PowerShell Logo Small

Get-ADAccountResultantPasswordReplicationPolicy



This is the built-in help made by Microsoft for the command 'Get-ADAccountResultantPasswordReplicationPolicy', in PowerShell version 5 - as retrieved from Windows version 'Microsoft Windows Server 2012 R2 Standard' PowerShell help files on 2016-06-23.

For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.

SYNOPSIS

Gets the resultant password replication policy for an Active Directory account.

SYNTAX


Get-ADAccountResultantPasswordReplicationPolicy [-Identity] <ADAccount> [-DomainController] <ADDomainController> [-AuthType {Negotiate | Basic}] [-Credential <PSCredential>]
[-Partition <String>] [-Server <String>] [<CommonParameters>]



Search powershellhelp.space

DESCRIPTION


The Get-ADAccountResultantPasswordReplicationPolicy cmdlet gets the resultant password replication policy for a user, computer or service account on the specified read-only
domain controller.


The policy will be one of the following values:

-- Allow or 1
-- DenyExplicit or 0
-- DenyImplicit or 2
-- Unknown or -1


The Identity parameter specifies the account. You can identify a user, computer, or service account object by its distinguished name (DN), GUID, security identifier (SID) or
Security Account Manager (SAM) account name. You can also set the Identity parameter to an account object variable, such as $<localAccountobject>, or pass an account object
through the pipeline to the Identity parameter. For example, you can use the Get-ADUser, Get-ADComputer, Get-ADServiceAccount, or Search-ADAccount cmdlets to retrieve an
account object and then pass the object through the pipeline to the Get-ADAccountResultantPasswordReplicationPolicy cmdlet.


The DomainController parameter specifies the read-only domain controller. You can identify a domain controller by its IPV4Address, global IPV6Address, or DNS host name. You
can also identify a domain controller by the Distinguished Name (DN) of the NTDS settings object or the server object, the GUID of the NTDS settings object or the server
object under the configuration partition, or the DN, SamAccountName, GUID, SID of the computer object that represents the domain controller. You can also set the
DomainController parameter to a domain controller object variable, such as $<localDomainControllerObject>.



<

RELATED LINKS

Online Version: http://go.microsoft.com/fwlink/p/?linkid=291016
Get-ADComputer
Get-ADServiceAccount
Get-ADUser
Search-ADAccount

REMARKS

<

Examples


-------------------------- EXAMPLE 1 --------------------------

PS C:\>Get-ADAccountResultantPasswordReplicationPolicy -Identity BradSu -DomainController "FABRIKAM-RODC1"



This command gets the resultant password replication policy on the domain specified by the DomainController parameter for the user account specified by the Identity
parameter.




-------------------------- EXAMPLE 2 --------------------------

PS C:\>Get-ADAccountResultantPasswordReplicationPolicy -Identity "CN=Jordao Moreno,OU=Europe,OU=Sales,OU=UserAccounts,DC=FABRIKAM,DC=COM" -DomainController "FABRIKAM-RODC1"



This command gets the resultant password replication policy on the domain controller specified by the DomainController parameter for the user account distinguisted name
specified by the Identity parameter.