Carbon is a PowerShell module for automating the configuration Windows 7, 8, 2008, and 2012 and automation the installation and configuration of Windows applications, websites, and services. It can configure and manage:

* Local users and groups
* IIS websites, virtual directories, and applications
* File system, registry, and certificate permissions
* Certif
Carbon is a PowerShell module for automating the configuration Windows 7, 8, 2008, and 2012 and automation the installation and configuration of Windows applications, websites, and services. It can configure and manage:

* Local users and groups
* IIS websites, virtual directories, and applications
* File system, registry, and certificate permissions
* Certificates
* Privileges
* Services
* Encryption
* Junctions
* Hosts file
* INI files
* Performance counters
* Shares
* .NET connection strings and app settings
* And much more!

All functions are idempotent: when run multiple times with the same arguments, your system will be in the same state without failing or producing errors.

Minimum PowerShell version


There is a newer prerelease version of this module available.
See the version list below for details.

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name Carbon -RequiredVersion 2.5.4

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More


Aaron Jensen


Copyright 2011 - 2016 Aaron Jensen.



.net acl active-directory certificates com compression computer credential cryptography directory dsc dsc-resources encryption environment file-system firewall groups hosts-file http identity iis ini installers internet-explorer ip junctions msi msmq netsh networking ntfs operating-system os path performance-counters powershell principal privileges programs registry rsa scheduled-tasks security service shares sid smb ssl text trusted-host users wcf windows windows-features xml zip DscResources setup automation admin


Add-GroupMember Add-IisDefaultDocument Add-TrustedHost Assert-AdminPrivilege Assert-FirewallConfigurable Assert-Service Clear-DscLocalResourceCache Clear-MofAuthoringMetadata Clear-TrustedHost Complete-Job Compress-Item ConvertFrom-Base64 Convert-SecureStringToString ConvertTo-Base64 ConvertTo-ContainerInheritanceFlags ConvertTo-InheritanceFlag ConvertTo-PropagationFlag ConvertTo-SecurityIdentifier Convert-XmlFile Copy-DscResource Disable-AclInheritance Disable-FirewallStatefulFtp Disable-IEEnhancedSecurityConfiguration Disable-IisSecurityAuthentication Disable-NtfsCompression Enable-AclInheritance Enable-FirewallStatefulFtp Enable-IEActivationPermission Enable-IisDirectoryBrowsing Enable-IisSecurityAuthentication Enable-IisSsl Enable-NtfsCompression Expand-Item Find-ADUser Format-ADSearchFilterValue Get-ADDomainController Get-Certificate Get-CertificateStore Get-ComPermission Get-ComSecurityDescriptor Get-DscError Get-DscWinEvent Get-FileShare Get-FileSharePermission Get-FirewallRule Get-Group Get-HttpUrlAcl Get-IisApplication Get-IisAppPool Get-IisConfigurationSection Get-IisHttpHeader Get-IisHttpRedirect Get-IisMimeMap Get-IisSecurityAuthentication Get-IisVersion Get-IisWebsite Get-IPAddress Get-Msi Get-MsmqMessageQueue Get-MsmqMessageQueuePath Get-PathProvider Get-PathToHostsFile Get-PerformanceCounter Get-Permission Get-PowerShellModuleInstallPath Get-PowershellPath Get-Privilege Get-ProgramInstallInfo Get-RegistryKeyValue Get-ScheduledTask Get-ServiceAcl Get-ServiceConfiguration Get-ServicePermission Get-ServiceSecurityDescriptor Get-SslCertificateBinding Get-TrustedHost Get-User Get-WindowsFeature Get-WmiLocalUserAccount Grant-ComPermission Grant-HttpUrlPermission Grant-MsmqMessageQueuePermission Grant-Permission Grant-Privilege Grant-ServiceControlPermission Grant-ServicePermission Initialize-Lcm Install-Certificate Install-Directory Install-FileShare Install-Group Install-IisApplication Install-IisAppPool Install-IisVirtualDirectory Install-IisWebsite Install-Junction Install-Msi Install-Msmq Install-MsmqMessageQueue Install-PerformanceCounter Install-RegistryKey Install-ScheduledTask Install-Service Install-User Install-WindowsFeature Invoke-AppCmd Invoke-PowerShell Join-IisVirtualPath Lock-IisConfigurationSection New-Credential New-Junction New-RsaKeyPair New-TempDirectory Protect-String Read-File Remove-DotNetAppSetting Remove-EnvironmentVariable Remove-GroupMember Remove-HostsEntry Remove-IisMimeMap Remove-IniEntry Remove-Junction Remove-RegistryKeyValue Remove-SslCertificateBinding Reset-HostsFile Reset-MsmqQueueManagerID Resolve-FullPath Resolve-Identity Resolve-IdentityName Resolve-NetPath Resolve-PathCase Resolve-RelativePath Restart-RemoteService Revoke-ComPermission Revoke-HttpUrlPermission Revoke-Permission Revoke-Privilege Revoke-ServicePermission Set-DotNetAppSetting Set-DotNetConnectionString Set-EnvironmentVariable Set-HostsEntry Set-IisHttpHeader Set-IisHttpRedirect Set-IisMimeMap Set-IisWebsiteID Set-IisWebsiteSslCertificate Set-IisWindowsAuthentication Set-IniEntry Set-RegistryKeyValue Set-ServiceAcl Set-SslCertificateBinding Set-TrustedHost Split-Ini Start-DscPullConfiguration Test-AdminPrivilege Test-DotNet Test-DscTargetResource Test-FileShare Test-FirewallStatefulFtp Test-Group Test-GroupMember Test-Identity Test-IisAppPool Test-IisConfigurationSection Test-IisSecurityAuthentication Test-IisWebsite Test-IPAddress Test-MsmqMessageQueue Test-NtfsCompression Test-OSIs32Bit Test-OSIs64Bit Test-PathIsJunction Test-PerformanceCounter Test-PerformanceCounterCategory Test-Permission Test-PowerShellIs32Bit Test-PowerShellIs64Bit Test-Privilege Test-RegistryKeyValue Test-ScheduledTask Test-Service Test-SslCertificateBinding Test-TypeDataMember Test-UncPath Test-User Test-WindowsFeature Test-ZipFile Uninstall-Certificate Uninstall-Directory Uninstall-FileShare Uninstall-Group Uninstall-IisAppPool Uninstall-IisWebsite Uninstall-Junction Uninstall-MsmqMessageQueue Uninstall-PerformanceCounterCategory Uninstall-ScheduledTask Uninstall-Service Uninstall-User Uninstall-WindowsFeature Unlock-IisConfigurationSection Unprotect-String Write-DscError Write-File


Carbon_EnvironmentVariable Carbon_FirewallRule Carbon_Group Carbon_IniFile Carbon_Permission Carbon_Privilege Carbon_ScheduledTask Carbon_Service


This module has no dependencies.

Release Notes

## Bug Fixes

* Fixed: Carbon takes 10 to 20 seconds to load. In trying to detect if the Win32_OptionalFeature class is available on the current operating system, it was actually loading all the Win32_OptionalFeature instances. Oops. Now, it just checks for the existence of the Win32_OptionalFeature class. Load times should now be about two to three seconds. ([Fixes issue #35.](
* Import-Carbon.ps1 now hides verbose messages typically shown by Import-Module and Remove-Module cmdlets.
* Fixed: `Assert-FirewallConfigurable` fails on Windows 10.

Version History

Version Downloads Last updated
2.12.0 4,093,508 8/10/2022
2.11.3 1,362,541 6/30/2022
2.11.2 3,080,896 3/28/2022
2.11.1 942,496 2/28/2022
2.11.1-alpha732 565 2/28/2022
2.11.0 3,788,983 11/3/2021
2.11.0-rc710 599 10/19/2021
2.11.0-rc707 561 10/19/2021
2.10.2 7,135,059 3/17/2021
2.10.1 26,443 3/16/2021
2.10.1-rc660 604 3/8/2021
2.10.0 22,950 3/15/2021
2.10.0-rc651 720 2/3/2021
2.9.4 2,998,018 12/8/2020
2.9.3 607,129 11/18/2020
2.9.3-rc623 621 10/9/2020
2.9.2 14,020,537 1/17/2020
2.9.1 1,545,730 11/1/2019
2.9.0 994,763 9/19/2019
2.9.0-rc587 580 9/16/2019
2.8.1 4,228,035 3/26/2019
2.8.0 31,710 3/25/2019
2.7.0 3,915,658 12/11/2018
2.6.0 5,433,234 7/8/2018
2.5.4 (current version) 206,536 6/2/2018
2.5.3 1,334 6/1/2018
2.5.2 226 6/1/2018
2.5.1 239 6/1/2018
2.5.0 827,983 6/18/2017
2.4.1 241,923 2/21/2017
2.4.0 124,343 11/9/2016
2.3.0 39,264 9/29/2016
2.2.0 22,331 5/12/2016
2.1.1 1,213 2/25/2016
2.1.0 532 2/9/2016
2.0.1 1,056 10/20/2015
2.0.0 349 10/11/2015
1.9.0 1,436 5/7/2015
Show less