Write-MbamComputerUser

Aggiornamento: agosto 2015

Si applica a: Microsoft BitLocker Administration and Monitoring 2.5, Microsoft BitLocker Administration and Monitoring 2.5 SP1

Write-MbamComputerUser

Writes a set of users to a computer's Trusted Platform Module (TPM) owner authorization and each of the currently known computer's encrypted volumes.

Sintassi

Parameter Set: Default
Write-MbamComputerUser -Computer <String> -ComputerUser <String[]> -RecoveryServiceEndPoint <Uri> [-Force] [-RetryCount <Int32> ] [-RetryIntervalSeconds <Int32> ] [ <CommonParameters>]




Descrizione dettagliata

The Write-MbamComputerUser cmdlet writes a set of users to a computer's Trusted Platform Module (TPM) owner authorization and each of the currently known computer's encrypted volumes.

Parametri

-Computer<String>

Specifies the domain name and machine name of the domain-joined computer in <domain name>\<machine name> format (For instance, "contoso.com\ user12-pc").


Alias

none

Obbligatorio?

true

Posizione?

named

Valore predefinito

none

Accetta input da pipeline?

true(ByPropertyName)

Accetta caratteri jolly?

false

-ComputerUser<String[]>

Specifies an array of fully qualified domain user accounts that have permission to access this volume recovery information in user principal name (UPN) (<login name>@<domain name> format (For instance, @("user12@contoso.com", " user13@contoso.com")).


Alias

user

Obbligatorio?

true

Posizione?

named

Valore predefinito

none

Accetta input da pipeline?

true(ByPropertyName)

Accetta caratteri jolly?

false

-Force

Forza l'esecuzione del comando senza chiedere conferma all'utente.


Alias

none

Obbligatorio?

false

Posizione?

named

Valore predefinito

none

Accetta input da pipeline?

false

Accetta caratteri jolly?

false

-RecoveryServiceEndPoint<Uri>

Specifies the path to the Microsoft BitLocker Administration and Monitoring (MBAM) Recovery Service endpoint on the network. The URL for the MBAM Recovery service endpoint is http(s)://<servername>:<port>/MBAMRecoveryAndHardwareService/CoreService.svc (for instance, https://mbamserver.contoso.com:8080/ MBAMRecoveryAndHardwareService/CoreService.svc).


Alias

svc,service

Obbligatorio?

true

Posizione?

named

Valore predefinito

none

Accetta input da pipeline?

false

Accetta caratteri jolly?

false

-RetryCount<Int32>

Specifies the maximum number of times to retry to send recovery information. The cmdlet proceeds to the next record after the retry limit is exceeded.


Alias

rc

Obbligatorio?

false

Posizione?

named

Valore predefinito

none

Accetta input da pipeline?

false

Accetta caratteri jolly?

false

-RetryIntervalSeconds<Int32>

Specifies the amount of time in seconds to wait before the cmdlet retries to send the recovery information.


Alias

ri

Obbligatorio?

false

Posizione?

named

Valore predefinito

none

Accetta input da pipeline?

false

Accetta caratteri jolly?

false

<CommonParameters>

Questo cmdlet supporta i parametri comuni: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer e -OutVariable. Per altre informazioni, vedere   about_CommonParameters (http://go.microsoft.com/fwlink/p/?LinkID=113216).

Input

Il tipo di input è il tipo degli oggetti che è possibile reindirizzare al cmdlet.

Output

Il tipo di output corrisponde al tipo di oggetti generati dal cmdlet.

Esempi

Example 1: Give a user permission to recover TPM and Bitlocker information for a specified computer

This command gives User12@Contoso.com permission to recover TPM and Bitlocker information from self-service portal for computer User12-PC.Contoso.com and its volumes.


PS C:\> Write-MbamComputerUser -RecoveryServiceEndPoint http://MBAMServer.contoso.com:8080 -Computer User12-PC.Contoso.com -user @("User12@Contoso.com")

Example 2: Give a user permission to recover TPM and Bitlocker information for a specified computer and suppress user confirmation

This command gives User12@Contoso.com permission to recover TPM and Bitlocker information from self-service portal for computer User12-PC.Contoso.com and its volumes.

This command additionally suppresses user confirmation.


PS C:\> Write-MbamComputerUser -RecoveryServiceEndPoint http://MBAMServer.contoso.com:8080 -Computer User12-PC.Contoso.com -user @("User12@Contoso.com") -Force

Example 3: Give multiple users permission to recover TPM and Bitlocker information for a specified computer and attempt recovery if the cmdlet fails

This command gives User12@Contoso.com and User13@Contoso.com permission to recover TPM and Bitlocker information from self-service portal for computer User12-PC.Contoso.com and its volumes.

The command also attempts recovery two more times with a ten second wait time between attempts. This command additionally suppresses user confirmation.


PS C:\> Write-MbamComputerUser -svc http://MBAMServer.contoso.com:8080 -Computer User12-PC.Contoso.com -ComputerUser @("User12@Contoso.com", "User13@Contoso.net") -RetryCount 2 -RetryIntervalSeconds 10 -Force

Example 4: Give a user permission to recover TPM and Bitlocker information for a specified computer and attempt recovery if the cmdlet fails

This command gives User12@Contoso.com permission to recover TPM and Bitlocker information from self-service portal for the computer User13-Desktop.Domain.Net and its volumes.

This command attempts recovery two more times with a ten second wait time between attempts.


PS C:\> Write-MbamComputerUser -service http://MBAMServer.contoso.com:8080 -Computer User13-Desktop.Domain.Net -user @("User12@Contoso.com") -rc 2 -ri 10                         

Example 5: Give a user permission to recover TPM and Bitlocker information for a specified machine and attempt recovery if the cmdlet fails

This command gives User12@Contoso.com permission to recover TPM and Bitlocker information from the self-service portal for the machine User13-Desktop.Domain.Net and its volumes.

This command also attempts recovery two more times with a ten second wait time between attempts.


PS C:\> Write-MbamComputerUser -service http://MBAMServer.contoso.com:8080 -Computer User13-Desktop.Domain.Net -user @("User12@Contoso.com") -rc 2 -ri 10 -Confirm 

Argomenti correlati

Aggiunte alla community

AGGIUNGI
Mostra: