New-AzNetAppFilesActiveDirectory

模組:

Az.NetAppFiles

建立新的 Azure NetApp Files （ANF） Active Directory 組態。

Syntax

New-AzNetAppFilesActiveDirectory
   -ResourceGroupName <String>
   -AccountName <String>
   [-Dns <String[]>]
   -Domain <String>
   [-Site <String>]
   -SmbServerName <String>
   [-Username <String>]
   [-Password <SecureString>]
   [-OrganizationalUnit <String>]
   [-KdcIP <String>]
   [-BackupOperator <String[]>]
   [-ServerRootCACertificate <String>]
   [-AdName <String>]
   [-SecurityOperator <String[]>]
   [-AesEncryption]
   [-LdapSigning]
   [-LdapOverTLS]
   [-AllowLocalNfsUsersWithLdap]
   [-Administrator <String[]>]
   [-EncryptDCConnection]
   [-LdapSearchScope <PSNetAppFilesLdapSearchScopeOpt>]
   [-PreferredServersForLdapClient <String[]>]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

New-AzNetAppFilesActiveDirectory
   [-Dns <String[]>]
   -Domain <String>
   [-Site <String>]
   -SmbServerName <String>
   [-Username <String>]
   [-Password <SecureString>]
   [-OrganizationalUnit <String>]
   [-KdcIP <String>]
   [-BackupOperator <String[]>]
   [-ServerRootCACertificate <String>]
   [-AdName <String>]
   [-SecurityOperator <String[]>]
   [-AesEncryption]
   [-LdapSigning]
   [-LdapOverTLS]
   [-AllowLocalNfsUsersWithLdap]
   [-Administrator <String[]>]
   [-EncryptDCConnection]
   [-LdapSearchScope <PSNetAppFilesLdapSearchScopeOpt>]
   [-PreferredServersForLdapClient <String[]>]
   -AccountObject <PSNetAppFilesAccount>
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Description

New-AzNetAppFilesActiveDirectory Cmdlet 會為 ANF 帳戶建立新的 Active Directory 組態。

範例

範例 1

$pwd_secure_string = Read-Host "Enter a Password" -AsSecureString
New-AzNetAppFilesActiveDirectory -ResourceGroupName "MyRG" -AccountName "MyAccount" -AdName "MyADName" -Username "AdUserName" -Password $pwd_secure_string -Domain "AdDomain" -Dns "192.0.2.2" -SmbServerName "AdSmbServerName"

此命令會從 promt 取得 AD 密碼，以將 ANF 帳戶 “MyAnfAccount” 的新 Active Directory 組態保密。

參數

-AccountName

ANF 帳戶的名稱

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-AccountObject

新備份原則對象的帳戶

Type:	PSNetAppFilesAccount
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	True
Accept wildcard characters:	False

-Administrator

要新增至內建 管理員 istrators Active Directory 群組的網域使用者。 沒有網域規範的唯一用戶名稱清單。

Type:	String[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-AdName

Active Directory 計算機的名稱。 只有在建立 kerberos 磁碟區時，才會使用這個選擇性參數

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-AesEncryption

啟用 AES 時，請設定是否已啟用 SMB 通訊的 AES 加密。

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-AllowLocalNfsUsersWithLdap

如果啟用，NFS 用戶端本機使用者也可以（除了LDAP使用者）存取NFS磁碟區。

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-BackupOperator

要新增至內建備份操作員 Active Directory 群組的使用者。 沒有網域規範的唯一用戶名稱清單

Type:	String[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Confirm

執行 Cmdlet 之前先提示您確認。

Type:	SwitchParameter
Aliases:	cf
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-DefaultProfile

用於與 Azure 通訊的認證、帳戶、租用戶和訂用帳戶。

Type:	IAzureContextContainer
Aliases:	AzContext, AzureRmContext, AzureCredential
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Dns

Active Directory 網域的 DNS 伺服器 IP 位址逗號分隔清單 （僅限 IPv4）

Type:	String[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Domain

Active Directory 網域的名稱

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-EncryptDCConnection

如果啟用，SMB 伺服器到域控制器之間的流量將會加密。

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-KdcIP

Active Directory 計算機的 kdc 伺服器 IP 位址。 只有在建立 Kerberos 磁碟區時，才會使用這個選擇性參數。

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-LdapOverTLS

啟用LDAP over SSL/TLS時，指定是否需要透過TLS保護LDAP流量。

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-LdapSearchScope

LDAP 搜尋範圍選項。

Type:	PSNetAppFilesLdapSearchScopeOpt
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-LdapSigning

啟用LDAP over SSL/TLS時，指定是否需要簽署LDAP流量。

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-OrganizationalUnit

Windows Active Directory 內的組織單位 （OU）

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Password

Active Directory 網域系統管理員的純文本密碼，回應中會遮罩值

Type:	SecureString
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-PreferredServersForLdapClient

LDAP 用戶端慣用伺服器的IPv4位址逗號分隔清單。 最多可以傳遞兩個逗號分隔的IPv4位址。

Type:	String[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-ResourceGroupName

ANF 帳戶的資源群組

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-SecurityOperator

要授與 Active Directory 中網域使用者的安全性許可權（SMB 持續可用的 SQL 共用所需）。 沒有網域規範的唯一用戶名稱清單

Type:	String[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-ServerRootCACertificate

啟用LDAP over SSL/TLS時，LDAP客戶端必須有base64編碼的Active Directory 憑證服務的自我簽署根 CA 憑證，這個選擇性參數只會用於具有LDAP用戶對應磁碟區的雙重通訊協定。

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Site

服務會將域控制器探索限制為的 Active Directory 月臺

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-SmbServerName

SMB 伺服器的 NetBIOS 名稱。 此名稱將會註冊為 AD 中的電腦帳戶，並用來掛接磁碟區

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-Username

具有建立電腦帳戶許可權的網域用戶帳戶

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-WhatIf

顯示執行 Cmdlet 後會發生的情況。 未執行 Cmdlet。

Type:	SwitchParameter
Aliases:	wi
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

輸入

PSNetAppFilesAccount

輸出

PSNetAppFilesActiveDirectory

相關連結

• Get-AzNetAppFilesActiveDirectory
• Remove-AzNetAppFilesActiveDirectory
• Update-AzNetAppFilesActiveDirectory
• Get-AzNetAppFilesAccount
• New-AzNetAppFilesAccount
• Remove-AzNetAppFilesAccount
• Set-AzNetAppFilesAccount
• Update-AzNetAppFilesAccount