Microsoft365DSC Drift Report

[datanet76]

No description provided.

[NikCharlebois]

Can you provide additional details as to what the issue at hand is?

[datanet76]

Thanks for the response. 1. This script won’t run when scheduled on task manager but runs normally on powershel 7 2. We only want the report send via email if there is a drift or changes to the tenant. If there is no change, no email should sent for status. Sent from Yahoo Mail for iPhone On Thursday, February 17, 2022, 1:57 PM, Nik Charlebois ***@***.***> wrote: Can you provide additional details as to what the issue at hand is? — Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android. You are receiving this because you authored the thread.Message ID: ***@***.***>

[NikCharlebois]

What errors are you getting when running it from a Scheduled Task?

[datanet76]

Here you go Transcript started, output file is C:\DSCLog.txt Monday, February 21, 2022 10:14:41 PM PS>TerminatingError(Import-Clixml): "Error occurred during a cryptographic operation." Import-Clixml: C:\CompareAndEmail1.ps1:11 Line | 11 | $Credential = Import-Clixml C:\CredDev.xml | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | Error occurred during a cryptographic operation. Import-Clixml: C:\CompareAndEmail1.ps1:11 Line | 11 | $Credential = Import-Clixml C:\CredDev.xml | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | Error occurred during a cryptographic operation. InvalidOperation: You cannot call a method on a null-valued expression. InvalidOperation: You cannot call a method on a null-valued expression. PS>TerminatingError(Disconnect-MgGraph): "No application to sign out from."

[Kirikou974]

Hello,

Every -CliXml command uses data protection API to encrypt data using current user information.
So my guess is that you have some sort of secure string in your creddev.xml file.
The secure string was encrypted using a key tied to a specific account on a specific machine hence the error message you get.
You need to create a key and store it somewhere your scheduled task account has access to.
Have a look at this discussion: https://stackoverflow.com/questions/54923903/powershell-script-not-working-using-import-clixml-command
And this article : https://www.altaro.com/msp-dojo/encrypt-password-powershell/
This doesn't have much to do with M365DSC IMHO.

[ykuijs]

This is about a custom script, but the script itself isn't provided. This makes troubleshooting or providing pointers very difficult.

Also, as mentioned by Kirikou974, this issue isn't related to M365DSC specific, but is about the DPAPI. That is why I am closing the issue now.

If you have any more questions, please reopen the issue and provide a little more information, preferably the script you are having issues with.

[Nilas1994]

i precisely got this problem too when the script is at startup it looks like it is relying on some services that aren't fully initialized at startup so i implemented a event based check until all services are running and delay the script for some time. try to implement at retry mechanism in your script could help.