove History
    _remove_fs_obj(f"{dsc_config_dir}\\DSCStatusHistory.mof")

# Remove Engine Cache
    _remove_fs_obj(f"{dsc_config_dir}\\DSCEngineCache.mof")

# Remove Status Directory
    _remove_fs_obj(f"{dsc_config_dir}\\ConfigurationStatus")

return True

def restore_config():
    """
    Reapplies the previous configuration.

.. versionadded:: 2017.7.5

.. note::
        The current configuration will become the previous configuration. If
        run a second time back-to-back it is like toggling between two configs.

Returns:
        bool: ``True`` if successfully restored, otherwise ``False``

Raises:
        CommandExecutionError: On failure

CLI Example:

.. code-block:: bash

salt '*' dsc.restore_config
    """
    cmd = "Restore-DscConfiguration"
    try:
        _pshell(cmd, ignore_retcode=True)
    except CommandExecutionError as exc:
        if "A previous configuration does not exist" in exc.info["stderr"]:
            raise CommandExecutionError("Previous Configuration Not Found")
        raise
    return True

def test_config():
    """
    Tests the current applied DSC Configuration

Returns:
        bool: ``True`` if successfully applied, otherwise ``False``

CLI Example:

.. code-block:: bash

salt '*' dsc.test_config
    """
    cmd = "Test-DscConfiguration"
    try:
        result = _pshell(cmd, ignore_retcode=True)
    except CommandExecutionError as exc:
        if "Current configuration does not exist" in exc.info["stderr"]:
            raise CommandExecutionError("Not Configured")
        raise
    if not result:
        raise CommandExecutionError("Not Configured")
    return True

def get_config_status():
    """
    Get the status of the current DSC Configuration

Returns:
        dict: A dictionary representing the status of the current DSC
            Configuration on the machine

CLI Example:

.. code-block:: bash

salt '*' dsc.get_config_status
    """
    cmd = (
        "Get-DscConfigurationStatus | "
        "Select-Object -Property HostName, Status, MetaData, "
        "@{Name='StartDate';Expression={Get-Date ($_.StartDate) -Format g}}, "
        "Type, Mode, RebootRequested, NumberofResources"
    )
    try:
        result = _pshell(cmd, ignore_retcode=True)
    except CommandExecutionError as exc:
        if "No status information available" in exc.info["stderr"]:
            raise CommandExecutionError("Not Configured")
        raise
    if not result:
        raise CommandExecutionError("Not Configured")
    return result

def get_lcm_config():
    """
    Get the current Local Configuration Manager settings

Returns:
        dict: A dictionary representing the Local Configuration Manager settings
            on the machine

CLI Example:

.. code-block:: bash

salt '*' dsc.get_lcm_config
    """
    cmd = (
        "Get-DscLocalConfigurationManager | "
        "Select-Object -Property ConfigurationModeFrequencyMins, LCMState, "
        "RebootNodeIfNeeded, ConfigurationMode, ActionAfterReboot, "
        "RefreshMode, CertificateID, ConfigurationID, RefreshFrequencyMins, "
        "AllowModuleOverwrite, DebugMode, StatusRetentionTimeInDays "
    )
    return _pshell(cmd)

def set_lcm_config(
    config_mode=None,
    config_mode_freq=None,
    refresh_freq=None,
    reboot_if_needed=None,
    action_after_reboot=None,
    refresh_mode=None,
    certificate_id=None,
    configuration_id=None,
    allow_module_overwrite=None,
    debug_mode=None,
    status_retention_days=None,
):
    """
    For detailed descriptions of the parameters see:
    https://msdn.microsoft.com/en-us/PowerShell/DSC/metaConfig

Args:

config_mode (:obj:`str`, optional):
            How the LCM applies the configuration. Valid values are:

- ApplyOnly
            - ApplyAndMonitor
            - ApplyAndAutoCorrect

Default is ``None``.

config_mode_freq (:obj:`int`, optional):
            How often, in minutes, the current configuration is checked and applied.
            Ignored if config_mode is set to ``ApplyOnly``.
            Default is 15.

refresh_mode (:obj:`str`, optional):
            How the LCM gets configurations. Valid values are:

- Disabled
            - Push
            - Pull

Default is ``None``.

refresh_freq (:obj:`int`, optional):
            How often, in minutes, the LCM checks for updated configurations (pull
            mode only).
            Default is 30.

reboot_if_needed (:obj:`bool`, optional):
            Reboot the machine if needed after a configuration is applied.
            Default is ``False``.

action_after_reboot (:obj:`str`, optional):
            Action to take after reboot. Valid values are:

- ContinueConfiguration
            - StopConfiguration

Default is ``None``.

certificate_id (:obj:`guid`, optional):
            A GUID that specifies a certificate used to access the configuration
            (pull mode).
            Default is ``None``.

configuration_id (:obj:`guid`, optional):
            A GUID that identifies the config file to get from a pull server (pull
            mode).
            Default is ``None``.

allow_module_overwrite (:obj:`bool`, optional):
            New configs are allowed to overwrite old ones on the target node.
            Default is ``False``.

debug_mode (:obj:`str`, optional):
            Sets the debug level. Valid values are:

- None
            - ForceModuleImport
            - All

Default is ``None``.

status_retention_days (:obj:`int`, optional):
            Number of days to keep status of the current config.
            Default is 10

.. note::
            Either ``config_mode_freq`` or ``refresh_freq`` needs to be a
            multiple of the other. See documentation on MSDN for more details.

Returns:
        bool: ``True`` if successful, otherwise ``False``

CLI Example:

.. code-block:: bash

salt '*' dsc.set_lcm_config ApplyOnly
    """
    temp_dir = os.getenv("TEMP", "{}\\temp".format(os.getenv("WINDIR")))
    cmd = "Configuration SaltConfig {"
    cmd += "    Node localhost {"
    cmd += "        LocalConfigurationManager {"
    if config_mode:
        if config_mode not in ("ApplyOnly", "ApplyAndMonitor", "ApplyAndAutoCorrect"):
            error = (
                "config_mode must be one of ApplyOnly, ApplyAndMonitor, "
                "or ApplyAndAutoCorrect. Passed {}".format(config_mode)
            )
            raise SaltInvocationError(error)
        cmd += f"            ConfigurationMode = '{config_mode}';"
    if config_mode_freq:
        if not isinstance(config_mode_freq, int):
            error = "config_mode_freq must be an integer. Passed {}".format(
                config_mode_freq
            )
            raise SaltInvocationError(error)
        cmd += "            ConfigurationModeFrequencyMins = {};".format(
            config_mode_freq
        )
    if refresh_mode:
        if refresh_mode not in ("Disabled", "Push", "Pull"):
            raise SaltInvocationError(
                "refresh_mode must be one of Disabled, Push, or Pull"
            )
        cmd += f"            RefreshMode = '{refresh_mode}';"
    if refresh_freq:
        if not isinstance(refresh_freq, int):
            raise SaltInvocationError("refresh_freq must be an integer")
        cmd += f"            RefreshFrequencyMins = {refresh_freq};"
    if reboot_if_needed is not None:
        if not isinstance(reboot_if_needed, bool):
            raise SaltInvocationError("reboot_if_needed must be a boolean value")
        if reboot_if_needed:
            reboot_if_needed = "$true"
        else:
            reboot_if_needed = "$false"
        cmd += f"            RebootNodeIfNeeded = {reboot_if_needed};"
    if action_after_reboot:
        if action_after_reboot not in ("ContinueConfiguration", "StopConfiguration"):
            raise SaltInvocationError(
                "action_after_reboot must be one of "
                "ContinueConfiguration or StopConfiguration"
            )
        cmd += f'            ActionAfterReboot = "{action_after_reboot}"'
    if certificate_id is not None:
        if certificate_id == "":
            certificate_id = None
        cmd += f'            CertificateID = "{certificate_id}";'
    if configuration_id is not None:
        if configuration_id == "":
            configuration_id = None
        cmd += f'            ConfigurationID = "{configuration_id}";'
    if allow_module_overwrite is not None:
        if not isinstance(allow_module_overwrite, bool):
            raise SaltInvocationError("allow_module_overwrite must be a boolean value")
        if allow_module_overwrite:
            allow_module_overwrite = "$true"
        else:
            allow_module_overwrite = "$false"
        cmd += f"            AllowModuleOverwrite = {allow_module_overwrite};"
    if debug_mode is None:
        debug_mode = "None"
    if debug_mode not in ("None", "ForceModuleImport", "All"):
        raise SaltInvocationError(
            "debug_mode must be one of None, ForceModuleImport, "
            "ResourceScriptBreakAll, or All"
        )
    cmd += f'            DebugMode = "{debug_mode}";'
    if status_retention_days:
        if not isinstance(status_retention_days, int):
            raise SaltInvocationError("status_retention_days must be an integer")
        cmd += "            StatusRetentionTimeInDays = {};".format(
            status_retention_days
        )
    cmd += "        }}};"
    cmd += rf'SaltConfig -OutputPath "{temp_dir}\SaltConfig"'

# Execute Config to create the .mof
    _pshell(cmd)

# Apply the config
    cmd = r'Set-DscLocalConfigurationManager -Path "{}\SaltConfig"' r"".format(temp_dir)
    ret = __salt__["cmd.run_all"](cmd, shell="powershell", python_shell=True)
    __salt__["file.remove"](rf"{temp_dir}\SaltConfig")
    if not ret["retcode"]:
        log.info("DSC: LCM config applied successfully")
        return True
    else:
        log.error("DSC: Failed to apply LCM config. Error %s", ret)
        return False

MR SKB