Invoke-AdfsFarmBehaviorLevelRaise

Raises the behavior level of a farm.

Syntax

Invoke-AdfsFarmBehaviorLevelRaise
      [-Confirm]
      [-Credential <PSCredential>]
      [-Force]
      [-GroupServiceAccountIdentifier <String>]
      [-Member <String[]>]
      [-WhatIf]
      [<CommonParameters>]
Invoke-AdfsFarmBehaviorLevelRaise
      [-Confirm]
      [-Credential <PSCredential>]
      [-Force]
      [-Member <String[]>]
      [-ServiceAccountCredential <PSCredential>]
      [-WhatIf]
      [<CommonParameters>]

Description

The Invoke-AdfsFarmBehaviorLevelRaise cmdlet raises the behavior level of an Active Directory Federation Services (AD FS) farm to enable the new features that are available in later versions of the Windows operating system.

To raise the behavior level of a farm that uses SQL Server as the policy database, specify the Credential parameter.

Examples

Example 1: Raise the farm behavior level

PS C:\> Invoke-AdfsFarmBehaviorLevelRaise

This command raises the farm behavior level from Windows Server 2012 R2 to the Windows Server 2016 level. The command applies to the latest version available on your forest. You not have to specify the level.

Example 2: Raise the farm behavior level for a farm that uses SQL Server

PS C:\> $Credentials = Get-Credential
PS C:\> Invoke-AdfsFarmBehaviorLevelRaise -Credential $Credentials

The first command prompts you for user name and password by using the Get-Credential cmdlet. The command stores the credentials in the $Credentials variable.

The second command raises the farm behavior level from Windows Server 2012 R2 to the Windows Server 2016 level. The cmdlet specifies the necessary credentials stored in $Credentials.

Optional Parameters

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:False
Accept pipeline input:False
Accept wildcard characters:False
-Credential

Specifies credentials necessary to run this cmdlet for an AD FS farm that uses SQL Server as the policy database. The credentials provided must be an administrator on each AD FS server. To obtain a PSCredential object, use the Get-Credential cmdlet.

Type:PSCredential
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-Force

Forces the command to run without asking for user confirmation.

Type:SwitchParameter
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-GroupServiceAccountIdentifier

Specifies the ID of a group Managed Service Account.

Type:String
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-Member

Specifies an array of members.

Type:String[]
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-ServiceAccountCredential

Specifies credentials for a service account.

Type:PSCredential
Position:Named
Default value:None
Accept pipeline input:False
Accept wildcard characters:False
-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:False
Accept pipeline input:False
Accept wildcard characters:False