Get-PSGPOFineGrainedPasswordPolicy¶
The fine-grained password policies (password settings objects, PSO) of the domain.
L'aide de la commande, telle que Get-Help Get-PSGPOFineGrainedPasswordPolicy -Full la donne (en anglais).
Syntaxe¶
Get-PSGPOFineGrainedPasswordPolicy [[-Name] <string[]>] [-Server <string>] [-Credential <pscredential>] [-UseSsl] [<CommonParameters>]
Description¶
As the Password Settings Container of the Active Directory Administrative Center: the msDS-PasswordSettings objects of CN=Password Settings Container,CN=System of the domain, by order of priority (the lowest precedence first), with their settings and the users and groups each one directly applies to. Windows and Samba AD (4.9 and later) domains, read over LDAP from Windows or Linux.
By default, only the administrators of the domain read the PSOs: another account gets none. A MaxPasswordAge of zero means that the passwords never expire, a LockoutDuration of zero that a locked out account stays locked until an administrator unlocks it.
Paramètres¶
-Name¶
Names of the PSOs (* and ? make a pattern); all of them by default.
| Type | Obligatoire | Position | Valeur par défaut | Accepte le pipeline |
|---|---|---|---|---|
String[] |
Non | 1 | * |
Non |
-Server¶
Domain controller to read the domain from: its DNS name. By default, the domain of the computer (see Get-PSGPODirectory).
| Type | Obligatoire | Position | Valeur par défaut | Accepte le pipeline |
|---|---|---|---|---|
String |
Non | Nommé | Aucune | Non |
-Credential¶
Account to read the domain with, instead of the current identity (Kerberos).
| Type | Obligatoire | Position | Valeur par défaut | Accepte le pipeline |
|---|---|---|---|---|
PSCredential |
Non | Nommé | Aucune | Non |
-UseSsl¶
LDAPS (port 636): the certificate of the server must be trusted by the system.
| Type | Obligatoire | Position | Valeur par défaut | Accepte le pipeline |
|---|---|---|---|---|
SwitchParameter |
Non | Nommé | Aucune | Non |
Exemples¶
Exemple 1¶
Get-PSGPOFineGrainedPasswordPolicy | Format-Table Name, Precedence, MinPasswordLength, MaxPasswordAge, AppliesTo
Exemple 2¶
# Linux, Samba AD: Kerberos ticket first
kinit administrator@HARDENBOX.LABO
Get-PSGPOFineGrainedPasswordPolicy -Server dc.hardenbox.labo -Name 'PSO - Tier*'
Sorties¶
PSGPOTools.FineGrainedPasswordPolicy