We’ve managed to migrate to DSC for 99% of our configuration settings. Unfortunately, we still have to rely on GPO’s for user-based settings applied to groups of computers using loopback. It would be really nice to get rid of that last 1%.
Ultimately, GPO’s with loopback are changing registry settings for any user that logs into the computer. But I can’t find any hint that DSC can do such a thing. Am I missing something? Are there any plans to provide such functionality?
If the answer to both is “no”, does anyone have creative solutions? For instance, perhaps my DSC config could create a scheduled task with an “at log on” trigger which would execute as the user who just logged on? Could I make my own DSC module that would somehow modify NTUSER.DAT in C:\Users\Default, and also test/set the same settings in the registry for each existing user profile?