Share via


MDM Shell Cmdlet Reference

2/9/2009

This section lists all the Microsoft Windows PowerShell cmdlets available in Mobile Device Manager (MDM) Shell that enable the automation of administrative tasks for MDM servers.

For information regarding the administrator security roles required to use these cmdlets, see Server Administrator Roles in MDM.

MDM Shell Cmdlets

  • Add-BlockedDevice
    The Add-BlockedDevice cmdlet adds a compromised managed Windows Mobile device to the blocked device table.
  • Disable-MDMInventory
    The Disable-MDMInventory cmdlet suspends all currently active device inventory collection tasks.
  • Disable-MDMTrace
    The Disable-MDMTrace cmdlet disables Windows Preprocessor (WPP) logging for one or more components.
  • Enable-MDMInventory
    The Enable-MDMInventory cmdlet resumes all device inventory collection tasks that were suspended with the Disable-MDMInventory cmdlet.
  • Enable-MDMTrace
    The Enable-MDMTrace cmdlet enables WPP logging for one or more components.
  • Get-BlockedDevice
    The Get-BlockedDevice cmdlet returns information about the current set of managed blocked devices.
  • Get-EnrollmentConfig
    The Get-EnrollmentConfig cmdlet returns the current configuration of the Enrollment service.
  • Get-EnrollmentRequest
    The Get-EnrollmentRequest cmdlet returns pending managed device enrollment requests.
  • Get-EnrollmentServiceLog
    The Get-EnrollmentServiceLog cmdlet returns operational log entries from the Enrollment service database.
  • Get-MDMCertificateTemplate
    The Get-MDMCertificateTemplate cmdlet returns the certificate templates that have been granted authority to be used in the current MDM instance.
  • Get-MDMCurrentInstance
    The Get-MDMCurrentInstance cmdlet returns the MDM instance that the current MDM Shell is managing.
  • Get-MDMDevice
    The Get-MDMDevice cmdlet returns information about managed devices that controls.
  • Get-MDMDeviceHistory
    The Get-MDMDeviceHistory cmdlet returns the complete set of transaction information for the specified managed device from the server operations log file.
  • Get-MDMDeviceInventory
    The Get-MDMDeviceInventory cmdlet returns the complete set of collected inventory data for the specified managed device.
  • Get-MDMDeviceRecoveryPassword
    The Get-MDMDeviceRecoveryPassword cmdlet returns the recovery password corresponding to the specified managed device.
  • Get-MDMDeviceStatus
    The Get-MDMDeviceStatus cmdlet returns status information for the specified managed device.
  • Get-MDMGatewayServer
    The Get-MDMGatewayServer cmdlet returns the current gateway-specific settings and the last known configuration status.
  • Get-MDMGlobalGatewayConfig
    The Get-MDMGlobalGatewayConfig cmdlet returns the global virtual private network (VPN) settings shared among all computers that are running MDM Gateway Server.
  • Get-MDMInstance
    The Get-MDMInstance cmdlet returns the MDM instances in the MDM system.
  • Get-MDMInventoryItem
    The Get-MDMInventoryItem cmdlet returns the currently active device inventory collection tasks.
  • Get-MDMServer
    The Get-MDMServer cmdlet returns the collection of servers in MDM.
  • Get-MDMTrace
    The Get-MDMTrace cmdlet returns the currently enabled and active Windows Software Trace Preprocessor (WPP) components.
  • Get-WipeConfig
    The Get-WipeConfig cmdlet returns the current configuration of the wipe service.
  • Get-WipeRequest
    The Get-WipeRequest cmdlet returns the unprocessed wipe requests for the specified managed device.
  • Grant-MDMCertificateTemplate
    The Grant-MDMCertificateTemplate cmdlet authorizes a certificate template to be used in the current MDM instance.
  • New-EnrollmentRequest
    The New-EnrollmentRequest cmdlet creates a new managed device enrollment request.
  • New-MDMInventoryItem
    The New-MDMInventoryItem cmdlet creates a new device inventory collection task.
  • New-WipeRequest
    The New-WipeRequest cmdlet creates a new wipe request that deletes all content on the targeted managed device.
  • Remove-BlockedDevice
    The Remove-BlockedDevice cmdlet removes a managed device from the Blocked Device Table.
  • Remove-EnrollmentRequest
    The Remove-EnrollmentRequest cmdlet removes a pending enrollment request for a managed device.
  • Remove-EnrollmentServiceLog
    The Remove-EnrollmentServiceLog cmdlet removes operational log entries from the Enrollment service database.
  • Remove-MDMGatewayServer
    The Remove-MDMGatewayServer cmdlet removes MDM Gateway Server and all corresponding properties from MDM.
  • Remove-MDMInventoryItem
    The Remove-MDMInventoryItem cmdlet removes the specified device inventory collection task from the task list on the server.
  • Remove-WipeRequest
    The Remove-WipeRequest cmdlet removes a wipe request for the specified managed device if the wipe request is yet unprocessed.
  • Restore-MDMInventoryDefaults
    The Restore-MDMInventoryDefaults cmdlet sets all device inventory collection settings to their default values.
  • Revoke-MDMCertificateTemplate
    The Revoke-MDMCertificateTemplate cmdlet revokes the authorization of a certificate template in the current MDM instance.
  • Set-EnrollmentConfig
    The Set-EnrollmentConfig cmdlet updates the current configuration of the Enrollment service by using the provided values.
  • Set-EnrollmentPermissions
    The Set-EnrollmentPermissions cmdlet grants MDM Enrollment Server permission to create objects in Active Directory.
  • Set-MDMCurrentInstance
    The Set-MDMCurrentInstance cmdlet configures the current MDM Shell to manage the specified MDM instance.
  • Set-MDMGatewayServer
    The Set-MDMGatewayServer cmdlet updates the current settings for the specified MDM Gateway Server.
  • Set-MDMGlobalGatewayConfig
    The Set-MDMGlobalGatewayConfig cmdlet updates the global VPN settings shared among all computers that are running MDM Gateway Server.
  • Set-MDMInventoryItem
    The Set-MDMInventoryItem cmdlet sets the collection frequency for a device inventory collection item.
  • Set-WipeConfig
    The Set-WipeConfig cmdlet configures the properties of the wipe service.
  • Start-MDMVPNService
    The Start-MDMVPNService cmdlet starts the VPN service on the specified MDM Gateway Server.
  • Stop-MDMVPNService
    The Stop-MDMVPNService cmdlet stops the VPN service on the specified MDM Gateway Server.
  • Update-MDMDeviceRecoveryPassword
    The Update-MDMDeviceRecoveryPassword cmdlet forces the specified managed device to generate a new recovery password and send it to the server in the next scheduled device management session.
  • Update-MDMDeviceRecoveryPasswordEncryptionKey
    The Update-MDMDeviceRecoveryPasswordEncryptionKey cmdlet deletes all device recovery passwords in the current MDM instance. Managed devices then generate new recovery passwords.
  • Update-MDMGatewayServer
    The Update-MDMGatewayServer cmdlet updates each MDM Gateway Server from the Gateway Central Management (MDM GCM) component of MDM Device Management Server.
  • Update-MobilePolicyCalculation
    The Update-MobilePolicyCalculation cmdlet updates the Resultant Set of Policy (RSoP) held by the server for a given device.

See Also

Reference

Server Administrator Roles in MDM

Concepts

Overview of MDM Shell

Other Resources

MDM Shell