Setting a computer object encryption type using ARS Management Shell

Question

Hey all. 
 With native AD commandlets, we can set computer encryption type using Set-ADcomputer, for example 
 Set-ADComputer -Identity fooComputer -KerberosEncryptionType AES256 
 However, I'm not sure how achieve this with Set-QADComputer, I tried the following, with no joy... 
 Set-QADComputer -Identity fooComputer -ObjectAttributes @{KerberosEncryptionType='AES256'} 
 Any ideas on how set this, and other UAC values using the ARS management shell? Many thanks, Jay.

JohnnyQuest · Accepted Answer

In the command line above, the property name needs to be in single quotes because it contains dashes. 
 -ObjectAttributes @{'msDS-SupportedEncryptionTypes'=<some integer>}

JohnnyQuest · Answer

If you have Active Roles in your environment, then you have access to the UAC-derived virtual property edsaDoNotRequirePassword . 
 It can be set to a value of $true or $false and this toggles the underlying bit in UAC. 
 i.e. Set-QADComputer -identity $MyComputer -proxy -objectattributes @{edsaDoNotRequirePassword=$false}

Setting a computer object encryption type using ARS Management Shell

Top Replies