Networking / Security · Risk: High · Documentation Verified
Last verified: 2026-10-26
Microsoft NetworkTransition reference: Creates an IP-HTTPS configuration. The syntax and selected example below are adapted from the pinned Windows Server 2025 reference. Module availability, target configuration and delegated permissions determine whether it can run in your environment. Documentation and parameter text: Microsoft, CC BY 4.0; formatting adapted by Cmdlet World. No execution testing is claimed.
Use an account with the target resource permissions documented for New-NetIPHttpsConfiguration. Modifying administrative cmdlets may require elevation or delegated administration. This catalog does not assert that ordinary users can execute the command.
Supported environments
Windows / NetworkTransition · Windows Server 2025 documentation; feature/module prerequisites apply
Parameters
-AsJob
Runs the cmdlet as a background job. Use this parameter to run commands that take a long time to complete.
-AuthMode
Specifies the authentication mode of the IP-HTTPS configuration.The acceptable values for this parameter are: - None. Performs no client authentication during the SSL handshake. This is the default value. - Certificates. Uses client certificates to authenticate clients. This authentication mode applies only to a server interface on a computer running Windows Server® 2012 or Windows Server 2016.
-CimSession
Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such as the output of a New-CimSession or Get-CimSession cmdlet. The default is the current session on the local computer.
-Confirm
Prompts you for confirmation before running the cmdlet.
-GPOSession (required)
Specifies the Group Policy session in which to store the configuration information. You can use this parameter with the NetGPO cmdlets to aggregate multiple operations performed on a GPO. You cannot use this parameter with the *PolicyStore* parameter.
-PolicyStore (required)
Specifies the policy store to which to add the configuration profile. The acceptable values for this parameter are: - ActiveStore - PersistentStore - GPO To add the configuration profile to a GPO, specify the GPO name using the following format: Domain\GPOName You cannot use this parameter with the *GPOSession* parameter.
-Profile
Specifies the name by which to identify the IP-HTTPS configuration profile. This option is only available if the store is a GPO.
-ServerURL (required)
Specifies the URL for the server. If the profile is a client profile, Windows Server 2012 or Windows Server 2016 attempts to connect to the server URL. If the profile is a server profile, then this is the URL on which the server listens. Specify the server URL using the following format: https://myserver/IPHTTPS
-State
Specifies the state behavior of IP-HTTPS. The acceptable values for this parameter are: - Default: ---- For a server interface, IP-HTTPS is always configured. ---- For a client interface, IP-HTTPS is configured on-demand based on the other connectivity options available. Client interfaces are created with this setting by default. - Enabled. IP-HTTPS is always configured, for both server interfaces and client interfaces. Server interfaces are created with this setting by default. - Disabled. Disables the IP-HTTPS interface. - OutsideEnabled. IP-HTTPs is configured on-demand whenever the computer is outside of the corporate network.
-StrongCRLRequired
Indicates if a strong certificate revocation list (CRL) check is required before a connection. By default, the value of this parameter is $False.
-ThrottleLimit
Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0 is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.
-Type
Specifies if IP-HTTPS should start in server mode or client mode. Server mode is only allowed on Windows Server 2012.
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Prerequisites
Windows with the NetworkTransition module and the Windows feature or management tools that provide it. Confirm target connectivity and version compatibility using the linked Microsoft reference.
Security considerations
This cmdlet changes system state. Review every target and parameter in the official reference, test outside production, and prepare an appropriate backup or rollback. Do not execute the example automatically.
This command creates an IP-HTTPS configuration named Redmond with the specified server URL https://contoso.com:443/IPHTTPs in the GPO named TestGPO. Source: Microsoft, CC BY 4.0; transcript prompt/output removed. This example was not executed.