[This command requires installed Remote Server Administration Tools (RSAT)]

Restore-InterfaceFlagDefault

Synopsis

Restores Active Directory Certification Authority (AD CS) management and enrollment interface default flags.

Syntax

Restore-InterfaceFlagDefault [-InputObject] <InterfaceFlag[]> [-RestartCA] [<CommonParameters>]

Description

Restores Active Directory Certification Authority (AD CS) management and enrollment default flags and discards any previous interface flag modifications. This command is helpful in the case of incorrect configuration or you want to stay "default".

By default only these flags are enabled:
LockICertRequest - default.
NoRemoteICertAdminBackup - the CA restricts access to the backup-related methods of this protocol for remote callers.

Parameters

-InputObject <InterfaceFlag[]>

Specifies existing InterfaceFlag object. This object can be retrieved by running Get-InterfaceFlag command.

Required? True
Position? 0
Default value  
Accept pipeline input? true (ByValue, ByPropertyName)
Accept wildcard characters? False

-RestartCA <SwitchParameter>

Restarts CA service on the specified CA server to immediately apply changes.

Required? False
Position? named
Default value  
Accept pipeline input? false
Accept wildcard characters? False

<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (http://go.microsoft.com/fwlink/?LinkID=113216).

Inputs

PKI.CertificateServices.Flags.InterfaceFlag

Outputs

PKI.CertificateServices.Flags.InterfaceFlag

Notes

Author: Vadims Podans
Blog: http://en-us.sysadmins.lv

Examples

Example 1

PS C:\> Get-CertificationAuthority -name "company-CA01" | Get-InterFaceFlag | Restore-InterfaceFlagDefault -RestartCA

This command restores default management and enrollment interface restrictions for 'company-CA01' CA server. After the configuration is changed, the command will restart certificate services to immediately apply changes.

Related links

Get-CertificationAuthority
Connect-CertificationAuthority
Get-InterfaceFlag
Enable-InterfaceFlag
Disable-InterfaceFlag

PowerShell Support

  • PowerShell 3.0

Operating System Support

  • Windows Server 2003 all editions
  • Windows Server 2008 all editions
  • Windows Server 2008 R2 all editions
  • Windows Server 2012 all editions
  • Windows Server 2012 R2 all editions

Last edited Aug 10, 2014 at 1:43 PM by camelot, version 5