COMMAND EVERYTHING.
Practical commands. Clear explanations. Authoritative sources.
2557 published commands · 2545 documentation-verified · 12 awaiting review · Ask Cmdlet AI
Adds central access rules to a central access policy in Active Directory.
Add-ADCentralAccessPolicyMember [-WhatIf] [-Confirm] [-AuthType <ADAuthType>]
[-Credential <PSCredential>] [-Identity] <ADCentralAccessPolicy>
[-Members] <ADCentralAccessRule[]> [-PassThru] [-Server <String>] [<CommonParameters>]Copied 1 timeActive DirectoryCreates a RODC account that can be used to install an RODC in Active Directory.
Add-ADDSReadOnlyDomainControllerAccount [-SkipPreChecks]
-DomainControllerAccountName <String> -DomainName <String>
-SiteName <String> [-AllowPasswordReplicationAccountName <String[]>]
[-Credential <PSCredential>] [-DelegatedAdministratorAccountName <String>]
[-DenyPasswordReplicationAccountName <String[]>] [-NoGlobalCatalog] [-InstallDns]
[-ReplicationSourceDC <String>] [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryAdds users, computers, and groups to the allowed or denied list of a read-only domain controller password replication policy.
Add-ADDomainControllerPasswordReplicationPolicy [-WhatIf] [-Confirm]
-AllowedList <ADPrincipal[]> [-AuthType <ADAuthType>] [-Credential <PSCredential>]
[[-Identity] <ADDomainController>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryApplies a fine-grained password policy to one more users and groups.
Add-ADFineGrainedPasswordPolicySubject [-WhatIf] [-Confirm] [-AuthType <ADAuthType>]
[-Credential <PSCredential>] [-Identity] <ADFineGrainedPasswordPolicy>
[-Partition <String>] [-PassThru] [-Server <String>] [-Subjects] <ADPrincipal[]>
[<CommonParameters>]Copied 0 timesActive DirectoryAdds one or more members to an Active Directory group.
Add-ADGroupMember [-WhatIf] [-Confirm] [-AuthType <ADAuthType>]
[-Credential <PSCredential>] [-Identity] <ADGroup> [-Members] <ADPrincipal[]>
[-MemberTimeToLive <TimeSpan>] [-Partition <String>] [-PassThru] [-Server <String>]
[-DisablePermissiveModify] [<CommonParameters>]Copied 0 timesActive DirectoryAdds a member to one or more Active Directory groups.
Add-ADPrincipalGroupMembership [-WhatIf] [-Confirm] [-AuthType <ADAuthType>]
[-Credential <PSCredential>] [-Identity] <ADPrincipal> [-MemberOf] <ADGroup[]>
[-Partition <String>] [-PassThru] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryAdds one or more resource properties to a resource property list in Active Directory.
Add-ADResourcePropertyListMember [-WhatIf] [-Confirm] [-AuthType <ADAuthType>]
[-Credential <PSCredential>] [-Identity] <ADResourcePropertyList>
[-Members] <ADResourceProperty[]> [-PassThru] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryAdds a new certificate to AD FS for signing, decrypting, or securing communications.
Add-AdfsCertificate -CertificateType <String> -Thumbprint <String> [-IsPrimary] [-PassThru] [-WhatIf]
[-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryAdds a claim description to the Federation Service.
Add-AdfsClaimDescription -Name <String> -ClaimType <String> [-ShortName <String>] [-IsAccepted <Boolean>]
[-IsOffered <Boolean>] [-IsRequired <Boolean>] [-Notes <String>] [-PassThru] [-WhatIf] [-Confirm]
[<CommonParameters>]Copied 0 timesActive DirectoryAdds a new claims provider trust to the Federation Service.
Add-AdfsClaimsProviderTrust -Name <String> [-AutoUpdateEnabled <Boolean>] [-AllowCreate <Boolean>]
[-AnchorClaimType <String>] [-EncryptionCertificateRevocationCheck <String>] [-Enabled <Boolean>]
[-Notes <String>] [-ProtocolProfile <String>] [-EncryptedNameIdRequired <Boolean>]
[-SamlAuthenticationRequestIndex <UInt16>] [-SamlAuthenticationRequestParameters <String>]
[-SamlAuthenticationRequestProtocolBinding <String>] [-SignatureAlgorithm <String>]
[-SigningCertificateRevocationCheck <String>] [-PromptLoginFederation <PromptLoginFederation>]
[-PromptLoginFallbackAuthenticationType <String>] [-RequiredNameIdFormat <Uri>]
[-OrganizationalAccountSuffix <String[]>] [-MetadataUrl <Uri>] [-SignedSamlRequestsRequired <Boolean>]
[-PassThru] [-AcceptanceTransformRules <String>] [-AcceptanceTransformRulesFile <String>]
[-MonitoringEnabled <Boolean>] [-WhatIf] [-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryCreates a claims provider trust group based on metadata that contains multiple entities.
Add-AdfsClaimsProviderTrustsGroup -MetadataUrl <Uri> [-AutoUpdateEnabled <Boolean>] [-Force] [-PassThru]
[-AcceptanceTransformRules <String>] [-AcceptanceTransformRulesFile <String>] [-MonitoringEnabled <Boolean>]
[-WhatIf] [-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryRegisters an OAuth 2.0 client with AD FS.
Add-AdfsClient [-ClientId] <String> [-Name] <String> [[-RedirectUri] <String[]>] [-Description <String>]
[-ClientType <ClientType>] [-ADUserPrincipalName <String>] [-JWTSigningCertificate <X509Certificate2[]>]
[-JWTSigningCertificateRevocationCheck <RevocationSetting>] [-JWKSUri <Uri>] [-JWKSFile <String>]
[-LogoutUri <String>] [-GenerateClientSecret] [-PassThru] [-WhatIf] [-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryAdds a custom UPN suffix.
Add-AdfsDeviceRegistrationUpnSuffix [-UpnSuffix] <String> [-WhatIf] [-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryAdds a relying party trust that represents a non-claims-aware web application or service to the Federation Service.
Add-AdfsNonClaimsAwareRelyingPartyTrust [-Name] <String> [-Identifier] <String[]>
[-AlwaysRequireAuthentication] [-Enabled <Boolean>] [-IssuanceAuthorizationRules <String>]
[-IssuanceAuthorizationRulesFile <String>] [-Notes <String>] [-PassThru]
[-AdditionalAuthenticationRules <String>] [-AdditionalAuthenticationRulesFile <String>]
[-AccessControlPolicyName <String>] [-AccessControlPolicyParameters <Object>] [-ClaimsProviderName <String[]>]
[-WhatIf] [-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryAdds a new relying party trust to the Federation Service.
Add-AdfsRelyingPartyTrust -Name <String> -MetadataUrl <Uri> [-EncryptClaims <Boolean>] [-Enabled <Boolean>]
[-AutoUpdateEnabled <Boolean>] [-EncryptedNameIdRequired <Boolean>] [-SignedSamlRequestsRequired <Boolean>]
[-Notes <String>] [-SignatureAlgorithm <String>] [-SigningCertificateRevocationCheck <String>]
[-TokenLifetime <Int32>] [-AlwaysRequireAuthentication] [-RequestMFAFromClaimsProviders]
[-AllowedAuthenticationClassReferences <String[]>] [-EncryptionCertificateRevocationCheck <String>]
[-NotBeforeSkew <Int32>] [-ProtocolProfile <String>] [-ClaimsProviderName <String[]>] [-EnableJWT <Boolean>]
[-SamlResponseSignature <String>] [-AllowedClientTypes <AllowedClientTypes>]
[-IssueOAuthRefreshTokensTo <RefreshTokenIssuanceDeviceTypes>] [-RefreshTokenProtectionEnabled <Boolean>]
[-PassThru] [-MonitoringEnabled <Boolean>] [-ImpersonationAuthorizationRules <String>]
[-ImpersonationAuthorizationRulesFile <String>] [-IssuanceTransformRules <String>]
[-IssuanceTransformRulesFile <String>] [-IssuanceAuthorizationRules <String>]
[-IssuanceAuthorizationRulesFile <String>] [-DelegationAuthorizationRules <String>]
[-DelegationAuthorizationRulesFile <String>] [-AdditionalAuthenticationRules <String>]
[-AdditionalAuthenticationRulesFile <String>] [-AccessControlPolicyName <String>]
[-AccessControlPolicyParameters <Object>] [-WhatIf] [-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryAdds a relying party trust for the Web Application Proxy.
Add-AdfsWebApplicationProxyRelyingPartyTrust [-Name] <String> [-Identifier] <String[]>
[-AlwaysRequireAuthentication] [-Enabled <Boolean>] [-AccessControlPolicyName <String>]
[-AccessControlPolicyParameters <Object>] [-AdditionalAuthenticationRules <String>]
[-AdditionalAuthenticationRulesFile <String>] [-NotBeforeSkew <Int32>] [-Notes <String>] [-PassThru]
[-TokenLifetime <Int32>] [-WhatIf] [-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryConfigures the AIA or OCSP for a certification authority.
Add-CAAuthorityInformationAccess [-Uri] <String> [-AddToCertificateAia] [-Force] [-WhatIf] [-Confirm]
[<CommonParameters>]Copied 0 timesActive DirectoryAdds a certificate template to the CA.
Add-CATemplate [-Name] <String> [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryBacks up the CA database and private key information.
Backup-CARoleService [-Path] <String> [-Force] [-KeyOnly] [-Password <SecureString>] [<CommonParameters>]Copied 0 timesActive DirectoryBacks up one GPO or all the GPOs in a domain.
Backup-GPO [-Name] <String> -Path <String> [-Comment <String>] [-Domain <String>]
[-Server <String>] [-WhatIf] [-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryClears the expiration date for an Active Directory account.
Clear-ADAccountExpiration [-WhatIf] [-Confirm] [-AuthType <ADAuthType>]
[-Credential <PSCredential>] [-Identity] <ADAccount> [-Partition <String>] [-PassThru]
[-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryRemoves a claims transformation from being applied to one or more cross-forest trust relationships in Active Directory.
Clear-ADClaimTransformLink [-WhatIf] [-Confirm] [-AuthType <ADAuthType>]
[-Credential <PSCredential>] [-Identity] <ADTrust> [-PassThru]
[-Policy <ADClaimTransformPolicy>] [-Server <String>] [-TrustRole <ADTrustRole>]
[<CommonParameters>]Copied 0 timesActive DirectoryCompletes the migration process and supersedes a normal user account to a delegated managed service account.
Complete-ADServiceAccountMigration [-AuthType <ADAuthType>] [-Credential <PSCredential>]
[-Identity] <ADServiceAccount> [-SupersededAccount <String>] [-Server <String>]
[<CommonParameters>]Copied 0 timesActive DirectoryChecks whether the local CA trusts secure hardware for identity key attestation.
Confirm-CAAttestationIdentityKeyInfo [-Certificate] <X509Certificate2> [<CommonParameters>]Copied 0 times