SetByOnDAServer method of the PS_DANetworkLocationServer class

This cmdlet is used to configure the Network Location Server. It can be present on the DirectAccess server or on some other highly available server.


uint32 SetByOnDAServer(
  [in]  uint8                   Certificate[],
  [in]  string                  ComputerName,
  [in]  boolean                 NlsOnDAServer,
  [in]  boolean                 Force,
  [in]  boolean                 PassThru,
  [out] DANetworkLocationServer cmdletOutput


Certificate [in]

Specifies the certificate to be used when the Network Location Server is configured to be on the DirectAccess server

ComputerName [in]

IPv4/IPv6 address or hostname of the machine on which the DirectAccess server machine specific tasks should be executed

NlsOnDAServer [in]

Switch parameter which indicates that NLS should be configured on the DA Server (the server on which the cmdlet is executed). In order for the DA server to act as a Network Location Server an appropriate certificate is required to be installed on the server. By default the cmdlet looks for a certificate on the server. If a certificate is not found then a self signed certificate is created for this purpose. Before creating the self-signed certificate the cmdlet asks for user confirmation. If the user wishes to specify a certificate himself explicitly the Certificate parameter can be used.

Force [in]

Switch parameter used to suppress user confirmation prompts for the following conditions. When suppressed the cmdlet assumes user confirmation for the below mentioned changes 1. Creation of self-signed cert when configuring the NLS on the DA server 2. Moving the NLS from the DA server to an external server - the corresponding URL on the DA server is decommissioned. Clients outside corpnet will not receive the updated policies. When they enter corpnet the URL will be inaccessible and they will be detected to be outside corpnet. As a result they will not be able to access corp resources

PassThru [in]

Returns the network location server policy object. By default this cmdlet does not generate any output

cmdletOutput [out]

  1. Where the Network Location Server is configured - on the DA server itself or on a different server: 2. URL (if it is configured on a different server) 3. Certificate (if it is configured on the DA server) 4. Reachability to Network Location Server (if on a different server whether the URL is reachable or not)


Minimum supported client
None supported
Minimum supported server
Windows Server 2012

See also