Azure Custom Script Extension. Execute script as another user Azure Custom Script Extension. Execute script as another user powershell powershell

Azure Custom Script Extension. Execute script as another user


Maybe the problem is cause by Azure Custom Script Extension running command2.ps1 as System account?

Yes, Azure Custom Script Extension runs as the System account . This means using the Azure VM Custom Script Extension we can run any sort of code even if it requires highest system privileges. As following picture, we can see the CustomScriptHandler.exe process runs as the System account.

enter image description here

More about Understanding Azure Custom Script Extension, refer to this article.

Please, help me make the script work.

Your scripts are OK. This issue is about system privilege. According to your errors log, if you want to run your scripts through Azure custom extension script, you can try to solve it by assign permissions to System account and change some configurations on your VM. More about how to resolve the errors, you can refer to this link.


you can use Azure DSC extension to work around that

"properties": {    "publisher": "Microsoft.Powershell",    "type": "DSC",    "typeHandlerVersion": "2.20",    "autoUpgradeMinorVersion": true,    "settings": {        "configuration": {            "url": "url",            "script": "script.ps1",            "function": "function"        },        "configurationArguments": {            "regular": "arguments"        }    },    "protectedSettings": {        "configurationArguments": {            "DomainCredentials": {                "userName": "user",                "password": "password"            }        }    }

And in your DSC configuration add a parameter like this:

[Parameter(Mandatory)] # doesn't have to be mandatory, just copy pasting[System.Management.Automation.PSCredential]$DomainCredentials,

Parameter name in the template must match parameter name in the dsc. You can probably figure out something similar using powershell. I personally never tried, but it should be possible.