編集

次の方法で共有


Add-AdfsFarmNode

Adds this computer to an existing federation server farm.

Syntax

AdfsFarmJoinWidGmsa (Default)

Add-AdfsFarmNode
    -GroupServiceAccountIdentifier <String>
    -PrimaryComputerName <String>
    [-OverwriteConfiguration]
    [-CertificateThumbprint <String>]
    [-Credential <PSCredential>]
    [-PrimaryComputerPort <Int32>]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

ADFSFarmJoinWidSvcAcct

Add-AdfsFarmNode
    -ServiceAccountCredential <PSCredential>
    -PrimaryComputerName <String>
    [-OverwriteConfiguration]
    [-CertificateThumbprint <String>]
    [-Credential <PSCredential>]
    [-PrimaryComputerPort <Int32>]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

ADFSFarmJoinSqlSvcAcct

Add-AdfsFarmNode
    -ServiceAccountCredential <PSCredential>
    -SQLConnectionString <String>
    [-CertificateThumbprint <String>]
    [-Credential <PSCredential>]
    [-FarmBehavior <Int32>]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

AdfsFarmJoinSqlGmsa

Add-AdfsFarmNode
    -GroupServiceAccountIdentifier <String>
    -SQLConnectionString <String>
    [-CertificateThumbprint <String>]
    [-Credential <PSCredential>]
    [-FarmBehavior <Int32>]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

Description

The Add-AdfsFarmNode cmdlet adds this computer to an existing federation server farm.

Examples

Example 1: Add a farm node

PS C:\> $fscredential = Get-Credential
PS C:\> Add-AdfsFarmNode -ServiceAccountCredential $fscredential -SQLConnectionString "Data Source=SQLHost;Integrated Security=True"

This example adds the local server computer as a node in an existing federation server farm that uses a Microsoft SQL Server database installed on a computer named SQLHost.

Example 2: Add a farm node and overwrite the existing configuration

PS C:\> $fscredential = Get-Credential
PS C:\> Add-AdfsFarmNode -OverwriteConfiguration -PrimaryComputerName "PrimaryWIDHost" -PrimaryComputerPort 80 -ServiceAccountCredential $fscredential -CertificateThumbprint "8169c52b4ec6e77eb2ae17f028fe5da4e35c0bed"

This example overwrites an existing AD FS configuration database and adds the local server computer as a node in an existing federation server farm that uses Windows Internal Database (WID) and whose primary node is installed on a computer named PrimaryWIDHost.

Note that the PrimaryComputerPort is required even if the default HTTP port of 80 is used and that the CertificateThumbprint parameter is only required if it is not already configured as a binding in IIS. Also, when specifying a value for the CertificateThumbprint parameter, the value you use must specify the thumbprint of a certificate that is currently installed in the local machine My store, and the certificate must be the same certificate that is used as the SSL certificate on the primary node.

Parameters

-CertificateThumbprint

Specifies the certificate thumbprint of a digital public key X.509 certificate of a user account that has permission to perform this action.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Confirm

Prompts you for confirmation before running the cmdlet.

Parameter properties

Type:SwitchParameter
Default value:False
Supports wildcards:False
DontShow:False
Aliases:cf

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Credential

Specifies a PSCredential object.

Parameter properties

Type:PSCredential
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-FarmBehavior

The Add-AdfsFarmNode cmdlet adds this computer to an existing federation server farm.

Parameter properties

Type:Int32
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

ADFSFarmJoinSqlSvcAcct
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False
AdfsFarmJoinSqlGmsa
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-GroupServiceAccountIdentifier

Specifies the Group Managed Service Account under which the Active Directory Federation Services (AD FS) service runs.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

AdfsFarmJoinWidGmsa
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False
AdfsFarmJoinSqlGmsa
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-OverwriteConfiguration

This parameter must be used to remove an existing AD FS configuration database and overwrite it with a new database.

Parameter properties

Type:SwitchParameter
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

AdfsFarmJoinWidGmsa
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False
ADFSFarmJoinWidSvcAcct
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-PrimaryComputerName

Specifies the name of the primary federation server in a federation server farm. The cmdlet adds the computer to the federation server farm that has the primary federation server that you specify.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

AdfsFarmJoinWidGmsa
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False
ADFSFarmJoinWidSvcAcct
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-PrimaryComputerPort

Specifies the primary computer port. The computer uses the HTTP port that you specify to connect with the primary computer in order to synchronize configuration settings. Specify a value of 80 for this parameter, or specify an alternate value if the HTTP port on the primary computer is not 80. If this parameter is not specified, a default port value of 443 is assumed.

Parameter properties

Type:Int32
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

AdfsFarmJoinWidGmsa
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False
ADFSFarmJoinWidSvcAcct
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-ServiceAccountCredential

Specifies the Active Directory account under which the AD FS service runs. All nodes in the farm must use the same service account.

Parameter properties

Type:PSCredential
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

ADFSFarmJoinWidSvcAcct
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False
ADFSFarmJoinSqlSvcAcct
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-SQLConnectionString

Specifies the SQL Server database that will store the AD FS configuration settings. If not specified, AD FS uses Windows Internal Database to store configuration settings.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

ADFSFarmJoinSqlSvcAcct
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False
AdfsFarmJoinSqlGmsa
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Parameter properties

Type:SwitchParameter
Default value:False
Supports wildcards:False
DontShow:False
Aliases:wi

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.