Examples/Resources/xADKDSKey/3-CreateKDSRootKeyRemoveLastKey_Config.ps1
|
<#PSScriptInfo
.VERSION 1.0 .GUID 2847174e-ab1c-44a0-8b4f-2ad70219b52b .AUTHOR Microsoft Corporation .COMPANYNAME Microsoft Corporation .COPYRIGHT (c) Microsoft Corporation. All rights reserved. .TAGS DSCConfiguration .LICENSEURI https://github.com/PowerShell/xActiveDirectory/blob/master/LICENSE .PROJECTURI https://github.com/PowerShell/xActiveDirectory .ICONURI .EXTERNALMODULEDEPENDENCIES .REQUIREDSCRIPTS .EXTERNALSCRIPTDEPENDENCIES .RELEASENOTES .PRIVATEDATA #> #Requires -module xActiveDirectory <# .DESCRIPTION This configuration will remove the last KDS root key. Use with caution. If gMSAs are installed on the network, they will not be able to reset their passwords and it may cause services to fail. #> Configuration CreateKDSRootKeyRemoveLastKey_Config { Import-DscResource -Module xActiveDirectory Node localhost { xADKDSKey 'ExampleKDSRootKeyForceRemove' { Ensure = 'Absent' EffectiveTime = '1/1/2030 13:00' ForceRemove = $true # This will allow you to remove the key if it's the last one } } } |