Add-QADPasswordSettingsObjectAppliesTo
From PowerGUI Wiki
Add PSO links on a Password Settings object. Windows Server 2008 is required.
Contents |
Syntax
Add-QADPasswordSettingsObjectAppliesTo [-Identity] <IdentityParameter> [-AppliesTo] <IdentityParameter[]> [-Proxy] [-Service <String>] [-ConnectionAccount <String>] [-ConnectionPassword <SecureString>] [-Credential <PSCredential>] [-Connection <ArsConnection>] [-UseGlobalCatalog] [-WhatIf] [-Confirm] [<CommonParameters>]
Detailed Description
Use this cmdlet to apply a Password Settings object to users or global security groups. You can specify a list of users and groups, separating the list entries by commas. The cmdlet adds (appends) the specified distinguished names of the users or groups to the 'msDS-PSOAppliesTo' attribute of the Password Settings object, without removing the names that already exist in the attribute.
The cmdlet has optional parameters that determine the server and the security context for the operation. Normally, the connection parameters could be omitted so far as a connection to a server is established prior to using the cmdlet. In this case, the server and the security context are determined by the Connect-QADService cmdlet.
If you do not use Connect-QADService and have no connection established prior to using a cmdlet, then the connection settings, including the server and the security context, are determined by the connection parameters of the first cmdlet you use. Subsequent cmdlets will use those settings by default.
Related Commands
Parameters
| Name | Description | Required? | Pipeline Input | Default Value |
|---|---|---|---|---|
| Identity | Specify the DN or GUID of the Password Settings object.
This parameter is optional since you can pipe into this cmdlet the object returned by the Get-QADPasswordSettingsObject cmdlet, to have that object identify the Password Settings object to act upon. | true | true (ByValue) | |
| AppliesTo | Specify a list of users and groups to which you want the Password Settings object to apply. Each list entry is the DN, SID, GUID, UPN or Domain\Name of a user or group. Separate the list entries by commas. | true | true (ByValue) | |
| Proxy | For parameter description, see help on the Connect-QADService cmdlet. | false | false | |
| Service | For parameter description, see help on the Connect-QADService cmdlet. | false | false | |
| ConnectionAccount | For parameter description, see help on the Connect-QADService cmdlet. | false | false | |
| ConnectionPassword | For parameter description, see help on the Connect-QADService cmdlet. | false | false | |
| Credential | For parameter description, see help on the Connect-QADService cmdlet. | false | false | |
| Connection | For parameter description, see help on the Connect-QADService cmdlet. | false | true (ByValue) | |
| UseGlobalCatalog | For parameter description, see help on the Connect-QADService cmdlet. | false | false | |
| WhatIf | Describes what would happen if you executed the command, without actually executing the command. | false | false | |
| Confirm | Prompts you for confirmation before executing the command. | false | false |
Examples
Example 1
Add-QADPasswordSettingsObjectAppliesTo 'myPso1' -AppliesTo 'JSmith' | Format-List
Apply the Password Settings object to the user object, and display operation results.
Example 2
Get-QADPasswordSettingsObject -Name 'myPso1' | Add-QADPasswordSettingsObjectAppliesTo -AppliesTo 'JSmith' | Remove-QADPasswordSettingsObjectAppliesTo -AppliesTo 'myDomain\Account Operators' | Format-List
Find a Password Settings object by name, add a PSO link that points to the user object (so the Password Settings object applies to that user), remove a PSO link that points to the group (so the Password Settings object no longer applies to that group), and display operation results.
