Set-DsHeuristics

NAME Set-DsHeuristics



SYNOPSIS

The dsHeuristics option can be configured to override the default restriction on anonymous access to AD data above

the rootDSE level. Directory data (outside the root DSE) of a non-public directory must be configured to prevent

anonymous access.





SYNTAX

Set-DsHeuristics [-AddAnonymousRead] [[-Credential] <PSCredential>] [<CommonParameters>]





DESCRIPTION

The Set-DsHeuristics cmdlet configures anonymous access to AD data. The command must be run with Enterprise Admin

credentials.





PARAMETERS

-AddAnonymousRead [<SwitchParameter>]



Required? false

Position? named

Default value False

Accept pipeline input? false

Accept wildcard characters? false



-Credential <PSCredential>

The credentials to use to make the change. The command must be run with Enterprise Admin credentials.



Required? false

Position? 1

Default value [System.Management.Automation.PSCredential]::Empty

Accept pipeline input? false

Accept wildcard characters? false



<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,

ErrorAction, ErrorVariable, WarningAction, WarningVariable,

OutBuffer, PipelineVariable, and OutVariable. For more information, see

about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).



INPUTS

System.Management.Automation.SwitchParameter, System.Management.Automation.PSCredential





OUTPUTS

System.String





NOTES





AUTHOR: Michael Haken

LAST UPDATE: 2/27/2016



-------------------------- EXAMPLE 1 --------------------------



PS C:\\>Set-DsHeuristic



Removes anonymous access from the AD Forest









-------------------------- EXAMPLE 2 --------------------------



PS C:\\>Set-DsHeuristic -AddAnonymousRead



Adds anonymous read access to the AD Forest











RELATED LINKS