MDM Shell Cmdlet Reference

2/9/2009

This section lists all the Microsoft Windows PowerShell cmdlets available in Mobile Device Manager (MDM) Shell that enable the automation of administrative tasks for MDM servers.

For information regarding the administrator security roles required to use these cmdlets, see Server Administrator Roles in MDM.

MDM Shell Cmdlets

• Add-BlockedDevice
  The Add-BlockedDevice cmdlet adds a compromised managed Windows Mobile device to the blocked device table.

• Add-MDMGatewayServer
  The Add-MDMGatewayServer cmdlet adds a new MDM Gateway Server to MDM.

• Disable-MDMInventory
  The Disable-MDMInventory cmdlet suspends all currently active device inventory collection tasks.

• Disable-MDMTrace
  The Disable-MDMTrace cmdlet disables Windows Preprocessor (WPP) logging for one or more components.

• Enable-MDMInventory
  The Enable-MDMInventory cmdlet resumes all device inventory collection tasks that were suspended with the Disable-MDMInventory cmdlet.

• Enable-MDMTrace
  The Enable-MDMTrace cmdlet enables WPP logging for one or more components.

• Get-BlockedDevice
  The Get-BlockedDevice cmdlet returns information about the current set of managed blocked devices.

• Get-DeviceManagementConfig
  The Get-DeviceManagementConfig cmdlet returns the current global device management configuration.

• Get-EnrollmentConfig
  The Get-EnrollmentConfig cmdlet returns the current configuration of the Enrollment service.

• Get-EnrollmentRequest
  The Get-EnrollmentRequest cmdlet returns pending managed device enrollment requests.

• Get-EnrollmentServiceLog
  The Get-EnrollmentServiceLog cmdlet returns operational log entries from the Enrollment service database.

• Get-MDMCertificateTemplate
  The Get-MDMCertificateTemplate cmdlet returns the certificate templates that have been granted authority to be used in the current MDM instance.

• Get-MDMCurrentInstance
  The Get-MDMCurrentInstance cmdlet returns the MDM instance that the current MDM Shell is managing.

• Get-MDMDevice
  The Get-MDMDevice cmdlet returns information about managed devices that controls.

• Get-MDMDeviceHistory
  The Get-MDMDeviceHistory cmdlet returns the complete set of transaction information for the specified managed device from the server operations log file.

• Get-MDMDeviceInventory
  The Get-MDMDeviceInventory cmdlet returns the complete set of collected inventory data for the specified managed device.

• Get-MDMDeviceRecoveryPassword
  The Get-MDMDeviceRecoveryPassword cmdlet returns the recovery password corresponding to the specified managed device.

• Get-MDMDeviceStatus
  The Get-MDMDeviceStatus cmdlet returns status information for the specified managed device.

• Get-MDMGatewayServer
  The Get-MDMGatewayServer cmdlet returns the current gateway-specific settings and the last known configuration status.

• Get-MDMGlobalGatewayConfig
  The Get-MDMGlobalGatewayConfig cmdlet returns the global virtual private network (VPN) settings shared among all computers that are running MDM Gateway Server.

• Get-MDMInstance
  The Get-MDMInstance cmdlet returns the MDM instances in the MDM system.

• Get-MDMInventoryItem
  The Get-MDMInventoryItem cmdlet returns the currently active device inventory collection tasks.

• Get-MDMServer
  The Get-MDMServer cmdlet returns the collection of servers in MDM.

• Get-MDMTrace
  The Get-MDMTrace cmdlet returns the currently enabled and active Windows Software Trace Preprocessor (WPP) components.

• Get-MobilePolicyServiceConfig
  The Get-MobilePolicyServiceConfig cmdlet returns the current configuration of the Group Policy service.

• Get-SoftwareDistributionConfig
  The Get-SoftwareDistributionConfig cmdlet returns the current configuration of MDM software distribution service.

• Get-WipeConfig
  The Get-WipeConfig cmdlet returns the current configuration of the wipe service.

• Get-WipeRequest
  The Get-WipeRequest cmdlet returns the unprocessed wipe requests for the specified managed device.

• Grant-MDMCertificateTemplate
  The Grant-MDMCertificateTemplate cmdlet authorizes a certificate template to be used in the current MDM instance.

• New-EnrollmentRequest
  The New-EnrollmentRequest cmdlet creates a new managed device enrollment request.

• New-MDMInventoryItem
  The New-MDMInventoryItem cmdlet creates a new device inventory collection task.

• New-WipeRequest
  The New-WipeRequest cmdlet creates a new wipe request that deletes all content on the targeted managed device.

• Remove-BlockedDevice
  The Remove-BlockedDevice cmdlet removes a managed device from the Blocked Device Table.

• Remove-EnrollmentRequest
  The Remove-EnrollmentRequest cmdlet removes a pending enrollment request for a managed device.

• Remove-EnrollmentServiceLog
  The Remove-EnrollmentServiceLog cmdlet removes operational log entries from the Enrollment service database.

• Remove-MDMGatewayServer
  The Remove-MDMGatewayServer cmdlet removes MDM Gateway Server and all corresponding properties from MDM.

• Remove-MDMInventoryItem
  The Remove-MDMInventoryItem cmdlet removes the specified device inventory collection task from the task list on the server.

• Remove-WipeRequest
  The Remove-WipeRequest cmdlet removes a wipe request for the specified managed device if the wipe request is yet unprocessed.

• Restore-MDMInventoryDefaults
  The Restore-MDMInventoryDefaults cmdlet sets all device inventory collection settings to their default values.

• Revoke-MDMCertificateTemplate
  The Revoke-MDMCertificateTemplate cmdlet revokes the authorization of a certificate template in the current MDM instance.

• Set-DeviceManagementConfig
  The Set-DeviceManagementConfig cmdlet sets the global device management configuration values.

• Set-EnrollmentConfig
  The Set-EnrollmentConfig cmdlet updates the current configuration of the Enrollment service by using the provided values.

• Set-EnrollmentPermissions
  The Set-EnrollmentPermissions cmdlet grants MDM Enrollment Server permission to create objects in Active Directory.

• Set-MDMCurrentInstance
  The Set-MDMCurrentInstance cmdlet configures the current MDM Shell to manage the specified MDM instance.

• Set-MDMGatewayServer
  The Set-MDMGatewayServer cmdlet updates the current settings for the specified MDM Gateway Server.

• Set-MDMGlobalGatewayConfig
  The Set-MDMGlobalGatewayConfig cmdlet updates the global VPN settings shared among all computers that are running MDM Gateway Server.

• Set-MDMInventoryItem
  The Set-MDMInventoryItem cmdlet sets the collection frequency for a device inventory collection item.

• Set-MobilePolicyServiceConfig
  The Set-MobilePolicyServiceConfig cmdlet sets the configuration of the Group Policy service.

• Set-SoftwareDistributionConfig
  The Set-SoftwareDistributionConfig cmdlet sets the configuration of MDM software distribution service.

• Set-WipeConfig
  The Set-WipeConfig cmdlet configures the properties of the wipe service.

• Start-MDMVPNService
  The Start-MDMVPNService cmdlet starts the VPN service on the specified MDM Gateway Server.

• Stop-MDMVPNService
  The Stop-MDMVPNService cmdlet stops the VPN service on the specified MDM Gateway Server.

• Update-MDMDeviceRecoveryPassword
  The Update-MDMDeviceRecoveryPassword cmdlet forces the specified managed device to generate a new recovery password and send it to the server in the next scheduled device management session.

• Update-MDMDeviceRecoveryPasswordEncryptionKey
  The Update-MDMDeviceRecoveryPasswordEncryptionKey cmdlet deletes all device recovery passwords in the current MDM instance. Managed devices then generate new recovery passwords.

• Update-MDMGatewayServer
  The Update-MDMGatewayServer cmdlet updates each MDM Gateway Server from the Gateway Central Management (MDM GCM) component of MDM Device Management Server.

• Update-MobilePolicyCalculation
  The Update-MobilePolicyCalculation cmdlet updates the Resultant Set of Policy (RSoP) held by the server for a given device.

See Also

Reference

Server Administrator Roles in MDM

Concepts

Overview of MDM Shell

Other Resources

MDM Shell