COMMAND EVERYTHING.

Get-NetworkControllerAccessControlListRule

Gets a rule from an access control list for a network controller.

Networking / Security · Risk: Low · Documentation Verified

Last verified: 2026-10-26

Microsoft NetworkController reference: Gets a rule from an access control list for a network controller. The syntax and selected example below are adapted from the pinned Windows Server 2025 reference. Module availability, target configuration and delegated permissions determine whether it can run in your environment. Documentation and parameter text: Microsoft, CC BY 4.0; formatting adapted by Cmdlet World. No execution testing is claimed.

Get-NetworkControllerAccessControlListRule [-AccessControlListId] <String[]> [[-ResourceId] <String[]>]
 -ConnectionUri <Uri> [-CertificateThumbprint <String>] [-Credential <PSCredential>] [-PassInnerException]
 [<CommonParameters>]

Copied 0 times

Required permissions

Use an account with the target resource permissions documented for Get-NetworkControllerAccessControlListRule. Modifying administrative cmdlets may require elevation or delegated administration. This catalog does not assert that ordinary users can execute the command.

Supported environments

Windows / NetworkController · Windows Server 2025 documentation; feature/module prerequisites apply

Parameters

-AccessControlListId (required): Specifies the ID of the Access Control List where the rule belongs.
-CertificateThumbprint: Specifies the certificate thumbprint of a digital public key X.509 certificate of a user account that has permission to perform this action. In order for Network Controller to authorize the account, specify this thumbprint by using the *ClientCertificateThumbprint* parameter of the Install-NetworkController or Set-NetworkController cmdlet.
-ConnectionUri (required): Specifies the Uniform Resource Identifier (URI) of the network controller that all Representational State Transfer (REST) clients use to connect to that controller.
-Credential: Specifies a user credential that has permission to perform this action. The default is the current user. Specify this parameter only if you run this cmdlet on a computer that is not part of the Network Controller cluster.
-PassInnerException: This thumbprint must also be provided in the ClientCertificateThumbprint parameter in the Install-NetworkController or Set-NetworkController cmdlet so that Network Controller can authorize this user. The thumbprint must be provided only if the network controller client authentication is X509 certificates. Get-NetworkController retrieves that client authentication and authorization information.
-ResourceId: Specifies the resource ID of the ACL rule to get.

Prerequisites

Windows with the NetworkController module and the Windows feature or management tools that provide it. Confirm target connectivity and version compatibility using the linked Microsoft reference.

Security considerations

This is a read-oriented cmdlet; protect any sensitive results and check the documented effects of your selected parameters.

Examples

Example 1

Get-NetworkControllerAccessControlListRule -ConnectionUri https://networkcontroller -AccessControlListId "Subnet1ACL"

This example retrieves all rules belonging to an Access Control List named Subnet1Acl from the Network Controller. Source: Microsoft, CC BY 4.0; transcript prompt/output removed. This example was not executed.

Sources

https://github.com/MicrosoftDocs/windows-powershell-docs/blob/b7645dd8c687139b28e845119da30ec670526507/docset/winserver2025-ps/NetworkController/Get-NetworkControllerAccessControlListRule.md

https://learn.microsoft.com/powershell/module/networkcontroller/get-networkcontrolleraccesscontrollistrule?view=windowsserver2025-ps

Personal collections

Explain or customize this command with AI

Related commands

Get-NetIPInterface

Add-MpPreference

Get-MpPerformanceReport

Add-DhcpServerInDC