Set-CMSite

Changes security scope settings for Configuration Manager sites.

Parameter Set: SetByNameMandatory
Set-CMSite -Name <String> [-AddActiveDirectoryForest <IResultObject[]> ] [-AddCertificateByPath <String[]> ] [-AddClientRequestServiceType <ClientRequestServiceType> {ClientNotificationTcp | ClientRequestHttpTcp | ClientRequestHttpTcpDefault | ClientRequestsHttpsTcp | ClientRequestsHttpsTcpDefault | WakeOnLanUdp} ] [-ClientCertificateCustomStoreName <String> ] [-ClientCertificateSelectionCriteriaType <ClientCertificateSelectionCriteriaType> {CertificateSubjectContainsString | CertificateSubjectOrSanIncludesAtrributes | ClientAuthentication} ] [-ClientCertificateSelectionCriteriaValue <String> ] [-ClientCheckCertificateRevocationListForSiteSystem <Boolean> ] [-ClientComputerCommunicationType <ClientComputerCommunicationType> {HttpsOnly | HttpsOrHttp} ] [-Comment <String> ] [-ConcurrentSendingDelayBeforeRetryingMinutes <Int32> ] [-CriticalAlertWhenFreeDiskSpaceFallBelowFollowingValueGB <Int32> ] [-EnableWakeOnLan <Boolean> ] [-GenerateAlertWhenFreeDiskSpaceOnSiteDatabaseIsLow <Boolean> ] [-MaximumConcurrentSendingForAllSite <Int32> ] [-MaximumConcurrentSendingForPerSite <Int32> ] [-MaximumNumberOfSendingWakeUpPacketBeforePausing <Int32> ] [-PortForClientRequestServiceType <Int32> ] [-RemoveActiveDirectoryForest <IResultObject[]> ] [-RemoveCertificateByKey <String[]> ] [-RemoveClientRequestServiceType <ClientRequestServiceType> {ClientNotificationTcp | ClientRequestHttpTcp | ClientRequestHttpTcpDefault | ClientRequestsHttpsTcp | ClientRequestsHttpsTcpDefault | WakeOnLanUdp} ] [-RequireSha256 <Boolean> ] [-RequireSigning <Boolean> ] [-RetryNumberForConcurrentSending <Int32> ] [-RetryNumberOfSendingWakeUpPacketTransmission <Int32> ] [-SendingWakeUpPacketBeforePausingWaitSeconds <Int32> ] [-SendingWakeUpPacketTransmissionDelayMinutes <Int32> ] [-SendingWakeUpPacketTransmissionOffsetMinutes <Int32> ] [-TakeActionForMultipleCertificateMatchCriteria <TakeActionForMultipleCertificateMatchCriteria> {FailSelectionAndSendErrorMessage | SelectCertificateWithLongestValidityPeriod} ] [-ThreadNumberOfSendingWakeUpPacket <Int32> ] [-UseCustomWebSite <Boolean> ] [-UseEncryption <Boolean> ] [-UsePkiClientCertificate <Boolean> ] [-WakeOnLanTransmissionMethodType <WakeOnLanTransmissionMethodType> {SubnetDirectedBroadcasts | Unicast} ] [-WakeOnLanType <WakeOnLanType> {UseAmtPowerOnCommandsOnly | UseAmtPowerOnCommandsORWakeUpPackets | UseWakeUpPacketsOnly} ] [-WarningAlertWhenFreeDiskSpaceFallBelowFollowingValueGB <Int32> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

Parameter Set: SetByObject
Set-CMSite -InputObject <IResultObject> [-AddActiveDirectoryForest <IResultObject[]> ] [-AddCertificateByPath <String[]> ] [-AddClientRequestServiceType <ClientRequestServiceType> {ClientNotificationTcp | ClientRequestHttpTcp | ClientRequestHttpTcpDefault | ClientRequestsHttpsTcp | ClientRequestsHttpsTcpDefault | WakeOnLanUdp} ] [-ClientCertificateCustomStoreName <String> ] [-ClientCertificateSelectionCriteriaType <ClientCertificateSelectionCriteriaType> {CertificateSubjectContainsString | CertificateSubjectOrSanIncludesAtrributes | ClientAuthentication} ] [-ClientCertificateSelectionCriteriaValue <String> ] [-ClientCheckCertificateRevocationListForSiteSystem <Boolean> ] [-ClientComputerCommunicationType <ClientComputerCommunicationType> {HttpsOnly | HttpsOrHttp} ] [-Comment <String> ] [-ConcurrentSendingDelayBeforeRetryingMinutes <Int32> ] [-CriticalAlertWhenFreeDiskSpaceFallBelowFollowingValueGB <Int32> ] [-EnableWakeOnLan <Boolean> ] [-GenerateAlertWhenFreeDiskSpaceOnSiteDatabaseIsLow <Boolean> ] [-MaximumConcurrentSendingForAllSite <Int32> ] [-MaximumConcurrentSendingForPerSite <Int32> ] [-MaximumNumberOfSendingWakeUpPacketBeforePausing <Int32> ] [-PortForClientRequestServiceType <Int32> ] [-RemoveActiveDirectoryForest <IResultObject[]> ] [-RemoveCertificateByKey <String[]> ] [-RemoveClientRequestServiceType <ClientRequestServiceType> {ClientNotificationTcp | ClientRequestHttpTcp | ClientRequestHttpTcpDefault | ClientRequestsHttpsTcp | ClientRequestsHttpsTcpDefault | WakeOnLanUdp} ] [-RequireSha256 <Boolean> ] [-RequireSigning <Boolean> ] [-RetryNumberForConcurrentSending <Int32> ] [-RetryNumberOfSendingWakeUpPacketTransmission <Int32> ] [-SendingWakeUpPacketBeforePausingWaitSeconds <Int32> ] [-SendingWakeUpPacketTransmissionDelayMinutes <Int32> ] [-SendingWakeUpPacketTransmissionOffsetMinutes <Int32> ] [-TakeActionForMultipleCertificateMatchCriteria <TakeActionForMultipleCertificateMatchCriteria> {FailSelectionAndSendErrorMessage | SelectCertificateWithLongestValidityPeriod} ] [-ThreadNumberOfSendingWakeUpPacket <Int32> ] [-UseCustomWebSite <Boolean> ] [-UseEncryption <Boolean> ] [-UsePkiClientCertificate <Boolean> ] [-WakeOnLanTransmissionMethodType <WakeOnLanTransmissionMethodType> {SubnetDirectedBroadcasts | Unicast} ] [-WakeOnLanType <WakeOnLanType> {UseAmtPowerOnCommandsOnly | UseAmtPowerOnCommandsORWakeUpPackets | UseWakeUpPacketsOnly} ] [-WarningAlertWhenFreeDiskSpaceFallBelowFollowingValueGB <Int32> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

Parameter Set: SetBySiteCodeMandatory
Set-CMSite -SiteCode <String> [-AddActiveDirectoryForest <IResultObject[]> ] [-AddCertificateByPath <String[]> ] [-AddClientRequestServiceType <ClientRequestServiceType> {ClientNotificationTcp | ClientRequestHttpTcp | ClientRequestHttpTcpDefault | ClientRequestsHttpsTcp | ClientRequestsHttpsTcpDefault | WakeOnLanUdp} ] [-ClientCertificateCustomStoreName <String> ] [-ClientCertificateSelectionCriteriaType <ClientCertificateSelectionCriteriaType> {CertificateSubjectContainsString | CertificateSubjectOrSanIncludesAtrributes | ClientAuthentication} ] [-ClientCertificateSelectionCriteriaValue <String> ] [-ClientCheckCertificateRevocationListForSiteSystem <Boolean> ] [-ClientComputerCommunicationType <ClientComputerCommunicationType> {HttpsOnly | HttpsOrHttp} ] [-Comment <String> ] [-ConcurrentSendingDelayBeforeRetryingMinutes <Int32> ] [-CriticalAlertWhenFreeDiskSpaceFallBelowFollowingValueGB <Int32> ] [-EnableWakeOnLan <Boolean> ] [-GenerateAlertWhenFreeDiskSpaceOnSiteDatabaseIsLow <Boolean> ] [-MaximumConcurrentSendingForAllSite <Int32> ] [-MaximumConcurrentSendingForPerSite <Int32> ] [-MaximumNumberOfSendingWakeUpPacketBeforePausing <Int32> ] [-PortForClientRequestServiceType <Int32> ] [-RemoveActiveDirectoryForest <IResultObject[]> ] [-RemoveCertificateByKey <String[]> ] [-RemoveClientRequestServiceType <ClientRequestServiceType> {ClientNotificationTcp | ClientRequestHttpTcp | ClientRequestHttpTcpDefault | ClientRequestsHttpsTcp | ClientRequestsHttpsTcpDefault | WakeOnLanUdp} ] [-RequireSha256 <Boolean> ] [-RequireSigning <Boolean> ] [-RetryNumberForConcurrentSending <Int32> ] [-RetryNumberOfSendingWakeUpPacketTransmission <Int32> ] [-SendingWakeUpPacketBeforePausingWaitSeconds <Int32> ] [-SendingWakeUpPacketTransmissionDelayMinutes <Int32> ] [-SendingWakeUpPacketTransmissionOffsetMinutes <Int32> ] [-TakeActionForMultipleCertificateMatchCriteria <TakeActionForMultipleCertificateMatchCriteria> {FailSelectionAndSendErrorMessage | SelectCertificateWithLongestValidityPeriod} ] [-ThreadNumberOfSendingWakeUpPacket <Int32> ] [-UseCustomWebSite <Boolean> ] [-UseEncryption <Boolean> ] [-UsePkiClientCertificate <Boolean> ] [-WakeOnLanTransmissionMethodType <WakeOnLanTransmissionMethodType> {SubnetDirectedBroadcasts | Unicast} ] [-WakeOnLanType <WakeOnLanType> {UseAmtPowerOnCommandsOnly | UseAmtPowerOnCommandsORWakeUpPackets | UseWakeUpPacketsOnly} ] [-WarningAlertWhenFreeDiskSpaceFallBelowFollowingValueGB <Int32> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

Parameter Set: SetSecurityScopeByName
Set-CMSite -Name <String> -SecurityScopeAction <SecurityScopeActionType> {AddMembership | RemoveMembership} -SecurityScopeName <String> [-Confirm] [-WhatIf] [ <CommonParameters>]

Parameter Set: SetSecurityScopeBySiteCode
Set-CMSite -SecurityScopeAction <SecurityScopeActionType> {AddMembership | RemoveMembership} -SecurityScopeName <String> -SiteCode <String> [-Confirm] [-WhatIf] [ <CommonParameters>]

Parameter Set: SetSecurityScopeByValue
Set-CMSite -InputObject <IResultObject> -SecurityScopeAction <SecurityScopeActionType> {AddMembership | RemoveMembership} -SecurityScopeName <String> [-Confirm] [-WhatIf] [ <CommonParameters>]

The Set-CMSite cmdlet changes security scope settings for one or more Microsoft System Center 2012 SP1 Configuration Manager sites. A security scope is a collection of permissions that, in conjunction with security roles, defines the configuration actions that an administrator can perform on the site. You can use this cmdlet to change the type of a security scope action and the name of a security scope for a System Center 2012 Configuration Manager site. You can specify a site for which you change security scope settings by using a site name or a site code, or you can use the Get-CMSite cmdlet to specify a site.

Specifies an array of Active Directory Forest objects to publish in Active Directory Domain Services. To obtain an Active Directory Forest object, use the Get-ADForest cmdlet.

Specifies an array of paths to certificates.

Specifies a service type to add. The acceptable values for this parameter are:

-- ClientNotificationTcp
-- ClientRequestHttpTcp
-- ClientRequestHttpTcpDefault
-- ClientRequestHttpsTcp
-- ClientRequestHttpsTcpDefault
-- WakeOnLanUdp

Specifies the name of a custom store that contains client certificates.

Specifies the criteria type to match in a client certificate, such as a string or attribute for a subject or an alternate name for a subject.

Specifies a value for the ClientCertificateSelectionCriteriaType.

Indicates whether to check the Certificate Revocation List (CRL) for a certificate.

Specifies the communication type. The acceptable values for this parameter are: HttpsOnly and HttpsOrHttp.

Specifies a comment for a Configuration Manager site.

Specifies the number of minutes to wait before retrying failed communication.

Specifies the free disk space threshold, in gigabytes, for a critical alert.

Indicates whether to send Wake On LAN packets for scheduled activities such as deployments of software updates.

Indicates whether to generate an alert when free disk space on the site database reaches a threshold.

Specifies a Configuration Manager site object. To obtain a Configuration Manager site object, use the Get-CMSite cmdlet.

Specifies the maximum number of simultaneous communications to all sites.

Specifies the maximum number of simultaneous communications to any single site.

Specifies the maximum number of wake-up packets transmitted by this site server before pausing.

Specifies the name of a Configuration Manager site.

Specifies a port number, such as 80 or 8080, for client requests.

Specifies an array of Active Directory Forest objects to remove from Active Directory Domain Services.

Specifies an array of certificates to remove.

Specifies a service type to remove. The acceptable values for this parameter are:

-- ClientNotificationTcp
-- ClientRequestHttpTcp
-- ClientRequestHttpTcpDefault
-- ClientRequestHttpsTcp
-- ClientRequestHttpsTcpDefault
-- WakeOnLanUdp

Indicates whether to use the SHA-256 algorithm to sign communications.

Indicates whether to require Configuration Manager sites to sign communications with other sites.

Specifies the number of times to retry a failed communication.

Specifies the number of times a wake-up packet is sent to a target computer.

Specifies an action for a security scope. The acceptable values for this parameter are: AddMembership and RemoveMembership.

Specifies the name of a security scope. A security scope name can be Default or the name of a custom security scope.

Specifies the number of wake-up packets to send before pausing. The default value is 10.

Specifies the amount of time that wake-up packet transmission is halted between retries.

Specifies the amount of time that wake-up packets are sent prior to a scheduled activity that is enabled for Wake On LAN. The default value is 3.

Specifies a site code for a Configuration Manager site to which you assign security scopes.

Specifies the action to take for multiple matches of certificate criteria.

Specifies the number of threads a site server uses when sending wake-up packets.

Indicates whether to use a custom web site. Use a custom web site when you do not want to use the default web site.

Indicates whether to use encryption for communication between sites.

Indicates whether to use a PKI certificate management solution.

Specifies the type of transmission method to use for Wake On LAN transmissions.

Specifies the type of Wake On LAN packet to use.

Specifies a threshold, in gigabytes, for free disk space.

Prompts you for confirmation before running the cmdlet.

Shows what would happen if the cmdlet runs. The cmdlet is not run.

This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see    about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

The input type is the type of the objects that you can pipe to the cmdlet.

The output type is the type of the objects that the cmdlet emits.

This command assigns a custom security scope named Scope22 to a System Center 2012 Configuration Manager site named CMSiteSystem.

PS C:\> Set-CMSite -SecurityScopeAction AddMembership -SecurityScopeName "Scope22" -SiteName "CMSiteSystem"

This command removes the custom security scope in the previous example from a System Center 2012 Configuration Manager site named CMSiteSystem.

PS C:\> Set-CMSite -SecurityScopeAction RemoveMembership -SecurityScopeName "Scope22" -SiteName "CMSiteSystem"

Get-ADForest

Get-CMSite