Get-CertificateAutoEnrollmentPolicy

NAME Get-CertificateAutoEnrollmentPolicy



SYNOPSIS

Retrieves certificate auto-enrollment policy settings.





SYNTAX

Get-CertificateAutoEnrollmentPolicy -context {Machine | User} -Scope {Applied | Local} [<CommonParameters>]





DESCRIPTION

The Get-CertificateAutoEnrollmentPolicy cmdlet gets certificate auto-enrollment policy settings for the user or computer. This cmdlet can return the

settings configured in local policy or that are being applied from either local or domain policy.



Delegation may be required when using this cmdlet with Windows PowerShell???? remoting and changing user configuration.





PARAMETERS

-context <Context>

Specifies the context of the enrollment policy to return.



Required? true

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



-Scope <AutoEnrollmentPolicyScope>

Specifies the scope of the enrollment policy to return. If Local scope is specified, then the locally configured policy is returned. If Applied

scope is specified, then the currently applied policy which can be either the local policy or a domain policy, is returned.



Required? true

Position? named

Default value none

Accept pipeline input? false

Accept wildcard characters? false



<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,

ErrorAction, ErrorVariable, WarningAction, WarningVariable,

OutBuffer, PipelineVariable, and OutVariable. For more information, see

about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).



INPUTS

Microsoft.CertificateServices.Commands.AutoEnrollmentPolicy



The AutoEnrollmentPolicy object combines certificate auto-enrollment policy settings and exposes them as properties.





OUTPUTS

Microsoft.CertificateServices.Commands.AutoEnrollmentPolicy



The AutoEnrollmentPolicy object combines certificate auto-enrollment policy settings and exposes them as properties. Each property can be modified

and piped into the Set-CertificateAutoEnrollmentPolicy cmdlet to be applied.





EXAMPLE 1



PS C:\\>Get-CertificateAutoEnrollmentPolicy -Scope Local -Context User

PolicyState : Enabled

EnableMyStoreManagement : True

EnableTemplateCheck : True

ExpirationPercentage : 10

StoreName : {MY}

EnableBalloonNotifications : False



This example gets the locally configured certificate auto-enrollment user policy. In this example, the Renew expired certificates, update pending

certificates, and remove revoked certificates and Update certificates that use certificates templates options are enabled. Also, the Expiration

notifications option is enabled and set to 10 percent of the certificate lifetime which are stored in the MY store. Finally, Balloon notifications are

disabled.







RELATED LINKS

Online Version: http://go.microsoft.com/fwlink/p/?linkid=287529

Set-CertificateAutoEnrollmentPolicy