Website: unable to change advanced Authentication Settings

[maxgaulhofer]

Problem description

It is not possible to change the settings in the screenshot with DSC

Verbose logs

NA

DSC configuration

Create the new Website
        WebSite Website1 {
            Ensure             = 'Present'
            Name               = "$WebSiteName"
            # SiteId          = 100
            State              = 'Started'
            ServerAutoStart    = $true
            PhysicalPath       = "$WebsitesFolder\$WebSiteName"
            DependsOn          = '[File]WebContent1', '[WebAppPool]AppPool','[WindowsFeatureSet]AspNet45'
            ApplicationPool    = $WebSiteName
            BindingInfo        = @(
                DSC_WebBindingInformation
                {
                    Protocol             = 'HTTPS'
                    Port                 = 443
                    CertificateSubject   = $CertificateSubject
                    CertificateStoreName = 'MY'
                    SslFlags             = '1'
                    hostname             = $CertificateSubject
                }

            )
            AuthenticationInfo = `
                DSC_WebAuthenticationInformation
            {
                Anonymous = $true
                Basic     = $false
                Digest    = $false
                Windows   = $true
            }
        }

Suggested solution

Set the properties in object DSC_WebAuthenticationInformation
in Windows like:

  DSC_WebAuthenticationInformation
            {
                Anonymous = $true
                Basic     = $false
                Digest    = $false
                Windows   = DSC_WebAuthenticationInformationAdvanced
                  {
                  ExtendedProtection = 'On' #on, off, Accept
                  KernelModeProtection = #true #boolean
                  }
            }

Operating system the target node is running

WIndows Server 2022

PowerShell version and build the target node is running

ame                           Value
----                           -----
PSVersion                      5.1.20348.1366
PSEdition                      Desktop
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}
BuildVersion                   10.0.20348.1366
CLRVersion                     4.0.30319.42000
WSManStackVersion              3.0
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1

WebAdministrationDsc version

ModuleType Version    Name                                ExportedCommands
---------- -------    ----                                ----------------
Manifest   4.1.0      WebAdministrationDSC

[johlju]

This could also be a separate resource WebSiteAuthenticationAdvancedSettings (naming is just a suggestion) if the settings are not required to be set on the same time as creation of the website.