Invoke-CxWindowsUpdateLowPrivilegeDelegation

Namespace ComputerX.PowerShell

Inputs

System.String[]

Outputs

ComputerX.Updates.WindowsUpdateLowPrivilegeAccessAssessment ComputerX.Updates.WindowsUpdateLowPrivilegeDelegationResult

Implements the Invoke-CxWindowsUpdateLowPrivilegeDelegation cmdlet.

Examples

Authored help example

Example 1


Invoke-CxWindowsUpdateLowPrivilegeDelegation -Identity 'CONTOSO\GG-TestimoX-WU-Read' -ComputerName DC01

Example 2


Invoke-CxWindowsUpdateLowPrivilegeDelegation -Identity 'CONTOSO\GG-TestimoX-WU-Read' -ComputerName DC01,DC02 -ValidateOnly -RequireEventTelemetry

Example 3


Invoke-CxWindowsUpdateLowPrivilegeDelegation -Identity 'CONTOSO\GG-TestimoX-WU-Read' -ComputerName DC01,DC02 | Export-Csv C:\Temp\wu-lowpriv.csv -NoTypeInformation

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Invoke-CxWindowsUpdateLowPrivilegeDelegation [-ComputerName <string[]>] -Identity <string> [-EnableRemoteEventLogFirewall] [-EventLookbackDays <int>] [-GrantEventLogReadersMembership] [-PassThruAssessment] [-QueryTimeoutSeconds <int>] [-RequireEventTelemetry] [-SkipEventTelemetry] [-ValidateOnly] [<CommonParameters>]

Parameters

ComputerName string[] optionalposition: 0pipeline: true (ByValue, ByPropertyName)aliases: ServerName: Target computer(s). Use '.' for local computer or provide DNS names.
Identity string requiredposition: namedpipeline: false: Identity (user/group/SID) that should receive registry read delegation.
EnableRemoteEventLogFirewall SwitchParameter optionalposition: namedpipeline: false: Enables the Remote Event Log Management firewall rule group on each target.
EventLookbackDays int optionalposition: namedpipeline: false: Event log lookback window in days.
GrantEventLogReadersMembership SwitchParameter optionalposition: namedpipeline: false: Adds the identity to local Event Log Readers on each target.
PassThruAssessment SwitchParameter optionalposition: namedpipeline: false: Emits raw WindowsUpdateLowPrivilegeAccessAssessment objects instead of delegation summary rows.
QueryTimeoutSeconds int optionalposition: namedpipeline: false: Per-query event log timeout in seconds.
RequireEventTelemetry SwitchParameter optionalposition: namedpipeline: false: Requires event telemetry read capability for a ready assessment.
SkipEventTelemetry SwitchParameter optionalposition: namedpipeline: false: Disables event log telemetry collection for the readiness assessment.
ValidateOnly SwitchParameter optionalposition: namedpipeline: false: Skips registry ACL delegation and only runs readiness assessment.

Outputs

ComputerX.Updates.WindowsUpdateLowPrivilegeAccessAssessment, ComputerX.Updates.WindowsUpdateLowPrivilegeDelegationResult