Introducing windows_admin_check and config option to make it fatal.

1 files changed, 21 insertions, 0 deletions

diff --git a/lib/chef/client.rb b/lib/chef/client.rb
index db7af934c3..fbae0ac3ee 100644
--- a/lib/chef/client.rb
+++ b/lib/chef/client.rb
@@ -443,6 +443,10 @@ class Chef
         Chef::Log.info("Starting Chef Run for #{node.name}")
         run_started
 
+        if Chef::Platform.windows?
+          do_windows_admin_check
+        end
+
         run_context = setup_run_context
 
         converge(run_context)
@@ -518,6 +522,23 @@ class Chef
       end
 
     end
+
+    def do_windows_admin_check
+      unless Chef::Config[:solo]
+        require 'chef/win32/security'
+
+        if !Chef::ReservedNames::Win32::Security.has_admin_rights?
+          message = "chef-client doesn't have administrator privilages on node #{node_name}."
+          if Chef::Config[:fatal_windows_admin_check]
+            Chef::Log.fatal(message)
+            Chef::Log.fatal("fatal_windows_admin_check is set to TRUE.")
+            raise Chef::Exceptions::WindowsNotAdmin, message
+          else
+            Chef::Log.warn("#{message} This might cause unexpected resource failures.")
+          end
+        end
+      end
+    end
   end
 end