Review residue from #2198, dispositioned aware-not-fix at merge time; filed per the deferral rule. The install-location guard detects mapped network drives via Get-CimInstance; on WMI-restricted images (locked-down / Server Core variants) that probe returns null and the guard treats the drive as local - fail-open for exactly the network-drive class the guard exists to refuse. UNC paths are caught lexically regardless, so the exposure is only drive-LETTER-mapped shares on WMI-restricted boxes. Fix direction: fall back to Get-PSDrive DisplayRoot (works without WMI via .NET) when the CIM probe nulls, treating a non-empty DisplayRoot as network; add an executed PS 5.1 boundary test for the fallback per the DarlingInstallLocationTests idiom, watched red. Small, low-urgency - the failure mode is the pre-#2198 behavior on a rare environment.
Review residue from #2198, dispositioned aware-not-fix at merge time; filed per the deferral rule. The install-location guard detects mapped network drives via Get-CimInstance; on WMI-restricted images (locked-down / Server Core variants) that probe returns null and the guard treats the drive as local - fail-open for exactly the network-drive class the guard exists to refuse. UNC paths are caught lexically regardless, so the exposure is only drive-LETTER-mapped shares on WMI-restricted boxes. Fix direction: fall back to Get-PSDrive DisplayRoot (works without WMI via .NET) when the CIM probe nulls, treating a non-empty DisplayRoot as network; add an executed PS 5.1 boundary test for the fallback per the DarlingInstallLocationTests idiom, watched red. Small, low-urgency - the failure mode is the pre-#2198 behavior on a rare environment.