Set-MDIConfiguration
Sets the configuration for various Defender for Identity post-deployment required settings.
Syntax
Set-MDIConfiguration
[-Mode] <String>
[-Configuration] <String[]>
[-GpoNamePrefix <String>][-Server <String>]
[-CreateGpoDisabled]
[-SkipGpoLink]
[-Force]
[-WhatIf]
[-Confirm][<CommonParameters>]
Description
The Set-MDIConfiguration
function sets the configuration for various Defender for Identity
post-deployment required settings.
Examples
EXAMPLE 1
Set-MDIConfiguration -Mode LocalMachine -Configuration NTLMAuditing
This example sets the NTLMAuditing
configuration for the local machine.
EXAMPLE 2
Set-MDIConfiguration -Mode Domain -Configuration All
This example sets all configurations for the domain, creating the GPOs and linking them.
EXAMPLE 3
Set-MDIConfiguration -Mode Domain -Configuration All -GpoNamePrefix 'CONTOSO' -SkipGpoLink
This example sets all configurations for the domain, creating the GPOs with a CONTOSO
prefix
in their name, without linking the GPOs.
Parameters
-Configuration
Specifies the configuration to set. You can specify one or more of the following values:
All
(all configurations)AdfsAuditing
AdvancedAuditPolicyCAs
AdvancedAuditPolicyDCs
CAAuditing
ConfigurationContainerAuditing
DomainObjectAuditing
NTLMAuditing
ProcessorPerformance
Type: | System.String[] |
Position: | 2 |
Default value: | None |
Required: | True |
Accept pipeline input: | True |
Accept wildcard characters: | False |
-Confirm
Prompts you for confirmation before running the cmdlet.
Type: | System.Management.Automation.SwitchParameter |
Aliases: | cf |
Position: | Named |
Default value: | False |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-CreateGpoDisabled
If specified, the GPOs are created and kept as disabled. This parameter is valid only in Domain
mode.
Type: | System.Management.Automation.SwitchParameter |
Position: | Named |
Default value: | False |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-Force
If specified, set the configuration or create GPOs without validating the current state.
Type: | System.Management.Automation.SwitchParameter |
Position: | Named |
Default value: | False |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-GpoNamePrefix
Specifies a prefix for the Group Policy Objects (GPO) names to be created. Use this parameter for GPO naming convention. Note: Because the GPO's display name may not be unique, an error is returned if another GPO in the domain has the same display name.
Type: | System.String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-Mode
Specifies the mode to use. You must specify one of the following values:
Domain
: Collect settings from the Group Policy objectsLocalMachine
: Collect settings from the local machine
Type: | System.String |
Position: | 1 |
Default value: | None |
Required: | True |
Accept pipeline input: | True |
Accept wildcard characters: | False |
-Server
Specifies the name of the server to run the command against. This parameter is optional and defaults to the PDC Emulator in the domain.
Type: | System.String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-SkipGpoLink
If specified, don't create GPO links. This parameter is valid only in Domain
mode.
Type: | System.Management.Automation.SwitchParameter |
Position: | Named |
Default value: | False |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet isn't run.
Type: | System.Management.Automation.SwitchParameter |
Aliases: | wi |
Position: | Named |
Default value: | False |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |