diff --git a/docset/winserver2016-ps/activedirectory/Get-ADPrincipalGroupMembership.md b/docset/winserver2016-ps/activedirectory/Get-ADPrincipalGroupMembership.md index 6afebebdef..63722545a3 100644 --- a/docset/winserver2016-ps/activedirectory/Get-ADPrincipalGroupMembership.md +++ b/docset/winserver2016-ps/activedirectory/Get-ADPrincipalGroupMembership.md @@ -258,9 +258,27 @@ Accept wildcard characters: False ``` ### -Partition -The default authentication method is Negotiate. +Specifies the distinguished name of an Active Directory partition. +The distinguished name must be one of the naming contexts on the current directory server. +The cmdlet searches this partition to find the object defined by the **Identity** parameter. -A Secure Sockets Layer (SSL) connection is required for the Basic authentication method. +In many cases, a default value is used for the **Partition** parameter if no value is specified. +The rules for determining the default value are given below. +Note that rules listed first are evaluated first and once a default value can be determined, no further rules are evaluated. + +In Active Directory Domain Services (AD DS) environments, a default value for **Partition** is set in the following cases: + +- If the **Identity** parameter is set to a distinguished name, the default value of **Partition** is automatically generated from this distinguished name. +- If running cmdlets from an Active Directory provider drive, the default value of **Partition** is automatically generated from the current path in the drive. +- If none of the previous cases apply, the default value of **Partition** is set to the default partition or naming context of the target domain. + +In Active Directory Lightweight Directory Services (AD LDS) environments, a default value for **Partition** is set in the following cases: + +- If the **Identity** parameter is set to a distinguished name, the default value of **Partition** is automatically generated from this distinguished name. +- If running cmdlets from an Active Directory provider drive, the default value of **Partition** is automatically generated from the current path in the drive. +- If the target AD LDS instance has a default naming context, the default value of **Partition** is set to the default naming context. +To specify a default naming context for an AD LDS environment, set the **msDS-defaultNamingContext** property of the Active Directory directory service agent object (**nTDSDSA**) for the AD LDS instance. +- If none of the previous cases apply, the **Partition** parameter does not take any default value. ```yaml Type: String @@ -269,7 +287,7 @@ Aliases: Required: False Position: Named -Default value: None +Default value: DefaultNC; Provider: The default is to use the Partition that you are currently in. Otherwise, use DefaultNC (that is, if you are in the RootDSE) Accept pipeline input: False Accept wildcard characters: False ``` diff --git a/docset/winserver2019-ps/activedirectory/Get-ADPrincipalGroupMembership.md b/docset/winserver2019-ps/activedirectory/Get-ADPrincipalGroupMembership.md index 11fe58e3b8..cd081f93bf 100644 --- a/docset/winserver2019-ps/activedirectory/Get-ADPrincipalGroupMembership.md +++ b/docset/winserver2019-ps/activedirectory/Get-ADPrincipalGroupMembership.md @@ -258,9 +258,27 @@ Accept wildcard characters: False ``` ### -Partition -The default authentication method is Negotiate. +Specifies the distinguished name of an Active Directory partition. +The distinguished name must be one of the naming contexts on the current directory server. +The cmdlet searches this partition to find the object defined by the **Identity** parameter. -A Secure Sockets Layer (SSL) connection is required for the Basic authentication method. +In many cases, a default value is used for the **Partition** parameter if no value is specified. +The rules for determining the default value are given below. +Note that rules listed first are evaluated first and once a default value can be determined, no further rules are evaluated. + +In Active Directory Domain Services (AD DS) environments, a default value for **Partition** is set in the following cases: + +- If the **Identity** parameter is set to a distinguished name, the default value of **Partition** is automatically generated from this distinguished name. +- If running cmdlets from an Active Directory provider drive, the default value of **Partition** is automatically generated from the current path in the drive. +- If none of the previous cases apply, the default value of **Partition** is set to the default partition or naming context of the target domain. + +In Active Directory Lightweight Directory Services (AD LDS) environments, a default value for **Partition** is set in the following cases: + +- If the **Identity** parameter is set to a distinguished name, the default value of **Partition** is automatically generated from this distinguished name. +- If running cmdlets from an Active Directory provider drive, the default value of **Partition** is automatically generated from the current path in the drive. +- If the target AD LDS instance has a default naming context, the default value of **Partition** is set to the default naming context. +To specify a default naming context for an AD LDS environment, set the **msDS-defaultNamingContext** property of the Active Directory directory service agent object (**nTDSDSA**) for the AD LDS instance. +- If none of the previous cases apply, the **Partition** parameter does not take any default value. ```yaml Type: String @@ -269,11 +287,12 @@ Aliases: Required: False Position: Named -Default value: None +Default value: DefaultNC; Provider: The default is to use the Partition that you are currently in. Otherwise, use DefaultNC (that is, if you are in the RootDSE) Accept pipeline input: False Accept wildcard characters: False ``` + ### -ResourceContextPartition Specifies the distinguished name of the partition of an AD or AD LDS instance to search. Use this parameter with the *ResourceContextServer* parameter to specify a partition hosted by the specified server. diff --git a/docset/winserver2022-ps/activedirectory/Get-ADPrincipalGroupMembership.md b/docset/winserver2022-ps/activedirectory/Get-ADPrincipalGroupMembership.md index cb4a561a04..0b87fc8a50 100644 --- a/docset/winserver2022-ps/activedirectory/Get-ADPrincipalGroupMembership.md +++ b/docset/winserver2022-ps/activedirectory/Get-ADPrincipalGroupMembership.md @@ -258,9 +258,27 @@ Accept wildcard characters: False ``` ### -Partition -The default authentication method is Negotiate. +Specifies the distinguished name of an Active Directory partition. +The distinguished name must be one of the naming contexts on the current directory server. +The cmdlet searches this partition to find the object defined by the **Identity** parameter. -A Secure Sockets Layer (SSL) connection is required for the Basic authentication method. +In many cases, a default value is used for the **Partition** parameter if no value is specified. +The rules for determining the default value are given below. +Note that rules listed first are evaluated first and once a default value can be determined, no further rules are evaluated. + +In Active Directory Domain Services (AD DS) environments, a default value for **Partition** is set in the following cases: + +- If the **Identity** parameter is set to a distinguished name, the default value of **Partition** is automatically generated from this distinguished name. +- If running cmdlets from an Active Directory provider drive, the default value of **Partition** is automatically generated from the current path in the drive. +- If none of the previous cases apply, the default value of **Partition** is set to the default partition or naming context of the target domain. + +In Active Directory Lightweight Directory Services (AD LDS) environments, a default value for **Partition** is set in the following cases: + +- If the **Identity** parameter is set to a distinguished name, the default value of **Partition** is automatically generated from this distinguished name. +- If running cmdlets from an Active Directory provider drive, the default value of **Partition** is automatically generated from the current path in the drive. +- If the target AD LDS instance has a default naming context, the default value of **Partition** is set to the default naming context. +To specify a default naming context for an AD LDS environment, set the **msDS-defaultNamingContext** property of the Active Directory directory service agent object (**nTDSDSA**) for the AD LDS instance. +- If none of the previous cases apply, the **Partition** parameter does not take any default value. ```yaml Type: String @@ -269,7 +287,7 @@ Aliases: Required: False Position: Named -Default value: None +Default value: DefaultNC; Provider: The default is to use the Partition that you are currently in. Otherwise, use DefaultNC (that is, if you are in the RootDSE) Accept pipeline input: False Accept wildcard characters: False ```