Carbon is a PowerShell module for automating the configuration Windows 7, 8, 2008, and 2012 and automation the installation and configuration of Windows applications, websites, and services. It can configure and manage:

* Local users and groups
* IIS websites, virtual directories, and applications
* File system, registry, and certificate permissions
* Certif
Carbon is a PowerShell module for automating the configuration Windows 7, 8, 2008, and 2012 and automation the installation and configuration of Windows applications, websites, and services. It can configure and manage:

* Local users and groups
* IIS websites, virtual directories, and applications
* File system, registry, and certificate permissions
* Certificates
* Privileges
* Services
* Encryption
* Junctions
* Hosts file
* INI files
* Performance counters
* Shares
* .NET connection strings and app settings
* And much more!

All functions are idempotent: when run multiple times with the same arguments, your system will be in the same state without failing or producing errors.
Show more

Minimum PowerShell version


There is a newer prerelease version of this module available.
See the version list below for details.

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name Carbon -RequiredVersion 2.10.2

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name Carbon -Version 2.10.2

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More


Aaron Jensen


Aaron Jensen and WebMD Health Services

Package Details



.net acl active-directory certificates com compression computer credential cryptography directory dsc dsc-resources encryption environment file-system firewall groups hosts-file http identity iis ini installers internet-explorer ip junctions msi msmq netsh networking ntfs operating-system os path performance-counters powershell principal privileges programs registry rsa scheduled-tasks security service shares sid smb ssl text trusted-host users wcf windows windows-features xml zip DscResources setup automation admin


Add-CGroupMember Add-CIisDefaultDocument Add-CTrustedHost Assert-CAdminPrivilege Assert-CFirewallConfigurable Assert-CService Clear-CDscLocalResourceCache Clear-CMofAuthoringMetadata Clear-CTrustedHost Complete-CJob Compress-CItem ConvertFrom-CBase64 Convert-CSecureStringToString ConvertTo-CBase64 ConvertTo-CContainerInheritanceFlags ConvertTo-CInheritanceFlag ConvertTo-CPropagationFlag ConvertTo-CSecurityIdentifier Convert-CXmlFile Copy-CDscResource Disable-CAclInheritance Disable-CFirewallStatefulFtp Disable-CIEEnhancedSecurityConfiguration Disable-CIisSecurityAuthentication Disable-CNtfsCompression Enable-CAclInheritance Enable-CFirewallStatefulFtp Enable-CIEActivationPermission Enable-CIisDirectoryBrowsing Enable-CIisSecurityAuthentication Enable-CIisSsl Enable-CNtfsCompression Expand-CItem Find-CADUser Format-CADSearchFilterValue Get-CADDomainController Get-CCertificate Get-CCertificateStore Get-CComPermission Get-CComSecurityDescriptor Get-CDscError Get-CDscWinEvent Get-CFileShare Get-CFileSharePermission Get-CFirewallRule Get-CGroup Get-CHttpUrlAcl Get-CIisApplication Get-CIisAppPool Get-CIisConfigurationSection Get-CIisHttpHeader Get-CIisHttpRedirect Get-CIisMimeMap Get-CIisSecurityAuthentication Get-CIisVersion Get-CIisWebsite Get-CIPAddress Get-CMsi Get-CMsmqMessageQueue Get-CMsmqMessageQueuePath Get-CPathProvider Get-CPathToHostsFile Get-CPerformanceCounter Get-CPermission Get-CPowerShellModuleInstallPath Get-CPowershellPath Get-CPrivilege Get-CProgramInstallInfo Get-CRegistryKeyValue Get-CScheduledTask Get-CServiceAcl Get-CServiceConfiguration Get-CServicePermission Get-CServiceSecurityDescriptor Get-CSslCertificateBinding Get-CTrustedHost Get-CUser Get-CWindowsFeature Get-CWmiLocalUserAccount Grant-CComPermission Grant-CHttpUrlPermission Grant-CMsmqMessageQueuePermission Grant-CPermission Grant-CPrivilege Grant-CServiceControlPermission Grant-CServicePermission Initialize-CLcm Install-CCertificate Install-CDirectory Install-CFileShare Install-CGroup Install-CIisApplication Install-CIisAppPool Install-CIisVirtualDirectory Install-CIisWebsite Install-CJunction Install-CMsi Install-CMsmq Install-CMsmqMessageQueue Install-CPerformanceCounter Install-CRegistryKey Install-CScheduledTask Install-CService Install-CUser Install-CWindowsFeature Invoke-CAppCmd Invoke-CPowerShell Join-CIisVirtualPath Lock-CIisConfigurationSection New-CCredential New-CJunction New-CRsaKeyPair New-CTempDirectory Protect-CString Read-CFile Remove-CDotNetAppSetting Remove-CEnvironmentVariable Remove-CGroupMember Remove-CHostsEntry Remove-CIisMimeMap Remove-CIniEntry Remove-CJunction Remove-CRegistryKeyValue Remove-CSslCertificateBinding Reset-CHostsFile Reset-CMsmqQueueManagerID Resolve-CFullPath Resolve-CIdentity Resolve-CIdentityName Resolve-CNetPath Resolve-CPathCase Resolve-CRelativePath Restart-CRemoteService Revoke-CComPermission Revoke-CHttpUrlPermission Revoke-CPermission Revoke-CPrivilege Revoke-CServicePermission Set-CDotNetAppSetting Set-CDotNetConnectionString Set-CEnvironmentVariable Set-CHostsEntry Set-CIisHttpHeader Set-CIisHttpRedirect Set-CIisMimeMap Set-CIisWebsiteID Set-CIisWebsiteSslCertificate Set-CIisWindowsAuthentication Set-CIniEntry Set-CRegistryKeyValue Set-CServiceAcl Set-CSslCertificateBinding Set-CTrustedHost Split-CIni Start-CDscPullConfiguration Test-CAdminPrivilege Test-CDotNet Test-CDscTargetResource Test-CFileShare Test-CFirewallStatefulFtp Test-CGroup Test-CGroupMember Test-CIdentity Test-CIisAppPool Test-CIisConfigurationSection Test-CIisSecurityAuthentication Test-CIisWebsite Test-CIPAddress Test-CMsmqMessageQueue Test-CNtfsCompression Test-COSIs32Bit Test-COSIs64Bit Test-CPathIsJunction Test-CPerformanceCounter Test-CPerformanceCounterCategory Test-CPermission Test-CPowerShellIs32Bit Test-CPowerShellIs64Bit Test-CPrivilege Test-CRegistryKeyValue Test-CScheduledTask Test-CService Test-CSslCertificateBinding Test-CTypeDataMember Test-CUncPath Test-CUser Test-CWindowsFeature Test-CZipFile Uninstall-CCertificate Uninstall-CDirectory Uninstall-CFileShare Uninstall-CGroup Uninstall-CIisAppPool Uninstall-CIisWebsite Uninstall-CJunction Uninstall-CMsmqMessageQueue Uninstall-CPerformanceCounterCategory Uninstall-CScheduledTask Uninstall-CService Uninstall-CUser Uninstall-CWindowsFeature Unlock-CIisConfigurationSection Unprotect-CString Write-CDscError Write-CFile *


Carbon_EnvironmentVariable Carbon_FirewallRule Carbon_Group Carbon_IniFile Carbon_Permission Carbon_Privilege Carbon_ScheduledTask Carbon_Service


This module has no dependencies.

Release Notes

# 2.10.2

* Fixed: Carbon fails to import if IIS isn't installed.

# 2.10.1

* Fixed: Carbon fails to import on PowerShell 4.

# 2.10.0

## TL;DR Changes

* Fixed: Carbon's backward compatible aliases replaced with shim functions. Carbon no longer aggressively loads its
* New: Carbon now warns when you're using a function shim with a deprecated name. Update your code so that all Carbon
functions have a `C` prefix. Carbon has a `Use-CarbonPrefix.ps1` script in its bin directory that will update files to
use the new prefix.
* Migrated the following functions to new Carbon.Core and Carbon.Cryptography modules. These functions still exist in
Carbon 2, so if you use all these modules together, you'll probably run into naming collisions and errors depending on
how you install, import, and use Carbon. You'll get a warning if you use any of the functions that migrated.
   * `ConvertTo-CBase64`, `Get-CPowerShellPath`, and `Invoke-CPowerShell` are now in the Carbon.Core module.
   * The `Test-COSIs32Bit` and `Test-COSIs64Bit` functions merged into a `Test-COperatingSystem` function in the
   Carbon.Core module.
   * The `Test-CPowerShellIs32Bit` and `Test-CPowerShellIs64Bit` functions merged into a `Test-CPowerShell` function in
   the Carbon.Core module.
   * New: `Convert-CSecureStringToString`, `Get-CCertificate`, `Install-CCertificate`, `Uninstall-CCertificate`,
   `Protect-CString`, and `Unprotect-CString` migrated to the Carbon.Cryptography module.
* Fixed: the `Install-CCertificate` function causes an extra file to be written to the Windows directory where private
keys are saved. Depending on your environment, this could put many, many extra very small files on the file system or a
full disk.
* Fixed: the `Install-CCertificate` function could fail to install a certificate with a private key in a remote
computer's LocalMachine store if you passed in a certificate object to install.
* Fixed: the `Install-CCertificate` function always installs a certificate even if it exists in the destination store.
Depending on your environment, this could put many, many extra very small files on the file system or a full disk. Use
the `-Force` switch to always install a certificate even if it already exists in the destination store.
* Added a `-Force` switch to the `Install-CCertificate` function to force certificates to be installed if they already
exist in the destination store.
* Fixed: `Install-Service` always writes a verbose message when installing a service.

## Naming Collisions Solved (Again)

Fixed: In Carbon 2.7.0, we added a `C` prefix to all the Carbon functions, with aliases that used the old function
names to preserve backwards-compatability. We didn't realize at the time that aliases have the highest precedence of
commands, so Carbon's aliases hid any other commands on your system that may have been named the same. Bad idea. With
this release, Carbon no longer uses aliases for backwards-compatability. Instead, it dynamically creates shim functions
named after the old functions. These shim functions write a warning that the function with the old name is deprecated
then calls the function using its new name. Hopefully, this will finally fix the name collisions problems. The function
names with out the `C` prefix will be removed in Carbon 3, so update your code to make upgrading easier.

Because Carbon creates these backwards-compatible function shims dynamically, Carbon *won't* create a shim if a
function with the old name exists. If there is a name conflict between Carbon and another module, if you import that
module first, Carbon won't export its shim function.

## Carbon on PowerShell Core

We need parts of Carbon to work on PowerShell Core. The current size of Carbon makes that hard (over 200 functions and
automated tests that take a long time). So, we're breaking Carbon into smaller modules. The new modules will all require
PowerShell 5.1+. If you use Carbon 2 and the new modules together, you'll get naming conflicts during installation and
when importing.

The first two modules are already out: Carbon.Core and Carbon.Cryptography.

## Carbon.Core

Carbon.Core will contain all the functions that are foundational to all or most other future Carbon modules, or generic
functions we feel are core to Carbon and/or PowerShell. It has no dependencies. The following functions were migrated to

* `ConvertTo-CBase64` (with some added functionality)
* `Get-CPowerShellPath`
* `Invoke-CPowerShell`
* `Test-COperatingSystem`: Replaces `Test-OSIs32Bit` and `Test-OSIs64Bit`. Tests operating system type, too, so you
can use this function instead of the `$IsWindows`, `$IsLinux`, or `$IsMacOS` variables. Works on versions of PowerShell
that don't define those variables.
* `Test-CPowerShell`: Replaces `Test-PowerShellIs32Bit` and `Test-PowerShellIs64Bit`. Tests edition, too. Use this
function instead of `$PSVersionTable.PSEdition`. Handles when $PSVersionTable doesn't have the PSEdition property.

## Carbon.Cryptography

Carbon.Crytography contains functions that are used when encrypting and decrypting strings. This is where certificate
management funtions live. These function were migrated from Carbon:

* `Convert-CSecureStringToString`
* `Get-CCertificate`: works on Linux and macOS when opening certificate files.
* `Install-CCertificate`
* `Uninstall-CCertificate`
* `Protect-CString`: works on Linux and macOS.
* `Unprotect-CString`: works on Linux and macOS.


Version History

Version Downloads Last updated
2.15.1 3,086,925 8/18/2023
2.15.0 37,691 8/17/2023
2.14.1 1,428,539 7/5/2023
2.14.1-rc1 9 7/3/2023
2.14.0 75,140 7/3/2023
2.14.0-rc1 101 5/10/2023
2.13.0 4,693,453 2/16/2023
2.13.0-rc2 91 1/20/2023
2.13.0-rc1 3 1/20/2023
2.12.0 6,366,503 8/10/2022
2.11.3 1,366,010 6/30/2022
2.11.2 3,080,939 3/28/2022
2.11.1 942,899 2/28/2022
2.11.1-alpha732 569 2/28/2022
2.11.0 3,793,607 11/3/2021
2.11.0-rc710 605 10/19/2021
2.11.0-rc707 565 10/19/2021
2.10.2 (current version) 7,138,455 3/17/2021
2.10.1 26,450 3/16/2021
2.10.1-rc660 608 3/8/2021
2.10.0 22,960 3/15/2021
2.10.0-rc651 724 2/3/2021
2.9.4 3,000,804 12/8/2020
2.9.3 607,146 11/18/2020
2.9.3-rc623 626 10/9/2020
2.9.2 14,020,727 1/17/2020
2.9.1 1,546,490 11/1/2019
2.9.0 994,980 9/19/2019
2.9.0-rc587 584 9/16/2019
2.8.1 4,228,457 3/26/2019
2.8.0 31,742 3/25/2019
2.7.0 3,922,447 12/11/2018
2.6.0 5,440,310 7/8/2018
2.5.4 206,541 6/2/2018
2.5.3 1,337 6/1/2018
2.5.2 231 6/1/2018
2.5.1 245 6/1/2018
2.5.0 828,328 6/18/2017
2.4.1 242,478 2/21/2017
2.4.0 124,346 11/9/2016
2.3.0 39,268 9/29/2016
2.2.0 22,390 5/12/2016
2.1.1 1,216 2/25/2016
2.1.0 547 2/9/2016
2.0.1 1,065 10/20/2015
2.0.0 1,171 10/11/2015
1.9.0 1,457 5/7/2015
Show less