Microsoft SyncShare reference: Modifies the settings for a Sync Share. The syntax and selected example below are adapted from the pinned Windows Server 2025 reference. Module availability, target configuration and delegated permissions determine whether it can run in your environment. Documentation and parameter text: Microsoft, CC BY 4.0; formatting adapted by Cmdlet World. No execution testing is claimed.
Use an account with the target resource permissions documented for Set-SyncShare. Modifying administrative cmdlets may require elevation or delegated administration. This catalog does not assert that ordinary users can execute the command.
Supported environments
Windows / SyncShare · Windows Server 2025 documentation; feature/module prerequisites apply
Parameters
-AsJob
Runs the cmdlet as a background job. Use this parameter to run commands that take a long time to complete.
-CimSession
Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such as the output of a New-CimSession or Get-CimSession cmdlet. The default is the current session on the local computer.
-Confirm
Prompts you for confirmation before running the cmdlet.
-Description
Specifies a description for a sync share configuration. The description appears in Server Manager and in Windows PowerShell but is not visible to end users. The description can have a maximum of a 150 characters.
-FallbackEnterpriseID
Specifies the fallback Enterprise ID that the Sync Share uses if it cannot successfully query Active Directory® Domain Services (nextref_adds). If the server cannot successfully query nextref_adds, the server uses the fully qualified domain name (FQDN) of the sync server as the fallback Enterprise ID unless you specify a different Enterprise ID by using this parameter. The Enterprise ID is issued by the work folders client to encrypt data on the PC or device. The Enterprise ID is typically constructed by querying nextref_adds for the primary SMTP address of the user, removing the username and ampersand (user@), and sending the remainder to the client as the Enterprise ID. For instance, EvanNarvaez@Contoso.com yields the contoso.com Enterprise ID.
-InheritParentFolderPermission
Indicates that the Sync Share inherits the permissions of the parent folder. If you specify this parameter, the user folder inherits permissions from the parent folder of the Sync Share, and administrators can access the data. If you do not specify this parameter, by default each user is granted exclusive access to their user folder, and administrators have no access rights.
-InputObject (required)
Specifies the input object that is used in a pipeline command.
-MaxUploadFile
Specifies the maximum file size, in bytes, that users can upload to the server. The minimum value that you can specify is 1 MB.
-Name (required)
Specifies a name for the Sync Share as an array. The name that you specify has the following requirements: - The name must be unique on the sync server - The name can have a maximum of 75 characters - You cannot start or end a name with a space - You cannot end a name with a period - You cannot used a reserved name, such as COM1, LPT1, or NUL - You cannot use the following characters: \:\"/\\\\|?*
-PassThru
Returns an object representing the item with which you are working. By default, this cmdlet does not generate any output.
-PasswordAutolockExcludeDomain
Specifies a list of domain names in FQDN format whose clients are to be exempted from the password policy. If the RequirePasswordAutoLock property on the Sync Share is false, then this parameter has no effect. If RequirePasswordAutoLock is true, then clients that are members of the specified domains are not requested by work folders to enforce password length and lock policies on the device. It is assumed that their security is managed by the Group Policy of their domain.
-RequireEncryption
Indicates whether the sync server requests that the contents of work folders be encrypted on each PC and device that accesses the Sync Share.
-RequirePasswordAutoLock
Indicates whether the device meets the following policies: - Password minimum length of six characters - Lock screen activates after a maximum of 15 minutes - User account lockout after a maximum of 10 failed sign-in attempts
-ThrottleLimit
Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0 is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.
-User
Specifies an array of security groups or users who are allowed to sync data with this Sync Share. Add accounts or security groups in Security Accounts Manager (SAM) account format.
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Prerequisites
Windows with the SyncShare module and the Windows feature or management tools that provide it. Confirm target connectivity and version compatibility using the linked Microsoft reference.
Security considerations
This cmdlet changes system state. Review every target and parameter in the official reference, test outside production, and prepare an appropriate backup or rollback. Do not execute the example automatically.
Examples
Example 1: Modify a sync share to enable inherited permissions
This command modifies settings on the share named Share01, and sets the *InheritParentFolderPermission* parameter to enable the share to inherit permissions from the parent folder. Source: Microsoft, CC BY 4.0; transcript prompt/output removed. This example was not executed.