Feature request: additional support for servicerule properties

[Safetybrick]

Is your feature request related to a problem? Please describe.
While testing the deployment of the Windows 2012 R2 STIGs in my development environment I discovered there is a limitation to the exception properties of the servicerule type which does not allow you to apply an exception for the ensure property. In our environment we have services that are removed/uninstalled rather than disabled as stated in the STIG rules.

Example: V-26604
"Verify the Peer Network Identity Manager (p2pimsvc) service is not installed or is disabled."

Describe the solution you'd like
Add additional support for the ensure property to allow DSC to check if the service is installed or not.

[bcwilhite]

@Safetybrick What version of PowerSTIG are you using?

[Safetybrick]

currently 3.3.0

[bcwilhite]

@Safetybrick Correct, the way the DSC resource script is setup for ServiceRule, the Ensure property isn't passed to the composite. Changes would have to be made to do so. Something we could look at addressing with a possible release.

[Safetybrick]

I was also glancing over the hard code documentation in the wiki. in the interim could it be utilized as a short term solution at the moment?

[bcwilhite]

No, so the Dsc Resource script would have to be modified to reference the Ensure property for the Service dsc resource.

$rules = $stig.RuleList | Select-Rule -Type ServiceRule

foreach ( $rule in $rules )
{
    Service (Get-ResourceTitle -Rule $rule)
    {
        Name        = $rule.ServiceName
        State       = $rule.ServiceState
        StartupType = $rule.StartupType
    }
}

DSCResources\Resources\windows.Service.ps1 Would have to be modified in order to accept the Ensure property in order for it to work.