Get-CertificateAutoEnrollmentPolicy
Retrieves certificate auto-enrollment policy settings.
Syntax
Get-CertificateAutoEnrollmentPolicy
-Scope <AutoEnrollmentPolicyScope>
-Context <Context>
[<CommonParameters>]
Description
The Get-CertificateAutoEnrollmentPolicy
cmdlet gets certificate auto-enrollment policy settings
for the user or computer. This cmdlet can return the settings configured in local policy or that are
being applied from either local or domain policy.
Delegation may be required when using this cmdlet with Windows PowerShell remoting and changing user configuration.
Examples
EXAMPLE 1
Get-CertificateAutoEnrollmentPolicy -Scope Local -Context User
PolicyState : Enabled
EnableMyStoreManagement : True
EnableTemplateCheck : True
ExpirationPercentage : 10
StoreName : {MY}
EnableBalloonNotifications : False
This example gets the locally configured certificate auto-enrollment user policy. In this example, the renew expired certificates, update pending certificates, remove revoked certificates, and update certificates that use certificates templates options are enabled. Also, the expiration notifications option is enabled and set to 10 percent of the certificate lifetime which are stored in the MY store. Finally, balloon notifications are disabled.
Parameters
-Context
Specifies the context of the enrollment policy to return.
Type: | Microsoft.CertificateServices.Commands.Context |
Accepted values: | Machine, User |
Position: | Named |
Default value: | None |
Required: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-Scope
Specifies the scope of the enrollment policy to return. If Local
scope is specified, then the
locally configured policy is returned. If Applied
scope is specified, then the currently applied
policy which can be either the local policy or a domain policy, is returned.
Type: | Microsoft.CertificateServices.Commands.AutoEnrollmentPolicyScope |
Accepted values: | Applied, Local |
Position: | Named |
Default value: | None |
Required: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Inputs
Microsoft.CertificateServices.Commands.AutoEnrollmentPolicy
The AutoEnrollmentPolicy object combines certificate auto-enrollment policy settings and exposes them as properties.
Outputs
Microsoft.CertificateServices.Commands.AutoEnrollmentPolicy
The AutoEnrollmentPolicy object combines certificate auto-enrollment policy settings and exposes
them as properties. Each property can be modified and piped into the
Set-CertificateAutoEnrollmentPolicy
cmdlet to be applied.