Set-PSGPOFineGrainedPasswordPolicy¶

Changes the settings, the name or the protection of fine-grained password policies (PSO).

L'aide de la commande, telle que Get-Help Set-PSGPOFineGrainedPasswordPolicy -Full la donne (en anglais).

Syntaxe¶

Set-PSGPOFineGrainedPasswordPolicy [-Name] <string[]> [-NewName <string>] [-Precedence <int>] [-MinPasswordLength <int>] [-PasswordHistoryCount <int>] [-ComplexityEnabled <bool>] [-ReversibleEncryptionEnabled <bool>] [-MinPasswordAge <timespan>] [-MaxPasswordAge <timespan>] [-LockoutThreshold <int>] [-LockoutDuration <timespan>] [-LockoutObservationWindow <timespan>] [-Description <string>] [-ProtectedFromAccidentalDeletion <bool>] [-Server <string>] [-Credential <pscredential>] [-UseSsl] [-WhatIf] [-Confirm] [<CommonParameters>]

Description¶

As the properties of a PSO in the Active Directory Administrative Center: only the settings given change. A value is changed only if the domain still has the one read: a PSO another console changed meanwhile is refused (run the command again). The users and groups it applies to change with Add- and Remove-PSGPOFineGrainedPasswordPolicySubject.

Paramètres¶

-Name¶

Names of the PSOs (* and ? make a pattern).

-NewName¶

New name of the PSO (one PSO only).

-Precedence¶

Priority of the PSO: of the PSOs that concern a user, the lowest precedence applies (1 or more).

-MinPasswordLength¶

Minimum length of the passwords, in characters (0 to 255).

-PasswordHistoryCount¶

Number of passwords remembered, that a new password cannot repeat (0 to 1024).

-ComplexityEnabled¶

The passwords must meet the complexity requirements.

-ReversibleEncryptionEnabled¶

Stores the passwords with a reversible encryption (to be avoided).

-MinPasswordAge¶

Time before a password can be changed again (0 for none).

-MaxPasswordAge¶

Time after which a password must be changed; zero: the passwords never expire.

-LockoutThreshold¶

Number of failed logon attempts that lock the account out; 0: never locked out.

-LockoutDuration¶

Time an account stays locked out; zero: until an administrator unlocks it.

-LockoutObservationWindow¶

Time after which the count of failed logon attempts is reset (no longer than LockoutDuration).

-Description¶

What the PSO is for.

-ProtectedFromAccidentalDeletion¶

Denies everyone to delete the PSO; $false lets it be deleted.

-Server¶

Domain controller to write to: its DNS name. By default, the domain of the computer.

-Credential¶

Account to write with, instead of the current identity (Kerberos).

-UseSsl¶

LDAPS (port 636): the certificate of the server must be trusted by the system.

-WhatIf¶

-Confirm¶

Exemples¶

Exemple 1¶

Set-PSGPOFineGrainedPasswordPolicy -Name 'PSO - Tier 1 Admins' -MinPasswordLength 18 -LockoutDuration 0

Exemple 2¶

Set-PSGPOFineGrainedPasswordPolicy -Name 'PSO - Old' -ProtectedFromAccidentalDeletion $false
Remove-PSGPOFineGrainedPasswordPolicy -Name 'PSO - Old'

Sorties¶

• PSGPOTools.FineGrainedPasswordPolicy

Voir aussi¶

• Get-PSGPOFineGrainedPasswordPolicy
• Toutes les commandes