Azure Automation / State Configuration Credential issue

[Jetelaczek]

Hi all,

I've got 2 Key vault secrets:

And I am trying to create Automation Account Credential using secret 'Admin':

$AutomationAccountName = '...'
$LocalAdminName = 'Superman'
$VaultName = '...'

$Password = Get-AzKeyVaultSecret -VaultName $VaultName -Name Admin
$AdminPassword = ($Password).SecretValue
$CredentialLocal = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $LocalAdminName, $AdminPassword

New-AzAutomationCredential -AutomationAccountName $AutomationAccountName -Name 'LocalAdmin' -Value $CredentialLocal -ResourceGroupName $RGNameSupport
-Description "Local admin password for VMs"

That works as expected and it pulls Key vault secret (password) and creates Automation Account Credentials with required user name (and I hope) Key vault secret as a password:

Then I have DSC configuration which should, as a first step, change local admin password (Superman) to the one stored in Automation Account Credentials:

All seems to be working, but once I run this DSC config, it resets the password (to something 'unknown') and I am not ale to get into my VM...
From the documentation https://docs.microsoft.com/en-us/powershell/scripting/dsc/reference/resources/windows/userresource?view=powershell-7 it looks like easiest thing, but got stuck with that...

User [string] #ResourceName
{
UserName = [string]
[ Description = [string] ]
[ Disabled = [bool] ]
[ FullName = [string] ]
[ Password = [PSCredential] ]
[ PasswordChangeNotAllowed = [bool] ]
[ PasswordChangeRequired = [bool] ]
[ PasswordNeverExpires = [bool] ]
[ DependsOn = [string[]] ]
[ Ensure = [string] { Absent | Present } ]
[ PsDscRunAsCredential = [PSCredential] ]
}

Anyone any idea how to get it working?

Thanks much,

Tomas

[Jetelaczek]

As exptected - don't ask me how, but suddenly it's working...investigating :)