[Index]
Title | Description | Details | |||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
DisplayName |
|
||||||||||||||||||||||||||||||||||||||||||||||||
showInAdvancedViewOnly |
|
||||||||||||||||||||||||||||||||||||||||||||||||
Instance | Specifies an instance of an Active Directory object to use as a template for a new claims transformation policy object. You can use an instance of an existing claims transformation policy object as a template or you can construct a new claims transformation policy object by using the Windows PowerShell command line or by using a script. Method 1: Use an existing claims transformation policy object as a template for a new object. To retrieve an instance of an existing claims transformation policy object, use a cmdlet such as Get-ADClaimTransformPolicy. Then provide this object to the Instance parameter of the New-ADClaimTransformPolicy cmdlet to create a new claims transformation policy object. You can override property values of the new object by setting the appropriate parameters. Method 2: Create a new ADClaimsTransformationPolicy and set the property values by using the Windows PowerShell command line interface. Then pass this object to the Instance parameter of the New-ADClaimTransformPolicy cmdlet to create the new Active Directory object. Note: Specified attributes are not validated, so attempting to set attributes that do not exist or cannot be set will raise an error. |
|
|||||||||||||||||||||||||||||||||||||||||||||||
DenyAll * | Indicates that the policy sets a claims transformation rule that would deny all claims to be sent or received. |
|
|||||||||||||||||||||||||||||||||||||||||||||||
instanceType |
|
||||||||||||||||||||||||||||||||||||||||||||||||
isDeleted |
|
||||||||||||||||||||||||||||||||||||||||||||||||
Name * | Specifies the name of the object. This parameter sets the Name property of the Active Directory object. The LDAP Display Name (ldapDisplayName) of this property is name. |
|
|||||||||||||||||||||||||||||||||||||||||||||||
msDS-TransformationRules |
|
||||||||||||||||||||||||||||||||||||||||||||||||
dSCorePropagationData |
|
||||||||||||||||||||||||||||||||||||||||||||||||
ProtectedFromAccidentalDeletion | Specifies whether to prevent the object from being deleted. When this property is set to $True, you cannot delete the corresponding object without changing the value of the property. The acceptable values for this parameter are: -- $False or 0 -- $True or 1 |
|
|||||||||||||||||||||||||||||||||||||||||||||||
AllowAllExcept * | Specifies an array of claim types. When this parameter is specified, the policy sets a claims transformation rule that would allow all claims to be sent or received except for the specified claim types. |
|
|||||||||||||||||||||||||||||||||||||||||||||||
IncomingTrust |
|
||||||||||||||||||||||||||||||||||||||||||||||||
Deleted |
|
||||||||||||||||||||||||||||||||||||||||||||||||
Created |
|
||||||||||||||||||||||||||||||||||||||||||||||||
ObjectGUID |
|
||||||||||||||||||||||||||||||||||||||||||||||||
LastKnownParent |
|
||||||||||||||||||||||||||||||||||||||||||||||||
whenCreated |
|
||||||||||||||||||||||||||||||||||||||||||||||||
uSNCreated |
|
||||||||||||||||||||||||||||||||||||||||||||||||
OutgoingTrust |
|
||||||||||||||||||||||||||||||||||||||||||||||||
DistinguishedName |
|
||||||||||||||||||||||||||||||||||||||||||||||||
AuthType | Specifies the authentication method to use. The acceptable values for this parameter are: -- Negotiate or 0 -- Basic or 1 The default authentication method is Negotiate. A Secure Sockets Layer (SSL) connection is required for the Basic authentication method. |
|
|||||||||||||||||||||||||||||||||||||||||||||||
CN |
|
||||||||||||||||||||||||||||||||||||||||||||||||
Credential | Specifies a user account that has permission to perform this action. The default is the current user. Type a user name, such as User01 or Domain01\User01, or enter a PSCredential object, such as one generated by the Get-Credential cmdlet. If you type a user name, you will be prompted for a password. This parameter is not supported by any providers installed with Windows PowerShell. |
|
|||||||||||||||||||||||||||||||||||||||||||||||
Modified |
|
||||||||||||||||||||||||||||||||||||||||||||||||
Rule * | Represents the claims transformation rule. To specify the rule, you can either (1) type the rule in a text file, and then pass the file to the cmdlet (recommended), or (2) type the rule inline. For example, the following commands demonstrate how to create a new claims transformation policy object with the rule specified in a text file named Rule.txt located in a temporary folder C:\temp. $rule = Get-Content C:\temp\rule.txt; New-ADClaimTransformPolicy MyRule -Rule $rule |
|
|||||||||||||||||||||||||||||||||||||||||||||||
Server | Specifies the Active Directory Domain Services instance to connect to, by providing one of the following values for a corresponding domain name or directory server. The service may be any of the following: Active Directory Lightweight Domain Services, Active Directory Domain Services or Active Directory Snapshot instance. Specify the Active Directory Domain Services instance in one of the following ways: -- Domain name values: ---- Fully qualified domain name ---- NetBIOS name -- Directory server values: ---- Fully qualified directory server name ---- NetBIOS name ---- Fully qualified directory server name and port The default value for this parameter is determined by one of the following methods in the order that they are listed: -- By using the Server value from objects passed through the pipeline -- By using the server information associated with the Active Directory Domain ServicesWindows PowerShell provider drive, when the cmdlet runs in that drive -- By using the domain of the computer running Windows PowerShell |
|
|||||||||||||||||||||||||||||||||||||||||||||||
createTimeStamp |
|
||||||||||||||||||||||||||||||||||||||||||||||||
DenyAllExcept * | Specifies an array of claim types. When this parameter is specified, the policy sets a claims transformation rule that would deny all claims to be sent or received except for the specified claim types. |
|
|||||||||||||||||||||||||||||||||||||||||||||||
whenChanged |
|
||||||||||||||||||||||||||||||||||||||||||||||||
Description | Specifies a description of the object. This parameter sets the value of the Description property for the object. The LDAP Display Name (ldapDisplayName) for this property is description. |
|
|||||||||||||||||||||||||||||||||||||||||||||||
ObjectCategory |
|
||||||||||||||||||||||||||||||||||||||||||||||||
AllowAll * | Indicates that the policy sets a claims transformation rule that would allow all claims to be sent or received. |
|
|||||||||||||||||||||||||||||||||||||||||||||||
CanonicalName |
|
||||||||||||||||||||||||||||||||||||||||||||||||
ObjectClass |
|
||||||||||||||||||||||||||||||||||||||||||||||||
uSNChanged |
|
||||||||||||||||||||||||||||||||||||||||||||||||
modifyTimeStamp |
|
||||||||||||||||||||||||||||||||||||||||||||||||
sDRightsEffective |
|