Set-AdmPwdReadPasswordPermission

SYNOPSIS

Delegates the permission to read passwords of local admin account of computers in given AD container.

SYNTAX

Set-AdmPwdReadPasswordPermission [-Identity] <String> [-AllowedPrincipals] <String[]> [[-ForestDnsName] <String>] [<CommonParameters>]

DESCRIPTION

Delegates the permission to read passwords of local admin account of computers in given AD container to security principals (users or groups) specified in AllowedPrincipals parameter

EXAMPLES

Example 1

Set-AdmPwdReadPasswordPermission -Identity:MyComputers -AllowedPrincipals:MyDomain\AdmPwdPasswordReaders

Allows members of group MyDomain\AdmPwdPasswordReaders to read local admin password of computers in container MyComputers

PARAMETERS

-Identity

Identification of container where to set permissions.
Permissions are then inherited to computers within this container and subcontainers.
Identity can be either name or distinguishedName of the container, or distinguishedName of computer object (so you can delegate the permission on individual computer objects)

Type: String
Parameter Sets: (All)
Aliases: OrgUnit

Required: True
Position: 0
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: False

-AllowedPrincipals

List of security principals (user accounts of groups) to delegate the permission to

Type: String[]
Parameter Sets: (All)
Aliases:

Required: True
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ForestDnsName

DNS Name of AD forest where to find. If not specified, current forest is used.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: 2
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

System.String[]

System.String

OUTPUTS

AdmPwd.Types.ObjectInfo

NOTES

Caller needs to have permission to modify ACL on respective container.

RELATED LINKS