Edit

Remove-NfsMappedIdentity

  • Reference
Module:
NFS

Removes a mapping between a UNIX account and a Windows account.

Syntax

Remove-NfsMappedIdentity
      [-MappingStore <MappingStoreType>]
      [-Server <String>]
      [-LdapNamingContext <String>]
      -UserName <String>
      [-UserIdentifier <Int32>]
      [-GroupIdentifier <Int32>]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]
Remove-NfsMappedIdentity
      [-MappingStore <MappingStoreType>]
      [-Server <String>]
      [-LdapNamingContext <String>]
      -GroupName <String>
      [-GroupIdentifier <Int32>]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]
Remove-NfsMappedIdentity
      [-MappingStore <MappingStoreType>]
      [-Server <String>]
      [-LdapNamingContext <String>]
      [-UserIdentifier <Int32>]
      [-GroupIdentifier <Int32>]
      [-WhatIf]
      [-Confirm]
      [<CommonParameters>]

Description

The Remove-NfsMappedIdentity cmdlet removes a mapped identity from a Network File System (NFS) server mapping store.

A mapped identity associates a Windows user account or group account to a UNIX user account or group account. A user ID (UID) or group ID (GID) identifies a UNIX account namespace. These elements are associated with the corresponding elements of a Windows account namespace: a user name or a group name. By using a mapped identity, a user who is logged on to a UNIX domain can access shared resources in a Windows domain without having to log on to the Windows domain.

For more information about NFS, see Network File System Overview. For more information about NFS account mapping, see NFS Account Mapping Guide and Identity Management for UNIX.

Examples

Example 1: Remove identity mapping for a user

PS C:\> Remove-NfsMappedIdentity -MappingStore "LDAP" -UserName "LSPolly"

This command removes a mapped identity that is stored in the configured AD LDS instance, on a server where this command is run, for the user account LSPolly.

Example 2: Remove an identity mapping for a group

PS C:\> Remove-NfsMappedIdentity -MappingStore "AD" -GroupIdentifier 22

This command removes a mapped identity that is stored in a configured AD DS map store and that corresponds to the group account that has the group identifier 22.

Parameters

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-GroupIdentifier

Specifies the group identifier of a mapped identity.

Type:Int32
Aliases:GroupId, gid
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-GroupName

Specifies the SAMAccountName of the group account.

Type:String
Aliases:group
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-LdapNamingContext

Specifies the Lightweight Directory Access Protocol (LDAP) naming context of an NFS identity mapping store. You can use this parameter to search for mapped identities in the specified naming context.

Type:String
Aliases:dn
Position:Named
Default value:DefaultNamingContext
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-MappingStore

Specifies the type of identity mapping store from which the Remove-NfsMappedIdentity cmdlet removes a mapped identity. When this parameter is not specified, the Remove-NfsMappedIdentity cmdlet gets the store configuration settings from the NFS server. Valid values are AD and LDAP.

Type:MappingStoreType
Aliases:store
Accepted values:Ad, Ldap, Mapfiles
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-Server

Specifies the LDAP server instance of a store that NFS server uses. This can be a domain name, Active Directory Lightweight Directory Services (AD LDS) server name, or LDAP server name. When this parameter is not specified, the Remove-NfsMappedIdentity cmdlet tries to connect to either the LDAP store on the local computer at port 389 when MappingStore is LDAP, or the Active Directory Domain Services (AD DS) domain of the computer when MappingStore is Active Directory.

Type:String
Aliases:LdapServer, ADDomainName
Position:Named
Default value:Localhost:389
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-UserIdentifier

Specifies the user identifier of a user account.

Type:Int32
Aliases:UserId, uid
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-UserName

Specifies the SAMAccountName of a user account.

Type:String
Aliases:user
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

Outputs

Nothing