PowerShell cmdlets

Specops Password Policy Basic includes several Windows PowerShell cmdlets that can be used to manage the Windows Server 2008 fine-grained password policies directly from PowerShell. For more information about PowerShell, visit the Microsoft website, http://www.microsoft.com/powershell.

Setting it up

To start using the cmdlets, perform the following steps:

• Install Specops Password Policy Basic and make sure that the PowerShell Cmdlets feature is included in the installation.
• Start PowerShell and make the Specops Password Policy Basic Cmdlets availible by running the following command:

Add-PSSnapin SpecopsSoft.PasswordPolicyBasic

The CmdLets

After adding the PowerShell SnapIn, the following cmdlets are made available:

• Get-BasicAffectedUsersForPasswordPolicy - Used to find all users affected by a fine-grained password policy
• Get-BasicAffectingPasswordPolicy - Used to find the fine-grained password policy that affect a specific user
• Get-BasicDomainPasswordPolicy - Retrieves the single non-fine-grained password password policy set by Group Policy
• Get-BasicPasswordPolicy - Finds one or more fine-grained password polices
• New-BasicPasswordPolicy - Creates a new fine-grained password policy
• Remove-BasicPasswordPolicy - Removes a fine-grained password policy

To get a list of all the password policy cmdlets from within PowerShell, use the following command:

Get-Command -Noun Basic*

This will produce a list, similar to that above.

Page last modified on October 13, 2008, at 09:20 PM

Related