Microsoft Desired State Configuration

What Microsoft Desired State Configuration is

Microsoft Desired State Configuration is a free, open-source tool for defining and managing system configurations across Linux, macOS, and Windows. It uses policy as code to describe the state systems should maintain. Drift detection can identify when a system no longer matches that target, while patch management supports keeping systems aligned with intended configurations. Compliance reporting provides information about configuration status. The deployment model is self-hosted, so the software runs within an organization’s own hosting setup rather than as a hosted service. Its listed capabilities focus on setting configuration rules and identifying deviations from them across the supported operating systems. Microsoft provides an overview of Desired State Configuration through its PowerShell documentation. With no listed license charge and support for three operating systems, it can be considered by teams that want to manage configuration themselves and need a way to track drift and report compliance.

Who it suits

It suits teams managing configuration across Linux, macOS, or Windows systems that can handle self-hosting.

Limits

The deployment model is self-hosted, so hosting responsibility remains with the organization. The listed platform coverage is Linux, macOS, and Windows.

Getting started

1. Open the Microsoft Learn Desired State Configuration overview
2. Use the open-source software under its free pricing model
3. Deploy it in a self-hosted environment
4. Apply policy-as-code configurations to Linux, macOS, or Windows systems
5. Configure drift detection, patch management, and compliance reporting

Verdict

Desired State Configuration combines policy-as-code configuration with drift detection, patch management, and reporting. Its self-hosted model makes responsibility for hosting a key consideration.