external help file | Module Name | schema |
---|---|---|
AdmPwd.PS.dll-Help.xml |
AdmPwd.PS |
2.0.0 |
Returns parameters of PDS service related to access check process.
Get-AdmPwdPdsAccessControlParameters [-Pds] <PdsEndpoint> [<CommonParameters>]
Get-AdmPwdPdsAccessControlParameters [-PdsName] <String> [<CommonParameters>]
PDS supports the following switches that influence access control decisions:
- HonorFullControl: allows password reads/resets also to principals who have Full Control permission on object
- HonorAllExtendedRights: allows password reads/resets also to principals who have All Extended Rights permission on object
- HonorLocalGroupsFromRemoteComputerDomain: In multi-domain AD forests, PDS reads local group membership of caller in domain to see if local group gives Read or Reset password permision, and honors such permissions.
Flags are stored in PDS.config file and are retrieved by this command.
Get-AdmPwdPds | Get-AdmPwdPdsAccessControlParameters
Gets parameters of PDS access control process.
Instance of PDS as returned by Get-AdmPwdPds command
Type: PdsEndpoint
Parameter Sets: Pds
Aliases:
Required: True
Position: 0
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: False
Name of instance of PDS - DNS name of machine hosting PDS service
Type: String
Parameter Sets: PdsName
Aliases:
Required: True
Position: 0
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: False
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.
Object representing parameters of PDS access control process.
Caller does not have to be PDS admin. Call is not audited.