< Back
Disable-SmbDelegation
Post
NAME Disable-SmbDelegation
SYNOPSIS
Disables a constrained delegation authorization for an SMB client and server.
SYNTAX
Disable-SmbDelegation [[-SmbClient] <String>] [-SmbServer] <String> [-Force] [<CommonParameters>]
DESCRIPTION
The Disable-SmbDelegation cmdlet disables a constrained delegation authorization for a Server Message Block (SMB) client and server. Delegation allows a
user who remotes into an SMB client to perform operations on a remote SMB server.
PARAMETERS
-Force [<SwitchParameter>]
Forces the command to run without asking for user confirmation.
Required? false
Position? named
Default value none
Accept pipeline input? false
Accept wildcard characters? false
-SmbClient [<String>]
Specifies the name of the SMB client. The cmdlet disables constrained delegation authorization for the SMB client that you specify.
Required? false
Position? 1
Default value none
Accept pipeline input? false
Accept wildcard characters? false
-SmbServer <String>
Specifies the name of the SMB server. The cmdlet disables constrained delegation authorization for the SMB server you specify. If you do not specify
the SmbClient parameter, the cmdlet disables constrained delegation authorization for all clients on the server.
Required? true
Position? 2
Default value none
Accept pipeline input? false
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
OUTPUTS
NOTES
This cmdlet relies on Active Directory Windows PowerShell cmdlets to perform its actions. Before you use this cmdlet, you must install the Active
Directory cmdlets. To install the Active Directory cmdlets, run the following command:
Install-WindowsFeature RSAT-AD-PowerShell
For more information, type Get-Help Install-WindowsFeature.
This cmdlet only works with resource-based delegation, and the Active Directory forest must be at the Windows Server 2012 functional level. To check
the functional level of the Active Directory forest, use the Get-ADForest cmdlet.
Example 1: Disable constrained delegation
PS C:\\> Disable-SmbDelegation -SmbServer "FileServer01" -SmbClient "HVSVR01"
This command removes the constrained delegation authorization so that a user remotely connected to the SMB client named HVSVR01 can no longer configure
resources on the SMB server named FileServer01.
RELATED LINKS
Install-WindowsFeature
Enable-SmbDelegation
Get-SmbDelegation
SYNOPSIS
Disables a constrained delegation authorization for an SMB client and server.
SYNTAX
Disable-SmbDelegation [[-SmbClient] <String>] [-SmbServer] <String> [-Force] [<CommonParameters>]
DESCRIPTION
The Disable-SmbDelegation cmdlet disables a constrained delegation authorization for a Server Message Block (SMB) client and server. Delegation allows a
user who remotes into an SMB client to perform operations on a remote SMB server.
PARAMETERS
-Force [<SwitchParameter>]
Forces the command to run without asking for user confirmation.
Required? false
Position? named
Default value none
Accept pipeline input? false
Accept wildcard characters? false
-SmbClient [<String>]
Specifies the name of the SMB client. The cmdlet disables constrained delegation authorization for the SMB client that you specify.
Required? false
Position? 1
Default value none
Accept pipeline input? false
Accept wildcard characters? false
-SmbServer <String>
Specifies the name of the SMB server. The cmdlet disables constrained delegation authorization for the SMB server you specify. If you do not specify
the SmbClient parameter, the cmdlet disables constrained delegation authorization for all clients on the server.
Required? true
Position? 2
Default value none
Accept pipeline input? false
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
OUTPUTS
NOTES
This cmdlet relies on Active Directory Windows PowerShell cmdlets to perform its actions. Before you use this cmdlet, you must install the Active
Directory cmdlets. To install the Active Directory cmdlets, run the following command:
Install-WindowsFeature RSAT-AD-PowerShell
For more information, type Get-Help Install-WindowsFeature.
This cmdlet only works with resource-based delegation, and the Active Directory forest must be at the Windows Server 2012 functional level. To check
the functional level of the Active Directory forest, use the Get-ADForest cmdlet.
Example 1: Disable constrained delegation
PS C:\\> Disable-SmbDelegation -SmbServer "FileServer01" -SmbClient "HVSVR01"
This command removes the constrained delegation authorization so that a user remotely connected to the SMB client named HVSVR01 can no longer configure
resources on the SMB server named FileServer01.
RELATED LINKS
Install-WindowsFeature
Enable-SmbDelegation
Get-SmbDelegation