Set-AdfsDeviceRegistration

Set-AdfsDeviceRegistration

Configures the administrative policies for the Device Registration Service.

Syntaxe

Parameter Set: IssuanceCertificate
Set-AdfsDeviceRegistration -IssuanceCertificate [-Credential <PSCredential> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

Parameter Set: NumberOfDevicesPerUser
Set-AdfsDeviceRegistration -DevicesPerUser <UInt32> [-Credential <PSCredential> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

Parameter Set: NumberOfInactiveDays
Set-AdfsDeviceRegistration -MaximumInactiveDays <UInt32> [-Credential <PSCredential> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

Parameter Set: ServiceAccountIdentifier
Set-AdfsDeviceRegistration -ServiceAccountIdentifier <String> [-Credential <PSCredential> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

Description détaillée

The Set-AdfsDeviceRegistration cmdlet configures the administrative policies for the Device Registration Service. Use this cmdlet to change the default policies of the Device Registration Service in services de fédération Active Directory (AD FS), such as the maximum number of devices that a user can register.

Paramètres

-Credential<PSCredential>

Specifies a PSCredential object based on a user name and password. This account must be a member of the Enterprise Admins group. To obtain a PSCredential object, use the Get-Credential cmdlet. For more information, type Get-Help Get-Credential.

-DevicesPerUser<UInt32>

Specifies the maximum number of devices that a user can register.

-IssuanceCertificate

Indicates that the cmdlet generates and uses a new signing certificate for the Device Registration Service.

-MaximumInactiveDays<UInt32>

Specifies the number of days before a device object is removed because of inactivity.

-ServiceAccountIdentifier<String>

Specifies the ID of the service account. The cmdlet grants this account read and write access to the Device Registration Service configuration and containers in services de domaine Active Directory®.

-Confirm

Votre confirmation sera requise avant l’exécution de l’applet de commande.

-WhatIf

Présente les conséquences éventuelles de l’exécution de l’applet de commande. L’applet de commande n’est pas exécutée.

<CommonParameters>

Cette applet de commande prend en charge les paramètres courants : -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer et -OutVariable. Pour plus d’informations, consultez about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

Entrées

Le type d’entrée correspond au type des objets que vous pouvez transmettre à l’applet de commande.

• uint, string, switch

Sorties

Le type de sortie est le type des objets émis par l’applet de commande.

Exemples

Example 1: Set the number of devices that a user can register

This command sets the number of devices that a user can register to 10.

PS C:\> Set-AdfsDeviceRegistration -DevicesPerUser 10

Example 2: Configure the maximum inactive days for a device

This command configures the number of days before the Device Registration Service removes an inactive device object.

PS C:\> Set-AdfsDeviceRegistration -MaximumInactiveDays 90

Example 3: Set the service account for the Device Registration Service

The first command uses the Get-Credential cmlet to create a credential object for the Active Directory account under which the AD FS service runs. The command stores the credential object in the $Cred variable.

The second command sets the service account that has the ID Svc_adfs. The command specifies the credentials stored in $Cred for the Active Directory account under which the AD FS service runs.

PS C:\> $Cred = Get-Credential
PS C:\> Set-AdfsDeviceRegistration -ServiceAccountIdentifier "CONTOSO\Svc_adfs" -Credential $Cred 

Rubriques connexes

Get-AdfsDeviceRegistration

Disable-AdfsDeviceRegistration

Enable-AdfsDeviceRegistration