dsclibrary/MEMBER_ADFS.DSC.ps1
<###################################################################################################
DSC Template Configuration File For use by LabBuilder .Title MEMBER_ADFS .Desription Builds a Server that is joined to a domain and then made into an ADFS Server using WID. .Parameters: DomainName = "LABBUILDER.COM" DomainAdminPassword = "P@ssword!1" DCName = 'SA-DC1' PSDscAllowDomainUser = $true ###################################################################################################> Configuration MEMBER_ADFS { Import-DscResource -ModuleName 'PSDesiredStateConfiguration' Import-DscResource -ModuleName ComputerManagementDsc Node $AllNodes.NodeName { # Assemble the Local Admin Credentials if ($Node.LocalAdminPassword) { [PSCredential]$LocalAdminCredential = New-Object System.Management.Automation.PSCredential ("Administrator", (ConvertTo-SecureString $Node.LocalAdminPassword -AsPlainText -Force)) } if ($Node.DomainAdminPassword) { [PSCredential]$DomainAdminCredential = New-Object System.Management.Automation.PSCredential ("$($Node.DomainName)\Administrator", (ConvertTo-SecureString $Node.DomainAdminPassword -AsPlainText -Force)) } WindowsFeature WIDInstall { Ensure = "Present" Name = "Windows-Internal-Database" } WindowsFeature ADFSInstall { Ensure = "Present" Name = "ADFS-Federation" DependsOn = "[WindowsFeature]WIDInstall" } WaitForAll DC { ResourceName = '[xADDomain]PrimaryDC' NodeName = $Node.DCname RetryIntervalSec = 15 RetryCount = 60 } Computer JoinDomain { Name = $Node.NodeName DomainName = $Node.DomainName Credential = $DomainAdminCredential DependsOn = "[WaitForAll]DC" } # Enable ADFS FireWall rules Firewall ADFSFirewall1 { Name = "ADFSSrv-HTTP-In-TCP" Ensure = 'Present' Enabled = 'True' } Firewall ADFSFirewall2 { Name = "ADFSSrv-HTTPS-In-TCP" Ensure = 'Present' Enabled = 'True' } Firewall ADFSFirewall3 { Name = "ADFSSrv-SmartcardAuthN-HTTPS-In-TCP" Ensure = 'Present' Enabled = 'True' } } } |