Get-ADDCCloningExcludedApplicationList

Get-ADDCCloningExcludedApplicationList

Returns the list of installed programs and services present on this domain controller that are not in the default or user defined inclusion list.

Syntax

Parameter Set: Xml
Get-ADDCCloningExcludedApplicationList -GenerateXml [-Force] [-Path <String> ] [ <CommonParameters>]

Detailed Description

The Get-ADDCCloningExcludedApplicationList cmdlet searches the local domain controller for programs and services in the installed programs database, the services control manager that are not specified in the default and user defined inclusion list. The applications in the resulting list can be added to the user defined exclusion list if they are determined to support cloning. If the applications are not cloneable, they should be removed from the source domain controller before the clone media is created. Any application that appears in cmdlet output and is not included in the user defined inclusion list will force cloning to fail.

Once you have granted a source virtualized DC permissions to be cloned, the Get-ADDCCloningExcludedApplicationList cmdlet should be run a first time with no additional parameters on the source virtualized domain controller to identify all programs or services that are to be evaluated for cloning. Next, vet the returned list with your software vendors and remove any applications from the list that cannot be safely cloned. Finally, you can run the Get-ADDCCloningExcludedApplicationList cmdlet again using the –GenerateXml parameter set to create the CustomDCCloneAllowList.xml file.

The Get-ADDCCloningExcludedApplicationList cmdlet needs to be run before the New-ADDCCloneConfigFile cmdlet is used because if the New-ADDCCloneConfigFile cmdlet detects an excluded application, it will not create a DCCloneConfig.xml file. For more information on virtual domain controller cloning, see the guidance on AD DS virtualization at https://go.microsoft.com/fwlink/?LinkId=208030.

Parameters

-Force

Forces an overwrite of an existing CustomDCCloneAllowList.xml file if one is found to exist at the folder path specified in the -Path parameter.

-GenerateXml

Creates the CustomDCCloneAllowList.xml file and writes it in the location specified using the -Path parameter.

-Path<String>

The folder path to use when creating the CustomDCCloneAllowList.xml file using the -GenerateXml switch parameter.

<CommonParameters>

This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see    about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

Inputs

The input type is the type of the objects that you can pipe to the cmdlet.

• None

Outputs

The output type is the type of the objects that the cmdlet emits.

• ADEntity

Examples

-------------------------- EXAMPLE 1 --------------------------

Description

-----------

Displays the excluded application list to the console. If there is already a CustomDCCloneAllowList.xml, this cmdlet displays the delta of that list compared to the operating system (which may be nothing if the lists match).

C:\PS>Get-ADDCCloningExcludedApplicationList

-------------------------- EXAMPLE 2 --------------------------

Description

-----------

Generates the excluded application list as a file named CustomDCCloneAllowList.xml at the specified folder path (C:\Windows\NTDS) and forces overwrite if a file by that name is found to already exist at that path location.

C:\PS>Get-ADDCCloningExcludedApplicationList -GenerateXml -Path C:\Windows\NTDS -Force