Remove-NfsMappedIdentity

Remove-NfsMappedIdentity

Removes a mapping between a UNIX account and a Windows account.

Syntax

Parameter Set: User
Remove-NfsMappedIdentity -UserName <String> [-UserIdentifier <Int32> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

Parameter Set: AllParameterSets
Remove-NfsMappedIdentity [-GroupIdentifier <Int32> ] [-LdapNamingContext <String> ] [-MappingStore <MappingStoreType> {Ad | Ldap | Mapfiles} ] [-Server <String> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

Parameter Set: Default
Remove-NfsMappedIdentity [-UserIdentifier <Int32> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

Parameter Set: Group
Remove-NfsMappedIdentity -GroupName <String> [-Confirm] [-WhatIf] [ <CommonParameters>]

Detailed Description

The Remove-NfsMappedIdentity cmdlet removes a mapped identity from a Network File System (NFS) server mapping store.

A mapped identity associates a Windows user account or group account to a UNIX user account or group account. A user ID (UID) or group ID (GID) identifies a UNIX account namespace. These elements are associated with the corresponding elements of a Windows account namespace: a user name or a group name. By using a mapped identity, a user who is logged on to a UNIX domain can access shared resources in a Windows domain without having to log on to the Windows domain.

For more information about NFS, see Network File System. For more information about NFS account mapping, see NFS Account Mapping Guide and Identity Management for UNIX.

Parameters

-GroupIdentifier<Int32>

Specifies the group identifier of a mapped identity.

Aliases

none

Required?

false

Position?

named

Default Value

none

Accept Pipeline Input?

True (ByPropertyName)

Accept Wildcard Characters?

false

-GroupName<String>

Specifies the SAMAccountName of the group account.

Aliases

none

Required?

true

Position?

named

Default Value

none

Accept Pipeline Input?

True (ByPropertyName)

Accept Wildcard Characters?

false

-LdapNamingContext<String>

Specifies the Lightweight Directory Access Protocol (LDAP) naming context of an NFS identity mapping store. You can use this parameter to search for mapped identities in the specified naming context.

Aliases

none

Required?

false

Position?

named

Default Value

DefaultNamingContext

Accept Pipeline Input?

True (ByPropertyName)

Accept Wildcard Characters?

false

-MappingStore<MappingStoreType>

Specifies the type of identity mapping store from which the Remove-NfsMappedIdentity cmdlet removes a mapped identity. When this parameter is not specified, the Remove-NfsMappedIdentity cmdlet gets the store configuration settings from the NFS server. Valid values are AD and LDAP.

Aliases

none

Required?

false

Position?

named

Default Value

none

Accept Pipeline Input?

True (ByPropertyName)

Accept Wildcard Characters?

false

-Server<String>

Specifies the LDAP server instance of a store that NFS server uses. This can be a domain name, Active Directory Lightweight Directory Services (AD LDS) server name, or LDAP server name. When this parameter is not specified, the Remove-NfsMappedIdentity cmdlet tries to connect to either the LDAP store on the local computer at port 389 when MappingStore is LDAP, or the Active Directory Domain Services (AD DS) domain of the computer when MappingStore is Active Directory.

Aliases

none

Required?

false

Position?

named

Default Value

localhost:389

Accept Pipeline Input?

True (ByPropertyName)

Accept Wildcard Characters?

false

-UserIdentifier<Int32>

Specifies the user identifier of a user account.

Aliases

none

Required?

false

Position?

named

Default Value

none

Accept Pipeline Input?

True (ByPropertyName)

Accept Wildcard Characters?

false

-UserName<String>

Specifies the SAMAccountName of a user account.

Aliases

none

Required?

true

Position?

named

Default Value

none

Accept Pipeline Input?

True (ByPropertyName)

Accept Wildcard Characters?

false

-Confirm

Prompts you for confirmation before running the cmdlet.

Required?

false

Position?

named

Default Value

false

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Required?

false

Position?

named

Default Value

false

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

<CommonParameters>

This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see    about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

Inputs

The input type is the type of the objects that you can pipe to the cmdlet.

Outputs

The output type is the type of the objects that the cmdlet emits.

  • Nothing

Examples

Example 1: Remove identity mapping for a user

This command removes a mapped identity that is stored in the configured AD LDS instance, on a server where this command is run, for the user account LSPolly.

PS C:\> Remove-NfsMappedIdentity -MappingStore "LDAP" -UserName "LSPolly"

Example 2: Remove an identity mapping for a group

This command removes a mapped identity that is stored in a configured AD DS map store and that corresponds to the group account that has the group identifier 22.

PS C:\> Remove-NfsMappedIdentity -MappingStore "AD" -GroupIdentifier 22

Get-NfsMappedIdentity

New-NfsMappedIdentity

Resolve-NfsMappedIdentity

Set-NfsMappedIdentity

Test-NfsMappedIdentity

Get-NfsMappingStore

Install-NfsMappingStore

Set-NfsMappingStore

Test-NfsMappingStore