Remove-PSGPOFineGrainedPasswordPolicySubject¶

Stops applying fine-grained password policies (PSO) to users and groups.

The help of the command, as Get-Help Remove-PSGPOFineGrainedPasswordPolicySubject -Full gives it.

Syntax¶

Remove-PSGPOFineGrainedPasswordPolicySubject [-Name] <string[]> [-Subject] <string[]> [-Server <string>] [-Credential <pscredential>] [-UseSsl] [-WhatIf] [-Confirm] [<CommonParameters>]

Description¶

Removes the users and groups from the "Directly Applies To" list of the PSO (msDS-PSOAppliesTo). They then get the next PSO that concerns them, or the password policy of the domain.

Parameters¶

-Name¶

Names of the PSOs (* and ? make a pattern).

Type	Required	Position	Default value	Accepts pipeline input
`String[]`	Yes	1	None	No

-Subject¶

Users and groups: account names (DOMAIN\name too), names or distinguished names.

Type	Required	Position	Default value	Accepts pipeline input
`String[]`	Yes	2	None	No

-Server¶

Domain controller to write to: its DNS name. By default, the domain of the computer.

Type	Required	Position	Default value	Accepts pipeline input
`String`	No	Named	None	No

-Credential¶

Account to write with, instead of the current identity (Kerberos).

Type	Required	Position	Default value	Accepts pipeline input
`PSCredential`	No	Named	None	No

-UseSsl¶

LDAPS (port 636): the certificate of the server must be trusted by the system.

Type	Required	Position	Default value	Accepts pipeline input
`SwitchParameter`	No	Named	None	No

-WhatIf¶

Type	Required	Position	Default value	Accepts pipeline input
`SwitchParameter`	No	Named	None	No

-Confirm¶

Type	Required	Position	Default value	Accepts pipeline input
`SwitchParameter`	No	Named	None	No

Examples¶

Example 1¶

Remove-PSGPOFineGrainedPasswordPolicySubject -Name 'PSO - Tier 1 Admins' -Subject 'tiers1'

Outputs¶

PSGPOTools.FineGrainedPasswordPolicy