Skip to content

Commit

Permalink
Update Set-ADServiceAccount.md
Browse files Browse the repository at this point in the history
remove LDS and snapshot references
samAccountName rules updated
-Path rules updated
  • Loading branch information
HerbertMauerer authored Oct 30, 2024
1 parent 8a35f5e commit 924c9e6
Showing 1 changed file with 11 additions and 19 deletions.
30 changes: 11 additions & 19 deletions docset/winserver2022-ps/activedirectory/Set-ADServiceAccount.md
Original file line number Diff line number Diff line change
Expand Up @@ -541,27 +541,18 @@ Accept wildcard characters: False
```

### -Partition
Specifies the distinguished name of an Active Directory partition.
The distinguished name must be one of the naming contexts on the current directory server.
Specifies the distinguished name of an Active Directory domain naming context.
The cmdlet searches this partition to find the object defined by the *Identity* parameter.

In many cases, a default value is used for the *Partition* parameter if no value is specified.
The rules for determining the default value are given below.
In many cases, a default value is used for the *Partition* parameter if no value is specified. The rules for determining the default value are given below.
Note that rules listed first are evaluated first and once a default value can be determined, no further rules are evaluated.

In Active Directory Domain Services (AD DS) environments, a default value for *Partition* is set in the following cases:
A default value for *Partition* is set in the following cases:

- If the *Identity* parameter is set to a distinguished name, the default value of *Partition* is automatically generated from this distinguished name.
- If running cmdlets from an Active Directory provider drive, the default value of *Partition* is automatically generated from the current path in the drive.
- If none of the previous cases apply, the default value of *Partition* is set to the default partition or naming context of the target domain.

In AD LDS environments, a default value for *Partition* is set in the following cases:

- If the *Identity* parameter is set to a distinguished name, the default value of *Partition* is automatically generated from this distinguished name.
- If running cmdlets from an Active Directory provider drive, the default value of *Partition* is automatically generated from the current path in the drive.
- If the target AD LDS instance has a default naming context, the default value of *Partition* will be set to the default naming context.
To specify a default naming context for an AD LDS environment, set the **msDS-defaultNamingContext** property of the Active Directory directory service agent (DSA) object (**nTDSDSA**) for the AD LDS instance.
- If none of the previous cases apply, the *Partition* parameter will not take any default value.
- If running cmdlets from an Active Directory provider drive, the default value of *Partition* is automatically generated from the current path in the drive.
- If the `-server` parameter is used, the Path is set to the default naming context of this server.
- If none of the previous cases apply, the default value of *Partition* is set to the default partition or naming context of the target used.

```yaml
Type: String
Expand Down Expand Up @@ -682,13 +673,14 @@ Accept wildcard characters: False
```

### -SamAccountName
Specifies the Security Account Manager (SAM) account name of the user, group, computer, or service account.
The maximum length of the description is 256 characters.
Specifies the Security Account Manager (SAM) account name of the service account.
To be compatible with older operating systems, create a SAM account name that is 20 characters or less.
This parameter sets the **SAMAccountName** for an account object.
The LDAP display name (**ldapDisplayName**) for this property is sAMAccountName.

Note: If the string value provided is not terminated with a $ character, the system adds one if needed.
Notes:
- If the string value provided is not terminated with a $ character, the system adds one if needed.
- The name needs to be unique in the forest as in some places the GMSA names are searched in the domain tree.

```yaml
Type: String
Expand All @@ -704,7 +696,7 @@ Accept wildcard characters: False

### -Server
Specifies the Active Directory Domain Services instance to connect to, by providing one of the following values for a corresponding domain name or directory server.
The service may be any of the following: Active Directory Lightweight Domain Services, Active Directory Domain Services or Active Directory Snapshot instance.
The service may be the following: Active Directory Domain Services.

Domain name values:

Expand Down

0 comments on commit 924c9e6

Please sign in to comment.