PowerShell Logo Small

Set-ADClaimTransformPolicy



This is the built-in help made by Microsoft for the command 'Set-ADClaimTransformPolicy', in PowerShell version 3 - as retrieved from Windows version 'Microsoft Windows Server 2012 Standard' PowerShell help files on 2016-06-23.

For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.

SYNOPSIS

Sets the properties of a claims transformation policy in Active Directory.

SYNTAX


Set-ADClaimTransformPolicy [-Identity] <ADClaimTransformPolicy> [-Add <Hashtable>] [-AuthType <ADAuthType>] [-Clear <String[]>] [-Credential
<PSCredential>] [-Description <String>] [-PassThru [<SwitchParameter>]] [-ProtectedFromAccidentalDeletion <Boolean>] [-Remove <Hashtable>]
[-Replace <Hashtable>] [-Rule <String>] [-Server <String>] [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]] [<CommonParameters>]
Set-ADClaimTransformPolicy [-Identity] <ADClaimTransformPolicy> [-Add <Hashtable>] [-AuthType <ADAuthType>] [-Clear <String[]>] [-Credential
<PSCredential>] [-Description <String>] [-PassThru [<SwitchParameter>]] [-ProtectedFromAccidentalDeletion <Boolean>] [-Remove <Hashtable>]
[-Replace <Hashtable>] [-Server <String>] -DenyAllExcept <ADClaimType[]> [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]]
[<CommonParameters>]
Set-ADClaimTransformPolicy [-Identity] <ADClaimTransformPolicy> [-Add <Hashtable>] [-AuthType <ADAuthType>] [-Clear <String[]>] [-Credential
<PSCredential>] [-Description <String>] [-PassThru [<SwitchParameter>]] [-ProtectedFromAccidentalDeletion <Boolean>] [-Remove <Hashtable>]
[-Replace <Hashtable>] [-Server <String>] -AllowAllExcept <ADClaimType[]> [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]]
[<CommonParameters>]
Set-ADClaimTransformPolicy [-Identity] <ADClaimTransformPolicy> [-Add <Hashtable>] [-AuthType <ADAuthType>] [-Clear <String[]>] [-Credential
<PSCredential>] [-Description <String>] [-PassThru [<SwitchParameter>]] [-ProtectedFromAccidentalDeletion <Boolean>] [-Remove <Hashtable>]
[-Replace <Hashtable>] [-Server <String>] -AllowAll [<SwitchParameter>] [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]]
[<CommonParameters>]
Set-ADClaimTransformPolicy [-Identity] <ADClaimTransformPolicy> [-Add <Hashtable>] [-AuthType <ADAuthType>] [-Clear <String[]>] [-Credential
<PSCredential>] [-Description <String>] [-PassThru [<SwitchParameter>]] [-ProtectedFromAccidentalDeletion <Boolean>] [-Remove <Hashtable>]
[-Replace <Hashtable>] [-Server <String>] -DenyAll [<SwitchParameter>] [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]]
[<CommonParameters>]
Set-ADClaimTransformPolicy [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-PassThru [<SwitchParameter>]] [-Server <String>] -Instance
<ADClaimTransformPolicy> [-Confirm [<SwitchParameter>]] [-WhatIf [<SwitchParameter>]] [<CommonParameters>]



Search powershellhelp.space

DESCRIPTION


The Set-ADClaimTransformPolicy cmdlet can be used to set the properties of a claims transformation policy in Active Directory. A claims
transformation policy object contains a set of rules authored in the transformation rule language.



<

RELATED LINKS


Online Version: http://go.microsoft.com/fwlink/?LinkId=216409

REMARKS

<

Examples


-------------------------- EXAMPLE 1 --------------------------

C:\PS>Set-ADClaimTransformPolicy DenyAllPolicy -DenyAll



Description

-----------

Sets the transformation rule on the claims transformation policy named 'DenyAllPolicy' to deny all claims, both those that are sent as well as
those that are received.




-------------------------- EXAMPLE 2 --------------------------

C:\PS>Set-ADClaimTransformPolicy AllowAllExceptCompanyAndDepartmentPolicy -AllowAllExcept Company,Department



Description

-----------

Set the transformation rule on the claims transformation policy named 'AllowAllExceptCompanyAndDepartmentPolicy' to allow all claims to be
sent or received except for the claims Company and Department.




-------------------------- EXAMPLE 3 --------------------------

C:\PS>Set-ADClaimTransformPolicy HumanResourcesToHrPolicy -Rule 'C1:[Type=="ad://ext/Department:88ce6e1cc00e9524", Value=="Human Resources",
ValueType=="string"] => issue(Type=C1.Type, Value="HR", ValueType=C1.ValueType);'



Description

-----------

Sets the transformation rule on the claims transformation policy named 'HumanResourcesToHrPolicy' to transform the value 'Human Resources' to
'HR' in the claim 'ad://ext/Department:88ce6e1cc00e9524'.




-------------------------- EXAMPLE 4 --------------------------

C:\PS>$rule = Get-Content C:\rule.txt
Set-ADClaimTransformPolicy MyRule -Rule $rule



Description

-----------

Set the transformation rule on the claims transformation policy named 'MyRule' with the rule specified in C:\rule.txt.