This is the built-in help made by Microsoft for the command 'Get-ADAccountResultantPasswordReplicationPolicy', in PowerShell version 3 - as retrieved from
Windows version 'Microsoft Windows Server 2012 Standard' PowerShell help files on 2016-06-23.
For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.
Gets the resultant password replication policy for an Active Directory account.
Get-ADAccountResultantPasswordReplicationPolicy [-Identity] <ADAccount> [-DomainController] <ADDomainController> [-AuthType <ADAuthType>]
[-Credential <PSCredential>] [-Partition <String>] [-Server <String>] [<CommonParameters>]
The Get-ADAccountResultantPasswordReplicationPolicy gets the resultant password replication policy for a user, computer or service account on
the specified read-only domain controller.
The policy will be one of the following values:
Allow or 1
DenyExplicit or 0
DenyImplicit or 2
Unknown or -1
The Identity parameter specifies the account. You can identify a user, computer, or service account object by its distinguished name (DN),
GUID, security identifier (SID) or Security Account Manager (SAM) account name. You can also set the Identity parameter to an account object
variable, such as $<localAccountobject>, or pass an account object through the pipeline to the Identity parameter. For example, you can use
the Get-ADUser, Get-ADComputer, Get-ADServiceAccount or Search-ADAccount cmdlets to retrieve an account object and then pass the object
through the pipeline to the Get-ADAccountResultantPasswordReplicationPolicy cmdlet.
The DomainController parameter specifies the read-only domain controller. You can identify a domain controller by its IPV4Address, global
IPV6Address, or DNS host name. You can also identify a domain controller by the Distinguished Name (DN) of the NTDS settings object or the
server object, the GUID of the NTDS settings object or the server object under the configuration partition, or the DN, SamAccountName, GUID,
SID of the computer object that represents the domain controller. You can also set the DomainController parameter to a domain controller
object variable, such as $<localDomainControllerObject>.
<
Online Version: http://go.microsoft.com/fwlink/?LinkID=219312
Get-ADComputer
Get-ADServiceAccount
Get-ADUser
Search-ADAccount
<
-------------------------- EXAMPLE 1 --------------------------
C:\PS>Get-ADAccountResultantPasswordReplicationPolicy BradSu "FABRIKAM-RODC1"
Description
-----------
Get the resultant password replication policy on the domain for a given user account.
-------------------------- EXAMPLE 2 --------------------------
C:\PS>Get-ADAccountResultantPasswordReplicationPolicy BobKe -DomainController "FABRIKAM-RODC1"
Description
-----------
Get the resultant password replication policy on a specific domain controller for a given user account.
-------------------------- EXAMPLE 3 --------------------------
C:\PS>Get-ADAccountResultantPasswordReplicationPolicy "CN=Jordao Moreno,OU=Europe,OU=Sales,OU=UserAccounts,DC=FABRIKAM,DC=COM" "FABRIKAM-RODC1"
Description
-----------
Get the resultant password replication policy on a specific domain controller for a given user account DN.