PowerShell Logo Small

Install-AdcsNetworkDeviceEnrollmentService



This is the built-in help made by Microsoft for the command 'Install-AdcsNetworkDeviceEnrollmentService', in PowerShell version 5 - as retrieved from Windows version 'Microsoft Windows Server 2012 R2 Standard' PowerShell help files on 2016-06-23.

For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.

SYNOPSIS

Installs Network Device Enrollment Service

SYNTAX


Install-AdcsNetworkDeviceEnrollmentService [-ApplicationPoolIdentity] [-CAConfig <String>] [-Credential <PSCredential>] [-EncryptionKeyLength <Int32>]
[-EncryptionProviderName <String>] [-Force] [-RACity <String>] [-RACompany <String>] [-RACountry <String>] [-RADepartment <String>] [-RAEmail <String>] [-RAName <String>]
[-RAState <String>] [-SigningKeyLength <Int32>] [-SigningProviderName <String>] [<CommonParameters>]
Install-AdcsNetworkDeviceEnrollmentService [-CAConfig <String>] [-Credential <PSCredential>] [-EncryptionKeyLength <Int32>] [-EncryptionProviderName <String>] [-Force]
[-RACity <String>] [-RACompany <String>] [-RACountry <String>] [-RADepartment <String>] [-RAEmail <String>] [-RAName <String>] [-RAState <String>] [-SigningKeyLength
<Int32>] [-SigningProviderName <String>] -ServiceAccountName <String> -ServiceAccountPassword <SecureString> [<CommonParameters>]



Search powershellhelp.space

DESCRIPTION


The Install-AdcsNetworkDeviceEnrollmentService cmdlet performs the configuration of the Network Device Enrollment Service (NDES) role service.


To remove the NDES role service, use the Uninstall-AdcsNetworkDeviceEnrollmentService cmdlet


You can import the cmdlet by running the following commands from Windows PowerShell:
Import-Module ServerManager
Add-WindowsFeature Adcs-Device-Enrollment


Int is equivalent to Int32 in the .NET Framework (http://msdn.microsoft.com/en-us/library/ya5y69ds.aspx).



<

RELATED LINKS

Online Version: http://go.microsoft.com/fwlink/?linkid=299502
Uninstall-AdcsNetworkDeviceEnrollmentService

REMARKS

<

Examples


-------------------------- EXAMPLE 1 --------------------------

C:\PS>Install-AdcsNetworkDeviceEnrollmentService -ApplicationPoolIdentity -WhatIf



Description

-----------

This command displays the default Network Device Enrollment Service settings when the service is running as the default application identity without making any changes to
the configuration.




-------------------------- EXAMPLE 2 --------------------------

C:\PS>Install-AdcsNetworkDeviceEnrollmentService -ServiceAccountName <Domain>\<AccountName> -ServiceAccountPassword (read-host "Set user password" -assecurestring) -WhatIf



Description

-----------

This command displays the default settings when NDES is using a service account without making any changes to the configuration. This command assumes that the
<Domain>\<AccountName> service account is a member of the local machine's IIS_USRS group. Substitute the domain name for <Domain> and the user account name for <AccountName>.




-------------------------- EXAMPLE 3 --------------------------

C:\PS>Install-AdcsNetworkDeviceEnrollmentService -ApplicationPoolIdentity -CAConfig <CAComputerName>\<CACommonName>



Description

-----------

This command installs the Network Device Enrollment Service using the application pool identity to use a remote CA as specified by the CA computer
<CACompterName>\<CACommonName>. Substitute the appropriate CA computer name and common name for <CAComputerName> and <CACommonName>.




-------------------------- EXAMPLE 4 --------------------------

C:\PS>Install-AdcsNetworkDeviceEnrollmentService -ServiceAccountName MyDomain\AccountName -ServiceAccountPassword (read-host "Set user password" -assecurestring) -CAConfig
"CAMachineName\CAName" -RAName "Contoso-NDES-RA" -RACountry "US" -RACompany "Contoso" -SigningProviderName "Microsoft Strong Cryptographic Provider" -SigningKeyLength 4096
-EncryptionProviderName "Microsoft Strong Cryptographic Provider" -EncryptionKeyLength 4096



Description

-----------

This command installs the Network Device Enrollment Service using a specific service account, which is indicated by <Domain>\<AccountName>. The command also specifies
several non-default parameters. The example assumes that the <Domain>\<AccountName> user/service account is a member of the local machine's IIS_USRS group. Substitute the
domain name for <Domain> and the user account name for <AccountName>.