Carbon is a PowerShell module for automating the configuration Windows 7, 8, 2008, and 2012 and automation the installation and configuration of Windows applications, websites, and services. It can configure and manage:

* Local users and groups
* IIS websites, virtual directories, and applications
* File system, registry, and certificate permissions
* Certif
Carbon is a PowerShell module for automating the configuration Windows 7, 8, 2008, and 2012 and automation the installation and configuration of Windows applications, websites, and services. It can configure and manage:

* Local users and groups
* IIS websites, virtual directories, and applications
* File system, registry, and certificate permissions
* Certificates
* Privileges
* Services
* Encryption
* Junctions
* Hosts file
* INI files
* Performance counters
* Shares
* .NET connection strings and app settings
* And much more!

All functions are idempotent: when run multiple times with the same arguments, your system will be in the same state without failing or producing errors.

Minimum PowerShell version


Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name Carbon -RequiredVersion 2.4.1

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deloy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More


Aaron Jensen


Copyright 2011 - 2016 Aaron Jensen.



.net acl active-directory certificates com compression computer credential cryptography directory dsc dsc-resources encryption environment file-system firewall groups hosts-file http identity iis ini installers internet-explorer ip junctions msi msmq netsh networking ntfs operating-system os path performance-counters powershell principal privileges programs registry rsa scheduled-tasks security service shares sid smb ssl text trusted-host users wcf windows windows-features xml zip DscResources setup automation admin


Add-GroupMember Add-IisDefaultDocument Add-TrustedHost Assert-AdminPrivilege Assert-FirewallConfigurable Assert-Service Clear-DscLocalResourceCache Clear-MofAuthoringMetadata Clear-TrustedHost Complete-Job Compress-Item ConvertFrom-Base64 Convert-SecureStringToString ConvertTo-Base64 ConvertTo-ContainerInheritanceFlags ConvertTo-InheritanceFlag ConvertTo-PropagationFlag ConvertTo-SecurityIdentifier Convert-XmlFile Copy-DscResource Disable-AclInheritance Disable-FirewallStatefulFtp Disable-IEEnhancedSecurityConfiguration Disable-IisSecurityAuthentication Disable-NtfsCompression Enable-AclInheritance Enable-FirewallStatefulFtp Enable-IEActivationPermission Enable-IisDirectoryBrowsing Enable-IisSecurityAuthentication Enable-IisSsl Enable-NtfsCompression Expand-Item Find-ADUser Format-ADSearchFilterValue Get-ADDomainController Get-Certificate Get-CertificateStore Get-ComPermission Get-ComSecurityDescriptor Get-DscError Get-DscWinEvent Get-FileShare Get-FileSharePermission Get-FirewallRule Get-Group Get-HttpUrlAcl Get-IisApplication Get-IisAppPool Get-IisConfigurationSection Get-IisHttpHeader Get-IisHttpRedirect Get-IisMimeMap Get-IisSecurityAuthentication Get-IisVersion Get-IisWebsite Get-IPAddress Get-Msi Get-MsmqMessageQueue Get-MsmqMessageQueuePath Get-PathProvider Get-PathToHostsFile Get-PerformanceCounter Get-Permission Get-PowerShellModuleInstallPath Get-PowershellPath Get-Privilege Get-ProgramInstallInfo Get-RegistryKeyValue Get-ScheduledTask Get-ServiceAcl Get-ServiceConfiguration Get-ServicePermission Get-ServiceSecurityDescriptor Get-SslCertificateBinding Get-TrustedHost Get-User Get-WindowsFeature Get-WmiLocalUserAccount Grant-ComPermission Grant-HttpUrlPermission Grant-MsmqMessageQueuePermission Grant-Permission Grant-Privilege Grant-ServiceControlPermission Grant-ServicePermission Initialize-Lcm Install-Certificate Install-Directory Install-FileShare Install-Group Install-IisApplication Install-IisAppPool Install-IisVirtualDirectory Install-IisWebsite Install-Junction Install-Msi Install-Msmq Install-MsmqMessageQueue Install-PerformanceCounter Install-RegistryKey Install-ScheduledTask Install-Service Install-User Install-WindowsFeature Invoke-AppCmd Invoke-PowerShell Join-IisVirtualPath Lock-IisConfigurationSection New-Credential New-Junction New-RsaKeyPair New-TempDirectory Protect-String Read-File Remove-DotNetAppSetting Remove-EnvironmentVariable Remove-GroupMember Remove-HostsEntry Remove-IisMimeMap Remove-IniEntry Remove-Junction Remove-RegistryKeyValue Remove-SslCertificateBinding Reset-HostsFile Reset-MsmqQueueManagerID Resolve-FullPath Resolve-Identity Resolve-IdentityName Resolve-NetPath Resolve-PathCase Resolve-RelativePath Restart-RemoteService Revoke-ComPermission Revoke-HttpUrlPermission Revoke-Permission Revoke-Privilege Revoke-ServicePermission Set-DotNetAppSetting Set-DotNetConnectionString Set-EnvironmentVariable Set-HostsEntry Set-IisHttpHeader Set-IisHttpRedirect Set-IisMimeMap Set-IisWebsiteID Set-IisWebsiteSslCertificate Set-IisWindowsAuthentication Set-IniEntry Set-RegistryKeyValue Set-ServiceAcl Set-SslCertificateBinding Set-TrustedHost Split-Ini Start-DscPullConfiguration Test-AdminPrivilege Test-DotNet Test-DscTargetResource Test-FileShare Test-FirewallStatefulFtp Test-Group Test-GroupMember Test-Identity Test-IisAppPool Test-IisConfigurationSection Test-IisSecurityAuthentication Test-IisWebsite Test-IPAddress Test-MsmqMessageQueue Test-NtfsCompression Test-OSIs32Bit Test-OSIs64Bit Test-PathIsJunction Test-PerformanceCounter Test-PerformanceCounterCategory Test-Permission Test-PowerShellIs32Bit Test-PowerShellIs64Bit Test-Privilege Test-RegistryKeyValue Test-ScheduledTask Test-Service Test-SslCertificateBinding Test-TypeDataMember Test-UncPath Test-User Test-WindowsFeature Test-ZipFile Uninstall-Certificate Uninstall-Directory Uninstall-FileShare Uninstall-Group Uninstall-IisAppPool Uninstall-IisWebsite Uninstall-Junction Uninstall-MsmqMessageQueue Uninstall-PerformanceCounterCategory Uninstall-ScheduledTask Uninstall-Service Uninstall-User Uninstall-WindowsFeature Unlock-IisConfigurationSection Unprotect-String Write-DscError Write-File


Carbon_EnvironmentVariable Carbon_FirewallRule Carbon_Group Carbon_IniFile Carbon_Permission Carbon_Privilege Carbon_ScheduledTask Carbon_Service


This module has no dependencies.

Release Notes

## Bug Fixes

* Fixed: `Carbon_Permission` fails when revoking permissions and the `Permissions` property doesn''t have a value.
* Fixed: `Protect-String` doesn't convert secure strings properly so they get encrypted with extra bytes in them.
* Fixed: `Revoke-Permission' fails when an identity has multiple access control entries on an item. Thanks to [bozho_]( for reporting [issue #221]( and contributing the fix.
* Fixed: `Compress-Item`' writes an error when using the `WhatIf` switch.
* Fixed: `Install-IisWebsite` help examples contain invalid/broken code (thanks to John Mitchell for reporting).
* Fixed: `Install-Service` fails when password contains double quote character, i.e. `"` (fixes [issue #219](
* Fixed: `Read-File` and `Write-File` fail to retry writing to a locked file when `$Global:Error` is full. Fixes [issue #217](
* Fixed: `Get-FirewallRule` sets the `EdgeTraversalPolicy` to `DeferUser` on rules whose policy is "defer to application".
* Fixed: `Get-FirewallRule` fails on non-english-speaking computers. (It was parsing the output of `netsh advfirewall`. Now it uses the Windows Firewall with Advanced Security API.) [Fixes [issue #208](
* Fixed: `Get-FirewallRule` incorrectly parsed interface types. It assumed interface type was one of multiple values. In reality, it can be set to one or more different values. The underlying enumeration and its values have been updated to be a set of flags (i.e. a bit field).
* Fixed: `Carbon_FirewallRule` fails when Profile property has more than one value.
* Fixed: `Get-ScheduledTask` doesn't handle when a scheduled task doesn't exist on Windows 2008.

Version History

Version Downloads Last updated
2.7.0 124,174 12/11/2018
2.6.0 5,408,601 7/8/2018
2.5.4 206,473 6/2/2018
2.5.3 1,279 6/1/2018
2.5.2 164 6/1/2018
2.5.1 184 6/1/2018
2.5.0 822,494 6/18/2017
2.4.1 (current version) 236,885 2/21/2017
2.4.0 121,896 11/9/2016
2.3.0 39,198 9/29/2016
2.2.0 22,111 5/12/2016
2.1.1 1,142 2/25/2016
2.1.0 454 2/9/2016
2.0.1 952 10/20/2015
2.0.0 81 10/11/2015
1.9.0 259 5/7/2015
Show less