This is the built-in help made by Microsoft for the command 'Revoke-ADAuthenticationPolicySiloAccess', in PowerShell version 5 - as retrieved from
Windows version 'Microsoft Windows Server 2012 R2 Standard' PowerShell help files on 2016-06-23.
For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.
Revokes membership in an authentication policy silo for the specified account.
Revoke-ADAuthenticationPolicySiloAccess [-Identity] <ADAuthenticationPolicySilo> [-Account] <ADAccount> [-AuthType {Negotiate | Basic}] [-Credential <PSCredential>]
[-PassThru] [-Server <String>] [-Confirm] [-WhatIf] [<CommonParameters>]
The Revoke-ADAuthenticationPolicySiloAccess cmdlet revokes the membership in an authentication policy silo for one or more accounts in Active Directory® Domain Services.
The Identity parameter specifies the Active Directory Domain Services authentication policy silo that contains the user accounts to remove. You can identify an
authentication policy silo by its distinguished name (DN), GUID or name. You can also use the Identity parameter to specify a variable that contains an authentication policy
silo object, or you can use the pipeline operator to pass an authentication policy object to the Identity parameter.
The Account parameter specifies the users, computers and service accounts to remove from the authentication policy silo specified by the Identity parameter. You can identify
a user, computer or service account by its DN, GUID, security identifier (SID), or Security Accounts Manager (SAM) account name. You can also use the Account parameter to
specify a variable that contains user, computer, and service account objects.
<
Online Version: http://go.microsoft.com/fwlink/p/?linkid=296772
Grant-ADAuthenticationPolicySiloAccess
<
Example 1: Revoke access to an authentication policy silo
PS C:\>Revoke-ADAuthenticationPolicySiloAccess -Identity AuthenticationPolicySilo01 -Account User01 -Confirm:$False
This command revokes access to the authentication policy silo named AuthenticationPolicySilo01 for the user account named User01. Because the Confirm parameter is set to
$False, no confirmation message appears.
Example 2: Revoke access to an authentication policy silo for filter matches
PS C:\>Get-ADComputer -Filter 'Name -like "newComputer*"' | Revoke-ADAuthenticationPolicySiloAccess -Identity AuthenticationPolicySilo02
Confirm
Are you sure you want to perform this action?
Performing the operation "Set" on target "CN=Silo,CN=AuthN Silos,CN=AuthN PolicyConfiguration,CN=Services,CN=Configuration,DC=DC01,DC=Contoso,DC=com".
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is "Y"): A
This example first uses the Get-ADComputer cmdlet to get a list of computers that match the filter specified by the Filter parameter. The output is then passed to the
Revoke-ADAuthenticationPolicySiloAccess to remove access to the authentication policy silo named AuthenticationPolicySilo02. Because the Confirm parameter is not specified,
a confirmation message appears.