Created
January 8, 2020 11:14
-
-
Save mritsurgeon/afae27cdf785de96ac29e2ae0b31ec55 to your computer and use it in GitHub Desktop.
OneNodeRole for Fabric ASDK Nested
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?xml version="1.0" encoding="UTF-8"?> | |
| -<Role PSClass="Classes\VirtualMachines\VirtualMachines.psm1" Type="Resource" Id="VirtualMachines"> | |
| -<PublicInfo> | |
| -<Logs Enabled="True"> | |
| <FileLog Location="$env:SystemDrive\Windows\Panther\"/> | |
| <FileLog Location="$env:SystemDrive\Windows\MiniDump\*.dmp"/> | |
| <FileLog Location="$env:SystemRoot\*.dmp"/> | |
| <FileLog Location="$env:SystemDrive\Windows\ServiceProfiles\LocalService\AppData\Local\CrashDumps\*.dmp"/> | |
| <FileLog Location="$env:SystemDrive\Windows\ServiceProfiles\NetworkService\AppData\Local\CrashDumps\*.dmp"/> | |
| <FileLog Location="$env:SystemDrive\Windows\System32\Config\SystemProfile\AppData\Local\CrashDumps\*.dmp"/> | |
| <FileLog Location="$env:SystemDrive\Windows\Logs\WindowsUpdate\*.etl"/> | |
| <FileLog Location="$env:SystemDrive\Windows\SetupComplete.log"/> | |
| <FileLog Location="$env:SystemDrive\Monitoring\Data\Configuration\MonAgentHost*.log"/> | |
| <FileLog Location="$env:SystemDrive\Monitoring\Data\Tables\V2Faults*.tsf"/> | |
| <FileLog Location="$env:SystemDrive\MASLogs\VirtualMachines*.log"/> | |
| <FileLog Location="$env:SystemDrive\MASLogs\TraceCollector*.log"/> | |
| <FileLog Location="$env:SystemDrive\Windows\System32\Configuration\ConfigurationStatus\*.mof"/> | |
| <FileLog Location="$env:SystemDrive\Windows\System32\Configuration\ConfigurationStatus\*.json"/> | |
| <FileLog Location="$env:SystemDrive\Windows\debug\"/> | |
| <FileLog Location="$env:SystemDrive\NetTraceLogs\*"/> | |
| <FileLog Location="$env:SystemDrive\Windows\System32\LogFiles\HTTPERR\*.log"/> | |
| <FileLog Location="$env:ProgramData\Microsoft\Windows Defender\Support\MpSupportFiles.cab"/> | |
| <ShareLog Location="[DiagnosticsShare]\VirtualMachines\*"/> | |
| <ShareLog Location="[DiagnosticsShare]\HealthAndMonitoring\HealthAgent\*.etl"/> | |
| <WindowsEventLog Pattern="*Failover*"/> | |
| <WindowsEventLog Pattern="*Hyper-V*"/> | |
| <WindowsEventLog Pattern="System"/> | |
| <WindowsEventLog Pattern="Application"/> | |
| <WindowsEventLog Pattern="*SMB*"/> | |
| <WindowsEventLog Pattern="*TraceCollector*"/> | |
| <WindowsEventLog Pattern="*Microsoft-Windows-DSC*"/> | |
| <WindowsEventLog Pattern="Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational"/> | |
| <WindowsEventLog Pattern="Microsoft-Windows-CodeIntegrity/Operational"/> | |
| <WindowsEventLog Pattern="Microsoft-Windows-GroupPolicy/Operational"/> | |
| <WindowsEventLog Pattern="Microsoft-Windows-NTLM/Operational"/> | |
| <WindowsEventLog Pattern="Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity"/> | |
| <WindowsEventLog Pattern="Microsoft-Windows-Windows Firewall With Advanced Security/Firewall"/> | |
| <WindowsEventLog Pattern="Microsoft-Windows-WinRM/Operational"/> | |
| </Logs> | |
| <Debug Enabled="[EnableVMDebugging]"/> | |
| <LibraryShare Path="{Legacy_Infrastructure_2}"/> | |
| <LibraryShareImageFolder Path="{Infrastructure_2}\CloudMedia\Images\en-us"/> | |
| <LibraryShareNugetStoreFolder Path="{Infrastructure_2}\CloudMedia\NuGetStore"/> | |
| <WindowsUpdateStagingFolder Path="{Infrastructure_2}\CloudMedia\WindowsUpdates"/> | |
| <CodeIntegrityFolder Path="{Infrastructure_2}\CloudMedia\Security\CodeIntegrity"/> | |
| <DefenderFolder Path="{Infrastructure_2}\CloudMedia\Security\Defender"/> | |
| <LocalSourceImagePath Path="$env:SystemDrive\CloudDeployment\Images\en-us"/> | |
| <LocalTargetImagePath Path="VMs"/> | |
| <InfrastructureShare Path="{Infrastructure}"/> | |
| -<JEA> | |
| -<Endpoints> | |
| -<Endpoint RunAsGmsa="True" RunAsAccountID="DomainAdminSA" Name="BackupVMEndpoint"> | |
| -<TargetRoles> | |
| <TargetRole Id="BareMetal"/> | |
| </TargetRoles> | |
| -<Nugets> | |
| -<Nuget Name="Microsoft.AzureStack.Fabric.Backup.IBCAdapterClient"> | |
| <PackagedModules Path="content\IBCAdapterClientPkg" Destination="IBCAdapterClientPkg"/> | |
| </Nuget> | |
| -<Nuget Name="Microsoft.AzureStack.Solution.Deploy.CloudDeployment"> | |
| <PackagedModules Path="content\Common" Destination="Microsoft.AzureStack.Solution.Deploy.CloudDeployment\Common"/> | |
| </Nuget> | |
| </Nugets> | |
| -<SessionConfiguration Name="BackupVMEndpoint"> | |
| -<SecurityGroup Name="[PREFIX]-OpsAdmin"> | |
| <Whitelist Value="BackupVMEndpointWhitelist"/> | |
| </SecurityGroup> | |
| <EnableTranscript Value="False"/> | |
| </SessionConfiguration> | |
| -<Whitelist Name="BackupVMEndpointWhitelist"> | |
| -<ModulesToImport> | |
| <Module Name="Hyper-V"/> | |
| <Module Name="IBCAdapterClientPkg\Microsoft.AzureStack.Fabric.Backup.Common.Client.Cmdlets.psd1"/> | |
| <Module Name="Microsoft.AzureStack.Solution.Deploy.CloudDeployment\Common\BCDRActionHelper.psm1"/> | |
| </ModulesToImport> | |
| -<VisibleFunctions> | |
| <Cmdlet Name="Start-BCDRExecutionOnRemoteComputer"/> | |
| </VisibleFunctions> | |
| -<VisibleCmdlets> | |
| <Cmdlet Name="Export-VM"/> | |
| <Cmdlet Name="Invoke-IBCVMBackup"/> | |
| </VisibleCmdlets> | |
| -<VisibleProviders> | |
| <Provider Value="FileSystem"/> | |
| <Provider Value="Environment"/> | |
| </VisibleProviders> | |
| -<EnvironmentVariables> | |
| <Variable Name="ErrorActionPreference" Value="Stop"/> | |
| <Variable Name="VerbosePreference" Value="Continue"/> | |
| </EnvironmentVariables> | |
| </Whitelist> | |
| </Endpoint> | |
| </Endpoints> | |
| </JEA> | |
| -<Accounts> | |
| <RunAsAccountID>Fabric</RunAsAccountID> | |
| <DomainAdminAccountID>DomainAdmin</DomainAdminAccountID> | |
| <LocalAdminAccountID>LocalAdmin</LocalAdminAccountID> | |
| </Accounts> | |
| <DesiredStateCache Path="DSCConfigs"/> | |
| -<DeploymentContent> | |
| <NugetArtifact Name="Microsoft.AzureStack.Deployment.DSC" DestinationPath="Program Files\WindowsPowerShell\Modules" SourcePath="content"/> | |
| <NugetArtifact Name="Microsoft.AzureStack.Fabric.Health.MAConfig" DestinationPath="Monitoring" SourcePath="Monitoring"/> | |
| <NugetArtifact Name="Microsoft.AzureStack.Fabric.MonitoringAgent" DestinationPath="Monitoring" SourcePath="Monitoring"/> | |
| <NugetArtifact Name="Microsoft.AzureStack.Fabric.Health" DestinationPath="TraceCollector\Configuration" SourcePath="Deployment\VirtualMachineTraceCollector" UpdatePath="TraceCollectorUpdate\Configuration" Update="True"/> | |
| <NugetArtifact Name="Microsoft.AzureStack.Fabric.Health.HealthAgent" DestinationPath="HealthAgent" SourcePath="Content\HealthAgent"/> | |
| <NugetArtifact Name="Microsoft.AzureStack.Fabric.Health.HealthAgent" DestinationPath="TraceCollector\Configuration" SourcePath="TraceCollector"/> | |
| <NugetArtifact Name="Microsoft.AzureStack.Solution.Deploy.CloudCommon" DestinationPath="Program Files\WindowsPowerShell\Modules" SourcePath="content"/> | |
| <NugetArtifact Name="Microsoft.AzureStack.Solution.Diagnostics.TraceCollector" DestinationPath="TraceCollector\PerfCounterConfiguration" SourcePath="content\PerfCollector\VirtualMachines"/> | |
| <NugetArtifact Name="Microsoft.AzureStack.Solution.Diagnostics.TraceCollector" DestinationPath="TraceCollector" SourcePath="lib\net46"/> | |
| <NuGetArtifact Name="Microsoft.AzureStack.Solution.Diagnostics.LogTransporter.Functions" DestinationPath="NugetStore" SourcePath="" NugetInstall="true"/> | |
| <NuGetArtifact Name="Microsoft.AzureStack.Solution.Diagnostics.LogTransporter.Functions" DestinationPath="Program Files\WindowsPowerShell\Modules\Microsoft.AzureStack.Solution.Diagnostics.LogTransporter.Functions" SourcePath="content"/> | |
| <!-- RS5 CTL files --> | |
| <NugetArtifact Name="Microsoft.AzureStack.Solution.Deploy.Security" DestinationPath="WuCTLFiles" SourcePath="content\WuCTLFiles"/> | |
| </DeploymentContent> | |
| -<RegistryKeys ToLoadFileName="windows\system32\config\system" RootKeyName="HKLM"> | |
| <!-- Enable Autologger\LSALOOKUP logging for bug 12502702--> | |
| <RegistryKey Type="REG_DWORD" Value="BufferSize" Data="512" SubKeyName="ControlSet001\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_DWORD" Value="MaximumBuffers" Data="100" SubKeyName="ControlSet001\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_DWORD" Value="MinimumBuffers" Data="4" SubKeyName="ControlSet001\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_DWORD" Value="LogFileMode" Data="4" SubKeyName="ControlSet001\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_SZ" Value="FileName" Data="c:\windows\system32\logfiles\lsa\lookup.etl" SubKeyName="ControlSet001\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_SZ" Value="Guid" Data="{169ec169-5b77-4a3e-9db6-441799d5cacb}" SubKeyName="ControlSet001\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_DWORD" Value="Start" Data="1" SubKeyName="ControlSet001\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_DWORD" Value="Status" Data="0" SubKeyName="ControlSet001\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_DWORD" Value="BufferSize" Data="512" SubKeyName="ControlSet002\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_DWORD" Value="MaximumBuffers" Data="100" SubKeyName="ControlSet002\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_DWORD" Value="MinimumBuffers" Data="4" SubKeyName="ControlSet002\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_DWORD" Value="LogFileMode" Data="4" SubKeyName="ControlSet002\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_SZ" Value="FileName" Data="c:\windows\system32\logfiles\lsa\lookup.etl" SubKeyName="ControlSet002\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_SZ" Value="Guid" Data="{169ec169-5b77-4a3e-9db6-441799d5cacb}" SubKeyName="ControlSet002\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_DWORD" Value="Start" Data="1" SubKeyName="ControlSet002\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_DWORD" Value="Status" Data="0" SubKeyName="ControlSet002\Control\WMI\Autologger\LSALOOKUP"/> | |
| <RegistryKey Type="REG_DWORD" Value="EnableProperty" Data="0" SubKeyName="ControlSet001\Control\WMI\Autologger\LSALOOKUP\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_DWORD" Value="Enabled" Data="1" SubKeyName="ControlSet001\Control\WMI\Autologger\LSALOOKUP\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_DWORD" Value="EnableLevel" Data="4" SubKeyName="ControlSet001\Control\WMI\Autologger\LSALOOKUP\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_QWORD" Value="MatchAnyKeyword" Data="64" SubKeyName="ControlSet001\Control\WMI\Autologger\LSALOOKUP\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_QWORD" Value="MatchAllKeyword" Data="0" SubKeyName="ControlSet001\Control\WMI\Autologger\LSALOOKUP\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_DWORD" Value="Status" Data="0" SubKeyName="ControlSet001\Control\WMI\Autologger\LSALOOKUP\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_DWORD" Value="EnableProperty" Data="0" SubKeyName="ControlSet002\Control\WMI\Autologger\LSALOOKUP\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_DWORD" Value="Enabled" Data="1" SubKeyName="ControlSet002\Control\WMI\Autologger\LSALOOKUP\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_DWORD" Value="EnableLevel" Data="4" SubKeyName="ControlSet002\Control\WMI\Autologger\LSALOOKUP\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_QWORD" Value="MatchAnyKeyword" Data="64" SubKeyName="ControlSet002\Control\WMI\Autologger\LSALOOKUP\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_QWORD" Value="MatchAllKeyword" Data="0" SubKeyName="ControlSet002\Control\WMI\Autologger\LSALOOKUP\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_DWORD" Value="Status" Data="0" SubKeyName="ControlSet002\Control\WMI\Autologger\LSALOOKUP\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <!-- Enable Autologger\LSA logging for bug 12502702--> | |
| <RegistryKey Type="REG_DWORD" Value="BufferSize" Data="512" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA"/> | |
| <RegistryKey Type="REG_DWORD" Value="MaximumBuffers" Data="80" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA"/> | |
| <RegistryKey Type="REG_DWORD" Value="MinimumBuffers" Data="2" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA"/> | |
| <RegistryKey Type="REG_DWORD" Value="LogFileMode" Data="4" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA"/> | |
| <RegistryKey Type="REG_SZ" Value="FileName" Data="c:\windows\system32\logfiles\lsa\lsa.etl" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA"/> | |
| <RegistryKey Type="REG_SZ" Value="Guid" Data="{d0b639e0-e650-4d1d-8f39-1580ade72784}" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA"/> | |
| <RegistryKey Type="REG_DWORD" Value="Start" Data="1" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA"/> | |
| <RegistryKey Type="REG_DWORD" Value="BufferSize" Data="512" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA"/> | |
| <RegistryKey Type="REG_DWORD" Value="MaximumBuffers" Data="80" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA"/> | |
| <RegistryKey Type="REG_DWORD" Value="MinimumBuffers" Data="2" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA"/> | |
| <RegistryKey Type="REG_DWORD" Value="LogFileMode" Data="4" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA"/> | |
| <RegistryKey Type="REG_SZ" Value="FileName" Data="c:\windows\system32\logfiles\lsa\lsa.etl" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA"/> | |
| <RegistryKey Type="REG_SZ" Value="Guid" Data="{d0b639e0-e650-4d1d-8f39-1580ade72784}" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA"/> | |
| <RegistryKey Type="REG_DWORD" Value="Start" Data="1" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA"/> | |
| <RegistryKey Type="REG_DWORD" Value="EnableProperty" Data="0" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA\{d0b639e0-e650-4d1d-8f39-1580ade72784}"/> | |
| <RegistryKey Type="REG_DWORD" Value="Enabled" Data="1" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA\{d0b639e0-e650-4d1d-8f39-1580ade72784}"/> | |
| <RegistryKey Type="REG_DWORD" Value="EnableLevel" Data="4" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA\{d0b639e0-e650-4d1d-8f39-1580ade72784}"/> | |
| <RegistryKey Type="REG_QWORD" Value="MatchAnyKeyword" Data="268435455" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA\{d0b639e0-e650-4d1d-8f39-1580ade72784}"/> | |
| <RegistryKey Type="REG_QWORD" Value="MatchAllKeyword" Data="0" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA\{d0b639e0-e650-4d1d-8f39-1580ade72784}"/> | |
| <RegistryKey Type="REG_DWORD" Value="EnableProperty" Data="0" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA\{d0b639e0-e650-4d1d-8f39-1580ade72784}"/> | |
| <RegistryKey Type="REG_DWORD" Value="Enabled" Data="1" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA\{d0b639e0-e650-4d1d-8f39-1580ade72784}"/> | |
| <RegistryKey Type="REG_DWORD" Value="EnableLevel" Data="4" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA\{d0b639e0-e650-4d1d-8f39-1580ade72784}"/> | |
| <RegistryKey Type="REG_QWORD" Value="MatchAnyKeyword" Data="268435455" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA\{d0b639e0-e650-4d1d-8f39-1580ade72784}"/> | |
| <RegistryKey Type="REG_QWORD" Value="MatchAllKeyword" Data="0" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA\{d0b639e0-e650-4d1d-8f39-1580ade72784}"/> | |
| <!-- Enable Autologger\LSA2 logging for bug 12502702 --> | |
| <RegistryKey Type="REG_DWORD" Value="BufferSize" Data="512" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA2"/> | |
| <RegistryKey Type="REG_DWORD" Value="MaximumBuffers" Data="80" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA2"/> | |
| <RegistryKey Type="REG_DWORD" Value="MinimumBuffers" Data="2" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA2"/> | |
| <RegistryKey Type="REG_DWORD" Value="LogFileMode" Data="4" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA2"/> | |
| <RegistryKey Type="REG_SZ" Value="FileName" Data="c:\windows\system32\logfiles\lsa\lsa2.etl" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA2"/> | |
| <RegistryKey Type="REG_SZ" Value="Guid" Data="{169ec169-5b77-4a3e-9db6-441799d5cacb}" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA2"/> | |
| <RegistryKey Type="REG_DWORD" Value="Start" Data="1" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA2"/> | |
| <RegistryKey Type="REG_DWORD" Value="BufferSize" Data="512" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA2"/> | |
| <RegistryKey Type="REG_DWORD" Value="MaximumBuffers" Data="80" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA2"/> | |
| <RegistryKey Type="REG_DWORD" Value="MinimumBuffers" Data="2" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA2"/> | |
| <RegistryKey Type="REG_DWORD" Value="LogFileMode" Data="4" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA2"/> | |
| <RegistryKey Type="REG_SZ" Value="FileName" Data="c:\windows\system32\logfiles\lsa\lsa2.etl" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA2"/> | |
| <RegistryKey Type="REG_SZ" Value="Guid" Data="{169ec169-5b77-4a3e-9db6-441799d5cacb}" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA2"/> | |
| <RegistryKey Type="REG_DWORD" Value="Start" Data="1" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA2"/> | |
| <RegistryKey Type="REG_DWORD" Value="EnableProperty" Data="0" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA2\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_DWORD" Value="Enabled" Data="1" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA2\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_DWORD" Value="EnableLevel" Data="4" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA2\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_QWORD" Value="MatchAnyKeyword" Data="4294967295" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA2\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_QWORD" Value="MatchAllKeyword" Data="0" SubKeyName="ControlSet001\Control\WMI\Autologger\LSA2\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_DWORD" Value="EnableProperty" Data="0" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA2\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_DWORD" Value="Enabled" Data="1" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA2\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_DWORD" Value="EnableLevel" Data="4" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA2\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_QWORD" Value="MatchAnyKeyword" Data="4294967295" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA2\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <RegistryKey Type="REG_QWORD" Value="MatchAllKeyword" Data="0" SubKeyName="ControlSet002\Control\WMI\Autologger\LSA2\{169ec169-5b77-4a3e-9db6-441799d5cacb}"/> | |
| <!-- Enable LSP logging DBG levels for bug 12502702 --> | |
| <RegistryKey Type="REG_DWORD" Value="LspDbgInfoLevel" Data="4294967295" SubKeyName="ControlSet001\Control\Lsa\"/> | |
| <RegistryKey Type="REG_DWORD" Value="LspDbgTraceOptions" Data="1" SubKeyName="ControlSet001\Control\Lsa\"/> | |
| <RegistryKey Type="REG_DWORD" Value="LspDbgInfoLevel" Data="4294967295" SubKeyName="ControlSet002\Control\Lsa\"/> | |
| <RegistryKey Type="REG_DWORD" Value="LspDbgTraceOptions" Data="1" SubKeyName="ControlSet002\Control\Lsa\"/> | |
| <!-- Add LDAP registry key for Network Profile Detection --> | |
| <RegistryKey Type="REG_DWORD" Value="LdapTimeoutMs" Data="4294967295" SubKeyName="ControlSet001\Services\NlaSvc\Parameters"/> | |
| <RegistryKey Type="REG_DWORD" Value="LdapTimeoutMs" Data="4294967295" SubKeyName="ControlSet002\Services\NlaSvc\Parameters"/> | |
| <!-- Give services time to start on heavily loaded systems..NET services, particularly, can take significant time just to get to their ServiceBase OnStart code.TraceCollector and SLBMUX, in particular, do significant work without regularly signalling the servicecontrol manager that they are in progress. If they exceed timeout with signalling, the process isstopped by the Service Control Manager.Services in Windows now start in parallel as well instead of synchronously - this can also affectthe system load on services trying to start.OS Default is 30 seconds. --> | |
| <RegistryKey Type="REG_DWORD" Value="ServicesPipeTimeout" Data="180000" SubKeyName="ControlSet001\Control\"/> | |
| <RegistryKey Type="REG_DWORD" Value="ServicesPipeTimeout" Data="180000" SubKeyName="ControlSet002\Control\"/> | |
| <!-- Setting the Registry Key for OS Mini Dump --> | |
| <RegistryKey Type="REG_DWORD" Value="CrashDumpEnabled" Data="3" SubKeyName="ControlSet001\Control\CrashControl\"/> | |
| <RegistryKey Type="REG_DWORD" Value="CrashDumpEnabled" Data="3" SubKeyName="ControlSet002\Control\CrashControl\"/> | |
| <RegistryKey Type="REG_EXPAND_SZ" Value="MinidumpDir" Data="%SystemRoot%\Minidump" SubKeyName="ControlSet001\Control\CrashControl\"/> | |
| <RegistryKey Type="REG_EXPAND_SZ" Value="MinidumpDir" Data="%SystemRoot%\Minidump" SubKeyName="ControlSet002\Control\CrashControl\"/> | |
| <RegistryKey Type="REG_DWORD" Value="MinidumpsCount" Data="1" SubKeyName="ControlSet001\Control\CrashControl\"/> | |
| <RegistryKey Type="REG_DWORD" Value="MinidumpsCount" Data="1" SubKeyName="ControlSet002\Control\CrashControl\"/> | |
| <RegistryKey Type="REG_DWORD" Value="Overwrite" Data="1" SubKeyName="ControlSet001\Control\CrashControl\"/> | |
| <RegistryKey Type="REG_DWORD" Value="Overwrite" Data="1" SubKeyName="ControlSet002\Control\CrashControl\"/> | |
| </RegistryKeys> | |
| -<RegistryKeys ToLoadFileName="windows\system32\config\software" RootKeyName="HKLM"> | |
| <!-- Enable SMB hardening on NETLOGON and SYSVOL shares --> | |
| <RegistryKey Type="REG_SZ" Value="\\*\NETLOGON" Data="RequireMutualAuthentication=1,RequireIntegrity=1,RequirePrivacy=1" SubKeyName="Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" LiveUpdate="true"/> | |
| <RegistryKey Type="REG_SZ" Value="\\*\SYSVOL" Data="RequireMutualAuthentication=1,RequireIntegrity=1,RequirePrivacy=1" SubKeyName="Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" LiveUpdate="true"/> | |
| <!-- Disable SMB guest authentication both for client and server --> | |
| <RegistryKey Type="REG_DWORD" Value="AllowInsecureGuestAuth" Data="0" SubKeyName="Policies\Microsoft\Windows\LanmanWorkstation" LiveUpdate="true"/> | |
| <RegistryKey Type="REG_DWORD" Value="AllowInsecureGuestAuth" Data="0" SubKeyName="Policies\Microsoft\Windows\LanmanServer\Parameters" LiveUpdate="true"/> | |
| <!-- Enable Powershell app compat mode --> | |
| <RegistryKey Type="REG_DWORD" Value="AppCompat" Data="0" SubKeyName="Microsoft\Powershell" LiveUpdate="true"/> | |
| </RegistryKeys> | |
| -<WindowsFeature> | |
| <RemoveFeature Name="BITS"/> | |
| <RemoveFeature Name="BITSExtensions-Upload"/> | |
| <RemoveFeature Name="ClientForNFS-Infrastructure"/> | |
| <RemoveFeature Name="DFSN-Server"/> | |
| <RemoveFeature Name="DFSR-Infrastructure-ServerEdition"/> | |
| <RemoveFeature Name="DSC-Service"/> | |
| <RemoveFeature Name="FileServerVSSAgent"/> | |
| <RemoveFeature Name="FRS-Infrastructure"/> | |
| <RemoveFeature Name="FSRM-Infrastructure"/> | |
| <RemoveFeature Name="FSRM-Infrastructure-Services"/> | |
| <RemoveFeature Name="IIS-ASP"/> | |
| <RemoveFeature Name="IIS-ASPNET"/> | |
| <RemoveFeature Name="IIS-CertProvider"/> | |
| <RemoveFeature Name="IIS-CGI"/> | |
| <RemoveFeature Name="IIS-ClientCertificateMappingAuthentication"/> | |
| <RemoveFeature Name="IIS-CustomLogging"/> | |
| <RemoveFeature Name="IIS-DigestAuthentication"/> | |
| <RemoveFeature Name="IIS-FTPExtensibility"/> | |
| <RemoveFeature Name="IIS-FTPServer"/> | |
| <RemoveFeature Name="IIS-FTPSvc"/> | |
| <RemoveFeature Name="IIS-HostableWebCore"/> | |
| <RemoveFeature Name="IIS-HttpRedirect"/> | |
| <RemoveFeature Name="IIS-HttpTracing"/> | |
| <RemoveFeature Name="IIS-IIS6ManagementCompatibility"/> | |
| <RemoveFeature Name="IIS-IISCertificateMappingAuthentication"/> | |
| <RemoveFeature Name="IIS-LegacyScripts"/> | |
| <RemoveFeature Name="IIS-LegacySnapIn"/> | |
| <RemoveFeature Name="IIS-LoggingLibraries"/> | |
| <RemoveFeature Name="IIS-Metabase"/> | |
| <RemoveFeature Name="IIS-NetFxExtensibility"/> | |
| <RemoveFeature Name="IIS-ODBCLogging"/> | |
| <RemoveFeature Name="IIS-RequestMonitor"/> | |
| <RemoveFeature Name="IIS-ServerSideIncludes"/> | |
| <RemoveFeature Name="IIS-URLAuthorization"/> | |
| <RemoveFeature Name="IIS-WebDAV"/> | |
| <RemoveFeature Name="IIS-WebSockets"/> | |
| <RemoveFeature Name="IIS-WMICompatibility"/> | |
| <RemoveFeature Name="IPAMClientFeature"/> | |
| <RemoveFeature Name="IPAMServerFeature"/> | |
| <RemoveFeature Name="iSCSITargetServer"/> | |
| <RemoveFeature Name="iSCSITargetServer-PowerShell"/> | |
| <RemoveFeature Name="iSCSITargetStorageProviders"/> | |
| <RemoveFeature Name="Licensing"/> | |
| <RemoveFeature Name="LightweightServer"/> | |
| <RemoveFeature Name="ManagementOdata"/> | |
| <RemoveFeature Name="MicrosoftWindowsPowerShellV2"/> | |
| <RemoveFeature Name="Microsoft-Windows-FCI-Client-Package"/> | |
| <RemoveFeature Name="Microsoft-Windows-Web-Services-for-Management-IIS-Extension"/> | |
| <RemoveFeature Name="MSMQ-DCOMProxy"/> | |
| <RemoveFeature Name="MSMQ-HTTP"/> | |
| <RemoveFeature Name="MSMQ-Multicast"/> | |
| <RemoveFeature Name="MSMQ-RoutingServer"/> | |
| <RemoveFeature Name="MSMQ-Server"/> | |
| <RemoveFeature Name="MSMQ-Triggers"/> | |
| <RemoveFeature Name="MultipathIo"/> | |
| <RemoveFeature Name="MultiPoint-Connector"/> | |
| <RemoveFeature Name="MultiPoint-Connector-Services"/> | |
| <RemoveFeature Name="MultiPoint-Role"/> | |
| <RemoveFeature Name="MultiPoint-Tools"/> | |
| <RemoveFeature Name="P2P-PnrpOnly"/> | |
| <RemoveFeature Name="PeerDist"/> | |
| <RemoveFeature Name="Printing-Client"/> | |
| <RemoveFeature Name="Printing-Client-Gui"/> | |
| <RemoveFeature Name="Printing-LPDPrintService"/> | |
| <RemoveFeature Name="Printing-PrintToPDFServices-Features"/> | |
| <RemoveFeature Name="Printing-Server-Foundation-Features"/> | |
| <RemoveFeature Name="Printing-Server-Role"/> | |
| <RemoveFeature Name="Printing-XPSServices-Features"/> | |
| <RemoveFeature Name="QWAVE"/> | |
| <RemoveFeature Name="Remote-Desktop-Services"/> | |
| <RemoveFeature Name="SBMgr-UI"/> | |
| <RemoveFeature Name="ServerForNFS-Infrastructure"/> | |
| <RemoveFeature Name="ServerMediaFoundation"/> | |
| <RemoveFeature Name="ServicesForNFS-ServerAndClient"/> | |
| <RemoveFeature Name="SessionDirectory"/> | |
| <RemoveFeature Name="SMBHashGeneration"/> | |
| <RemoveFeature Name="Smtpsvc-Admin-Update-Name"/> | |
| <RemoveFeature Name="Smtpsvc-Service-Update-Name"/> | |
| <RemoveFeature Name="SNMP"/> | |
| <RemoveFeature Name="Storage-Replica"/> | |
| <RemoveFeature Name="Storage-Replica-AdminPack"/> | |
| <RemoveFeature Name="TelnetClient"/> | |
| <RemoveFeature Name="VmHostAgent"/> | |
| <RemoveFeature Name="WCF-HTTP-Activation"/> | |
| <RemoveFeature Name="WCF-HTTP-Activation45"/> | |
| <RemoveFeature Name="WCF-MSMQ-Activation45"/> | |
| <RemoveFeature Name="WCF-NonHTTP-Activation"/> | |
| <RemoveFeature Name="WCF-Pipe-Activation45"/> | |
| <RemoveFeature Name="WCF-TCP-Activation45"/> | |
| <RemoveFeature Name="WebAccess"/> | |
| <RemoveFeature Name="WebEnrollmentServices"/> | |
| <RemoveFeature Name="WindowsPowerShellWebAccess"/> | |
| <RemoveFeature Name="WINSRuntime"/> | |
| <RemoveFeature Name="WMISnmpProvider"/> | |
| <RemoveFeature Name="WorkFolders-Server"/> | |
| <RemoveFeature Name="WSS-Product-Package"/> | |
| </WindowsFeature> | |
| </PublicInfo> | |
| <Nodes/> | |
| -<PrivateInfo> | |
| <LocalSourceImagePath Path="[CloudMediaPath]\Images\en-us"/> | |
| <LocalTargetImagePath Path="VMs"/> | |
| <InfrastructureShare Path="{Infrastructure}"/> | |
| <TenantVmShare Path="{Tenant}"/> | |
| <Timeout SetupVMTimeoutInSec="1800" StartVMTimeoutInSec="900" StopVMTimeoutInSec="420"/> | |
| </PrivateInfo> | |
| -<Actions> | |
| -<Action Type="MarkAllVirtualMachineStatusComplete"> | |
| -<Steps> | |
| -<PerNode RolePath="Cloud\Fabric\VirtualMachines"> | |
| -<Step Name="MarkAllVirtualMachineStatusComplete" Description="Update the XML to mark the new nodes as deployed." Index="0"> | |
| <Task RolePath="BuiltIn" InterfaceType="MarkVirtualMachineStatusComplete"/> | |
| </Step> | |
| </PerNode> | |
| </Steps> | |
| </Action> | |
| -<Action Type="MarkAllVirtualMachineStatusProvisioning"> | |
| -<Steps> | |
| -<PerNode RolePath="Cloud\Fabric\VirtualMachines"> | |
| -<Step Name="MarkAllVirtualMachineStatusProvisioning" Description="Update the XML to mark the new nodes as provisioning." Index="0"> | |
| <Task RolePath="BuiltIn" InterfaceType="MarkVirtualMachineStatusProvisioning"/> | |
| </Step> | |
| </PerNode> | |
| </Steps> | |
| </Action> | |
| </Actions> | |
| </Role> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment