Write-MbamComputerUser

Letzte Aktualisierung: August 2015

Betrifft: Microsoft BitLocker Administration and Monitoring 2.5, Microsoft BitLocker Administration and Monitoring 2.5 SP1

Write-MbamComputerUser

Writes a set of users to a computer's Trusted Platform Module (TPM) owner authorization and each of the currently known computer's encrypted volumes.

Syntax

Parameter Set: Default
Write-MbamComputerUser -Computer <String> -ComputerUser <String[]> -RecoveryServiceEndPoint <Uri> [-Force] [-RetryCount <Int32> ] [-RetryIntervalSeconds <Int32> ] [ <CommonParameters>]




Detaillierte Beschreibung

The Write-MbamComputerUser cmdlet writes a set of users to a computer's Trusted Platform Module (TPM) owner authorization and each of the currently known computer's encrypted volumes.

Parameter

-Computer<String>

Specifies the domain name and machine name of the domain-joined computer in <domain name>\<machine name> format (For instance, "contoso.com\ user12-pc").


Aliasse

none

Erforderlich?

true

Position?

named

Standardwert

none

Pipelineeingaben akzeptieren?

true(ByPropertyName)

Platzhalterzeichen akzeptieren?

false

-ComputerUser<String[]>

Specifies an array of fully qualified domain user accounts that have permission to access this volume recovery information in user principal name (UPN) (<login name>@<domain name> format (For instance, @("user12@contoso.com", " user13@contoso.com")).


Aliasse

user

Erforderlich?

true

Position?

named

Standardwert

none

Pipelineeingaben akzeptieren?

true(ByPropertyName)

Platzhalterzeichen akzeptieren?

false

-Force

Erzwingt, dass der Befehl ohne Benutzerbestätigung ausgeführt wird.


Aliasse

none

Erforderlich?

false

Position?

named

Standardwert

none

Pipelineeingaben akzeptieren?

false

Platzhalterzeichen akzeptieren?

false

-RecoveryServiceEndPoint<Uri>

Specifies the path to the Microsoft BitLocker Administration and Monitoring (MBAM) Recovery Service endpoint on the network. The URL for the MBAM Recovery service endpoint is http(s)://<servername>:<port>/MBAMRecoveryAndHardwareService/CoreService.svc (for instance, https://mbamserver.contoso.com:8080/ MBAMRecoveryAndHardwareService/CoreService.svc).


Aliasse

svc,service

Erforderlich?

true

Position?

named

Standardwert

none

Pipelineeingaben akzeptieren?

false

Platzhalterzeichen akzeptieren?

false

-RetryCount<Int32>

Specifies the maximum number of times to retry to send recovery information. The cmdlet proceeds to the next record after the retry limit is exceeded.


Aliasse

rc

Erforderlich?

false

Position?

named

Standardwert

none

Pipelineeingaben akzeptieren?

false

Platzhalterzeichen akzeptieren?

false

-RetryIntervalSeconds<Int32>

Specifies the amount of time in seconds to wait before the cmdlet retries to send the recovery information.


Aliasse

ri

Erforderlich?

false

Position?

named

Standardwert

none

Pipelineeingaben akzeptieren?

false

Platzhalterzeichen akzeptieren?

false

<CommonParameters>

Dieses Cmdlet unterstützt die allgemeinen Parameter: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, -OutVariable. Weitere Informationen finden Sie unter about_CommonParameters (http://go.microsoft.com/fwlink/p/?LinkID=113216).

Eingaben

Der Eingabetyp ist der Typ der Objekte, die über die Pipeline an das Cmdlet übergeben werden können.

Ausgaben

Der Ausgabetyp ist der Typ der Objekte, die vom Cmdlet ausgegeben werden.

Beispiele

Example 1: Give a user permission to recover TPM and Bitlocker information for a specified computer

This command gives User12@Contoso.com permission to recover TPM and Bitlocker information from self-service portal for computer User12-PC.Contoso.com and its volumes.


PS C:\> Write-MbamComputerUser -RecoveryServiceEndPoint http://MBAMServer.contoso.com:8080 -Computer User12-PC.Contoso.com -user @("User12@Contoso.com")

Example 2: Give a user permission to recover TPM and Bitlocker information for a specified computer and suppress user confirmation

This command gives User12@Contoso.com permission to recover TPM and Bitlocker information from self-service portal for computer User12-PC.Contoso.com and its volumes.

This command additionally suppresses user confirmation.


PS C:\> Write-MbamComputerUser -RecoveryServiceEndPoint http://MBAMServer.contoso.com:8080 -Computer User12-PC.Contoso.com -user @("User12@Contoso.com") -Force

Example 3: Give multiple users permission to recover TPM and Bitlocker information for a specified computer and attempt recovery if the cmdlet fails

This command gives User12@Contoso.com and User13@Contoso.com permission to recover TPM and Bitlocker information from self-service portal for computer User12-PC.Contoso.com and its volumes.

The command also attempts recovery two more times with a ten second wait time between attempts. This command additionally suppresses user confirmation.


PS C:\> Write-MbamComputerUser -svc http://MBAMServer.contoso.com:8080 -Computer User12-PC.Contoso.com -ComputerUser @("User12@Contoso.com", "User13@Contoso.net") -RetryCount 2 -RetryIntervalSeconds 10 -Force

Example 4: Give a user permission to recover TPM and Bitlocker information for a specified computer and attempt recovery if the cmdlet fails

This command gives User12@Contoso.com permission to recover TPM and Bitlocker information from self-service portal for the computer User13-Desktop.Domain.Net and its volumes.

This command attempts recovery two more times with a ten second wait time between attempts.


PS C:\> Write-MbamComputerUser -service http://MBAMServer.contoso.com:8080 -Computer User13-Desktop.Domain.Net -user @("User12@Contoso.com") -rc 2 -ri 10                         

Example 5: Give a user permission to recover TPM and Bitlocker information for a specified machine and attempt recovery if the cmdlet fails

This command gives User12@Contoso.com permission to recover TPM and Bitlocker information from the self-service portal for the machine User13-Desktop.Domain.Net and its volumes.

This command also attempts recovery two more times with a ten second wait time between attempts.


PS C:\> Write-MbamComputerUser -service http://MBAMServer.contoso.com:8080 -Computer User13-Desktop.Domain.Net -user @("User12@Contoso.com") -rc 2 -ri 10 -Confirm 

Verwandte Themen

Community-Beiträge

HINZUFÜGEN
Anzeigen: