Get-DnsClientNrptPolicy

NAME Get-DnsClientNrptPolicy



SYNOPSIS

Gets the NRPT configured on a computer.





SYNTAX

Get-DnsClientNrptPolicy [[-Namespace] <String>] [-CimSession <CimSession[]>] [-Effective] [-ThrottleLimit <Int32>] [<CommonParameters>]





DESCRIPTION

The Get-DnsClientNrptPolicy cmdlet gets the following Name Resolution Policy Table (NRPT) details for each namespace.





-- DNS client name resolution fallback policy.



-- DNS client secure name query fallback setting.



-- Direct Access (DA) IPsec Certification Authority (CA) restriction setting.



-- DA proxy name setting.



-- DA DNS servers setting.



-- DA enabled setting.



-- DA proxy type setting.



-- DA Query IPsec encryption setting.



-- DA Query IPsec required setting.



-- DNS client name servers setting.



-- DNS security IPsec CA restriction setting.



-- DNS security query IPsec encryption setting.



-- DNS security query IPsec required setting.



-- DNS security validation required setting.



-- DNS client name encoding setting.





PARAMETERS

-CimSession [<CimSession[]>]

Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such as the output of a New-CimSession

or Get-CimSession cmdlet. The default is the current session on the local computer.



Required? false

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



-Effective [<SwitchParameter>]

Indicates that the effective NRPT policy is returned.



Required? false

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



-Namespace [<String>]

Specifies the DNS namespace for which the policy is retrieved.



Required? false

Position? 2

Default value none

Accept pipeline input? true(ByPropertyName)

Accept wildcard characters? false



-ThrottleLimit [<Int32>]

Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0

is entered, then Windows PowerShell???? calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running

on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.



Required? false

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,

ErrorAction, ErrorVariable, WarningAction, WarningVariable,

OutBuffer, PipelineVariable, and OutVariable. For more information, see

about_CommonParameters (http://go.microsoft.com/fwlink/?LinkID=113216).



INPUTS

None









OUTPUTS

Microsoft.Management.Infrastructure.CimInstance#root/Microsoft/Windows/DNS/DnsClientPolicyConfiguration[]



The Microsoft.Management.Infrastructure.CimInstance object is a wrapper class that displays Windows Management Instrumentation (WMI) objects.

The path after the pound sign (#) provides the namespace and class name for the underlying WMI object.



The DnsClientPolicyConfiguration object contains all of the properties of the DNS client NRPT policy. If the Effective parameter is specified,

then only the contents of effective policy are retrieved.





Example 1: Get the NRPT policy



PS C:\\>Get-DnsClientNrptPolicy

Namespace : nls.corp.contoso.com

QueryPolicy :

SecureNameQueryFallback :

DirectAccessIPsecCARestriction :

DirectAccessProxyName :

DirectAccessDnsServers :

DirectAccessEnabled :

DirectAccessProxyType : UseDefault

DirectAccessQueryIPsecEncryption :

DirectAccessQueryIPsecRequired : False

NameServers :

DnsSecIPsecCARestriction :

DnsSecQueryIPsecEncryption :

DnsSecQueryIPsecRequired : False

DnsSecValidationRequired : False

NameEncoding : Utf8WithoutMapping



Namespace : .corp.contoso.com

QueryPolicy :

SecureNameQueryFallback :

DirectAccessIPsecCARestriction :

DirectAccessProxyName :

DirectAccessDnsServers : {2001:db8:1::2, 2001:db8:2::20,

2001:db8:6::6}

DirectAccessEnabled :

DirectAccessProxyType : NoProxy

DirectAccessQueryIPsecEncryption :

DirectAccessQueryIPsecRequired : False

NameServers :

DnsSecIPsecCARestriction :

DnsSecQueryIPsecEncryption :

DnsSecQueryIPsecRequired : False

DnsSecValidationRequired : False

NameEncoding : Utf8WithoutMapping



This example gets the NRPT policy on a computer.





Example 2: Get the effective NRPT policy



PS C:\\>Get-DnsClientNrptPolicy ????????Effective

Namespace : nls.corp.contoso.com

QueryPolicy : QueryIPv6Only

SecureNameQueryFallback : FallbackPrivate

DirectAccessIPsecCARestriction :

DirectAccessProxyName :

DirectAccessDnsServers :

DirectAccessEnabled : True

DirectAccessProxyType : UseDefault

DirectAccessQueryIPsecEncryption :

DirectAccessQueryIPsecRequired : False

NameServers :

DnsSecIPsecCARestriction :

DnsSecQueryIPsecEncryption :

DnsSecQueryIPsecRequired :

DnsSecValidationRequired :

NameEncoding :



Namespace : .corp.contoso.com

QueryPolicy : QueryIPv6Only

SecureNameQueryFallback : FallbackPrivate

DirectAccessIPsecCARestriction :

DirectAccessProxyName :

DirectAccessDnsServers : {2001:db8:1::2, 2001:db8:2::20,

2001:db8:6::6}

DirectAccessEnabled : True

DirectAccessProxyType : NoProxy

DirectAccessQueryIPsecEncryption :

DirectAccessQueryIPsecRequired : False

NameServers :

DnsSecIPsecCARestriction :

DnsSecQueryIPsecEncryption :

DnsSecQueryIPsecRequired :

DnsSecValidationRequired :

NameEncoding :



This example gets the effective NRPT policy on a computer.





Example 3: Get the effective NRPT policy for a specified namespace



PS C:\\>Get-DnsClientNrptPolicy -Effective -Namespace "nls.corp.contoso.com"



Namespace : nls.corp.contoso.com

QueryPolicy : QueryIPv6Only

SecureNameQueryFallback : FallbackPrivate

DirectAccessIPsecCARestriction :

DirectAccessProxyName :

DirectAccessDnsServers :

DirectAccessEnabled : True

DirectAccessProxyType : UseDefault

DirectAccessQueryIPsecEncryption :

DirectAccessQueryIPsecRequired : False

NameServers :

DnsSecIPsecCARestriction :

DnsSecQueryIPsecEncryption :

DnsSecQueryIPsecRequired :

DnsSecValidationRequired :

NameEncoding :



This example gets an effective NRPT policy for the namespace nls.corp.contoso.com.







RELATED LINKS

Online Version:

Add-DnsClientNrptRule

Get-DnsClientNrptGlobal

Get-DnsClientNrptPolicy

Get-DnsClientNrptRule

Remove-DnsClientNrptRule

Set-DnsClientNrptGlobal

Set-DnsClientNrptRule