Share via

AddByClientDownlevelSGGpo method of the PS_DAClient class

  • Article

This cmdlet performs the following operations for W8 and down-level (W7) clients 1. Adds one or more client machine security group(s) to the DA deployment2. Adds one or more DA client GPO(s) in domain(s)3. In a multi-site deployment, adds one or more security group(s) of down-level clients to the DA deployment. These down-level clients can then connect only to the specified site4. In a multi-site deployment, adds one or more down-level DA client GPO(s) in a domain(s).

Syntax

uint32 AddByClientDownlevelSGGpo(
  [in]  string   DownlevelSecurityGroupNameList[],
  [in]  string   DownlevelGpoName[],
  [in]  string   ComputerName,
  [in]  string   EntrypointName,
  [in]  boolean  PassThru,
  [out] DAClient cmdletOutput
);

Parameters

DownlevelSecurityGroupNameList [in]

This parameter is only applicable in case of a multi-site deployment and represent the names of one or more downlevel client security groups that are not already part of the DA deployment. Specified in DOMAIN\SG_NAME format. These down-level clients can then connect only to the site specified in the EntryPointName param (see description of EntryPointName parameter for more details)

DownlevelGpoName [in]

This parameter is applicable only in case of multi-site deployment and represents the name to be used when creating the down-level client GPO in the specified domain or represents the domain in which a down-level client GPO with the default name should be created. GPO is specified in the format DOMAIN\GPO_NAME. Domain is specified in the format DOMAIN. These GPOs correspond to the down-level security groups added using the DownlevelSecurityGroup parameter If the parameter contains only the domain name then the following default GPO name is used: [domain] client policy for [DA connection friendly name]-[entrypoint name] A list of GPOs can be specified

ComputerName [in]

IPv4/IPv6 address or hostname of the machine on which the remote access server machine specific tasks should be executed

EntrypointName [in]

Entrypoint refers to the identity of a site in a multi-site deployment to which down-level clients are added, i.e., these clients can only connect to the specified site. If entrypoint parameter is not specified then the site to which the computer on which the cmdlet is executed belongs is used (user may or may not be specifying a ComputerName). If both entrypoint and computername are specified and the ComputerName doesn't belong to the site represented by the entrypoint then the entrypoint takes precedence and the authentication type is configured for it

PassThru [in]

Returns the client settings object. By default this cmdlet does not generate any output

cmdletOutput [out]

  1. List of client SGs present in the DA deployment. 2. List of client GPOs present in the DA deployment. 3. Status of force tunnel. 4. NRPT object (for force tunnel properties). 5. Support for down-level (enable/disable). 6. Laptop-only deployment (enable/disable).

Requirements
Minimum supported client
 None supported
Minimum supported server
 Windows Server 2012
Namespace
 Root\Microsoft\Windows\RemoteAccess
MOF
RAMgmtPSProvider.mof
DLL
RAMgmtPSProvider.dll

See also

PS_DAClient