PowerShell Logo Small

New-ADClaimTransformPolicy



This is the built-in help made by Microsoft for the command 'New-ADClaimTransformPolicy', in PowerShell version 3 - as retrieved from Windows version 'Microsoft Windows Server 2012 Standard' PowerShell help files on 2016-06-23.

For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.

SYNOPSIS

Creates a new claim transformation policy object in Active Directory.

SYNTAX


New-ADClaimTransformPolicy [-Name] <String> [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Description <String>] [-PassThru
[<SwitchParameter>]] [-ProtectedFromAccidentalDeletion <Boolean>] [-Server <String>] -AllowAll [<SwitchParameter>] [-Confirm
[<SwitchParameter>]] [-WhatIf [<SwitchParameter>]] [<CommonParameters>]
New-ADClaimTransformPolicy [-Name] <String> [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Description <String>] [-PassThru
[<SwitchParameter>]] [-ProtectedFromAccidentalDeletion <Boolean>] [-Server <String>] -AllowAllExcept <ADClaimType[]> [-Confirm
[<SwitchParameter>]] [-WhatIf [<SwitchParameter>]] [<CommonParameters>]
New-ADClaimTransformPolicy [-Name] <String> [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Description <String>] [-PassThru
[<SwitchParameter>]] [-ProtectedFromAccidentalDeletion <Boolean>] [-Server <String>] -DenyAll [<SwitchParameter>] [-Confirm
[<SwitchParameter>]] [-WhatIf [<SwitchParameter>]] [<CommonParameters>]
New-ADClaimTransformPolicy [-Name] <String> [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Description <String>] [-PassThru
[<SwitchParameter>]] [-ProtectedFromAccidentalDeletion <Boolean>] [-Server <String>] -DenyAllExcept <ADClaimType[]> [-Confirm
[<SwitchParameter>]] [-WhatIf [<SwitchParameter>]] [<CommonParameters>]
New-ADClaimTransformPolicy [-Name] <String> [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Description <String>] [-Instance
<ADClaimTransformPolicy>] [-PassThru [<SwitchParameter>]] [-ProtectedFromAccidentalDeletion <Boolean>] [-Server <String>] -Rule <String>
[-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]] [<CommonParameters>]



Search powershellhelp.space

DESCRIPTION


The New-ADClaimTransformPolicy cmdlet creates a new claims transformation policy object in Active Directory. A claims transformation policy
object contains a set of rules authored in the transformation rule language. After creating a policy object, you can link it with a forest
trust to apply the claims transformation to the trust.



<

RELATED LINKS


Online Version: http://go.microsoft.com/fwlink/?LinkId=216374

REMARKS

<

Examples


-------------------------- EXAMPLE 1 --------------------------

C:\PS>New-ADClaimTransformPolicy DenyAllPolicy -DenyAll



Description

-----------

Create a new claims transformation policy named 'DenyAllPolicy' that denies all claims, both those that are sent as well as those that are
received.




-------------------------- EXAMPLE 2 --------------------------

C:\PS>New-ADClaimTransformPolicy AllowAllExceptCompanyAndDepartmentPolicy -AllowAllExcept Company,Department



Description

-----------

Create a new claims transformation policy named 'AllowAllExceptCompanyAndDepartmentPolicy' that allows all claims to be sent or received
except for the claims 'Company' and 'Department'.




-------------------------- EXAMPLE 3 --------------------------

C:\PS>New-ADClaimTransformPolicy HumanResourcesToHrPolicy -Rule 'C1:[Type=="ad://ext/Department:88ceb0fe88a125db", Value=="Human Resources",
ValueType=="string"] => issue(Type=C1.Type, Value="HR", ValueType=C1.ValueType);'



Description

-----------

Create a new claims transformation policy named 'HumanResourcesToHrPolicy' that transforms the value 'Human Resources' to 'HR' in the claim
'Department'.




-------------------------- EXAMPLE 4 --------------------------

C:\PS>$rule = Get-Content C:\rule.txt;
New-ADClaimTransformPolicy MyRule -Rule $rule



Description

-----------

Create a new claims transformation policy named 'MyRule' with the rule specified in C:\rule.txt.