Remove-QARSAccessTemplateLink

From PowerGUI Wiki

Jump to: navigation, search

Delete Access Template links in ActiveRoles Server. This cmdlet requires a connection to be established to the ActiveRoles Server Administration Service by supplying the Proxy parameter.

Contents

Syntax

Remove-QARSAccessTemplateLink [-Identity] <IdentityParameter> [-Proxy] [-Service <String>] [-ConnectionAccount <String>] [-ConnectionPassword <SecureString>] [-Credential <PSCredential>] [-Connection <ArsConnection>] [-UseGlobalCatalog] [-WhatIf] [-Confirm] [<CommonParameters>]

Detailed Description

Use this cmdlet to delete existing links of Access Templates in ActiveRoles Server. This cmdlet takes Access Template links returned by the respective Get- cmdlet, and requests ActiveRoles Server to delete those links. Each Access Template link contains information on how a certain Access Template is applied to determine access rights of a certain security principal (Trustee) on a certain directory object (securable object). For background information about Access Templates, see ActiveRoles Server Administrator Guide.

The cmdlet has optional parameters that determine the server and the security context for the operation. The connection parameters could be omitted since a connection to a server is normally established prior to using this cmdlet. In this case, the server and the security context are determined by the Connect-QADService cmdlet.

If you do not use Connect-QADService and have no connection established prior to using a cmdlet, then the connection settings, including the server and the security context, are determined by the connection parameters of the first cmdlet you use. Subsequent cmdlets will use those settings by default.



Related Commands

Parameters

Name Description Required? Pipeline Input Default Value
Identity You can specify the name, canonical name, or distinguished name (DN) of the link to delete (so as to identify the respective object located in the 'Configuration/AT Links' container in the ActiveRoles Server Configuration namespace).

Normally, pipelining is used to identify links: pass the output of the appropriate Get- cmdlet to this cmdlet. If you do so, the Identity parameter is not to be supplied on the command line. See examples.

true true (ByValue)
Proxy For parameter description, see help on the Connect-QADService cmdlet. false false
Service For parameter description, see help on the Connect-QADService cmdlet. false false
ConnectionAccount For parameter description, see help on the Connect-QADService cmdlet. false false
ConnectionPassword For parameter description, see help on the Connect-QADService cmdlet. false false
Credential For parameter description, see help on the Connect-QADService cmdlet. false false
Connection For parameter description, see help on the Connect-QADService cmdlet. false true (ByValue)
UseGlobalCatalog For parameter description, see help on the Connect-QADService cmdlet. false false
WhatIf Describes what would happen if you executed the command, without actually executing the command. false false
Confirm Prompts you for confirmation before executing the command. false false

Examples

Example 1

connect-QADService -Proxy

C:\PS>new-QARSAccessTemplateLink newATLink -AccessTemplate 'Configuration/Access Templates/Active Directory/All Objects - Full Control' -DirectoryObject 'CN=Active Directory' -Trustee 'Authenticated Users'

C:\PS>remove-QARSAccessTemplateLink newATLink -Confirm

Connect to any available Administration Service, create a new Access Template link, and then delete the link you created.

Example 2

connect-QADService -Proxy

C:\PS>get-QARSAccessTemplateLink -AccessTemplate 'AccessTemplateName' -Predefined $false | remove-QARSAccessTemplateLink -Confirm

Given the name of an Access Template, ensure that the Access Template is no longer applied to any object (delete all links that are based on that Access Template).

Example 3

connect-QADService -Proxy

C:\PS>get-QARSAccessTemplateLink -AccessTemplate 'AccessTemplateName' -DirectoryObject 'OrganizationalUnitName' -Predefined $false | remove-QARSAccessTemplateLink -Confirm

Given the name of an Access Template and the name of an organizational unit (OU), remove all security settings on that OU that are determined by that Access Template (remove all links that are based on the given Access Template and applied to the given OU).

Example 4

connect-QADService -Proxy

C:\PS>get-QARSAccessTemplateLink -AccessTemplate 'AccessTemplateName' -Trustee 'domainName\groupName' -Predefined $false | remove-QARSAccessTemplateLink -Confirm

Given the name of an Access Template and the pre-Windows 2000 name of a group, revoke all access rights from that group that are defined by using that Access Template (remove all links that are based on the given Access Template and point to the given group).

Personal tools