]
DESCRIPTION
The Get-DnsClientNrptPolicy cmdlet gets the following Name Resolution Policy Table (NRPT) details for each
namespace.
-- DNS client name resolution fallback policy.
-- DNS client secure name query fallback setting.
-- Direct Access (DA) IPsec Certification Authority (CA) restriction setting.
-- DA proxy name setting.
-- DA DNS servers setting.
-- DA enabled setting.
-- DA proxy type setting.
-- DA Query IPsec encryption setting.
-- DA Query IPsec required setting.
-- DNS client name servers setting.
-- DNS security IPsec CA restriction setting.
-- DNS security query IPsec encryption setting.
-- DNS security query IPsec required setting.
-- DNS security validation required setting.
-- DNS client name encoding setting.
PARAMETERS
-CimSession []
Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such
as the output of a New-CimSession or Get-CimSession cmdlet. The default is the current session on the local
computer.
Required? false
Position? named
Default value none
Accept pipeline input? false
Accept wildcard characters? false
-Effective []
Indicates that the effective NRPT policy is returned.
Required? false
Position? named
Default value none
Accept pipeline input? false
Accept wildcard characters? false
-Namespace []
Specifies the DNS namespace for which the policy is retrieved.
Required? false
Position? 2
Default value none
Accept pipeline input? true(ByPropertyName)
Accept wildcard characters? false
-ThrottleLimit []
Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this
parameter is omitted or a value of 0 is entered, then Windows PowerShellr calculates an optimum throttle limit
for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies
only to the current cmdlet, not to the session or to the computer.
Required? false
Position? named
Default value none
Accept pipeline input? false
Accept wildcard characters? false
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
None
OUTPUTS
Microsoft.Management.Infrastructure.CimInstance#root/Microsoft/Windows/DNS/DnsClientPolicyConfiguration[]
The Microsoft.Management.Infrastructure.CimInstance object is a wrapper class that displays Windows Management
Instrumentation (WMI) objects. The path after the pound sign (#) provides the namespace and class name for the
underlying WMI object.
The DnsClientPolicyConfiguration object contains all of the properties of the DNS client NRPT policy. If the
Effective parameter is specified, then only the contents of effective policy are retrieved.
Example 1: Get the NRPT policy
PS C:\>Get-DnsClientNrptPolicy
Namespace : nls.corp.contoso.com
QueryPolicy :
SecureNameQueryFallback :
DirectAccessIPsecCARestriction :
DirectAccessProxyName :
DirectAccessDnsServers :
DirectAccessEnabled :
DirectAccessProxyType : UseDefault
DirectAccessQueryIPsecEncryption :
DirectAccessQueryIPsecRequired : False
NameServers :
DnsSecIPsecCARestriction :
DnsSecQueryIPsecEncryption :
DnsSecQueryIPsecRequired : False
DnsSecValidationRequired : False
NameEncoding : Utf8WithoutMapping
Namespace : .corp.contoso.com
QueryPolicy :
SecureNameQueryFallback :
DirectAccessIPsecCARestriction :
DirectAccessProxyName :
DirectAccessDnsServers : {2001:db8:1::2, 2001:db8:2::20,
2001:db8:6::6}
DirectAccessEnabled :
DirectAccessProxyType : NoProxy
DirectAccessQueryIPsecEncryption :
DirectAccessQueryIPsecRequired : False
NameServers :
DnsSecIPsecCARestriction :
DnsSecQueryIPsecEncryption :
DnsSecQueryIPsecRequired : False
DnsSecValidationRequired : False
NameEncoding : Utf8WithoutMapping
This example gets the NRPT policy on a computer.
Example 2: Get the effective NRPT policy
PS C:\>Get-DnsClientNrptPolicy -Effective
Namespace : nls.corp.contoso.com
QueryPolicy : QueryIPv6Only
SecureNameQueryFallback : FallbackPrivate
DirectAccessIPsecCARestriction :
DirectAccessProxyName :
DirectAccessDnsServers :
DirectAccessEnabled : True
DirectAccessProxyType : UseDefault
DirectAccessQueryIPsecEncryption :
DirectAccessQueryIPsecRequired : False
NameServers :
DnsSecIPsecCARestriction :
DnsSecQueryIPsecEncryption :
DnsSecQueryIPsecRequired :
DnsSecValidationRequired :
NameEncoding :
Namespace : .corp.contoso.com
QueryPolicy : QueryIPv6Only
SecureNameQueryFallback : FallbackPrivate
DirectAccessIPsecCARestriction :
DirectAccessProxyName :
DirectAccessDnsServers : {2001:db8:1::2, 2001:db8:2::20,
2001:db8:6::6}
DirectAccessEnabled : True
DirectAccessProxyType : NoProxy
DirectAccessQueryIPsecEncryption :
DirectAccessQueryIPsecRequired : False
NameServers :
DnsSecIPsecCARestriction :
DnsSecQueryIPsecEncryption :
DnsSecQueryIPsecRequired :
DnsSecValidationRequired :
NameEncoding :
This example gets the effective NRPT policy on a computer.
Example 3: Get the effective NRPT policy for a specified namespace
PS C:\>Get-DnsClientNrptPolicy -Effective -Namespace "nls.corp.contoso.com"
Namespace : nls.corp.contoso.com
QueryPolicy : QueryIPv6Only
SecureNameQueryFallback : FallbackPrivate
DirectAccessIPsecCARestriction :
DirectAccessProxyName :
DirectAccessDnsServers :
DirectAccessEnabled : True
DirectAccessProxyType : UseDefault
DirectAccessQueryIPsecEncryption :
DirectAccessQueryIPsecRequired : False
NameServers :
DnsSecIPsecCARestriction :
DnsSecQueryIPsecEncryption :
DnsSecQueryIPsecRequired :
DnsSecValidationRequired :
NameEncoding :
This example gets an effective NRPT policy for the namespace nls.corp.contoso.com.
RELATED LINKS
Online Version:
Add-DnsClientNrptRule
Get-DnsClientNrptGlobal
Get-DnsClientNrptPolicy
Get-DnsClientNrptRule
Remove-DnsClientNrptRule
Set-DnsClientNrptGlobal
Set-DnsClientNrptRule