Removes an entity (user, computer, or security group) from the Online Responder ACL.
Remove-OnlineResponderAcl -InputObject <OcspResponderSecurityDescriptor[]> -Identity <NTAccount[]> -AccessType <AccessControlType> [<CommonParameters>]
Remove-OnlineResponderAcl -InputObject <OcspResponderSecurityDescriptor[]> -Force <SwitchParameter> [<CommonParameters>]
Removes an entity (user, computer, or security group) from the certificate template ACL.
This command only prepares new certificate template ACL object. In order to write it to the actual object use this command's result to Set-OnlineResponderAcl cmdlet (see Examples section).
Specifies the current access control list (ACL) object to modify. This object can be retrieved by running Get-OnlineResponderAcl command.
Required? | True |
Position? | named |
Default value | |
Accept pipeline input? | True |
Accept wildcard characters? | False |
Specifies the AccessType to remove. The value can be either Allow or Deny. All Access Control Entries (ACE) with specified AccessType will be removed from ACL.
Required? | True |
Position? | named |
Default value | |
Accept pipeline input? | False |
Accept wildcard characters? | False |
Removes all Access Control Entries from the current ACL.
Required? | True |
Position? | named |
Default value | |
Accept pipeline input? | False |
Accept wildcard characters? | False |
Specifies user or group account name to remove from Certification Authority ACL.
Required? | True |
Position? | named |
Default value | |
Accept pipeline input? | False |
Accept wildcard characters? | False |
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, InformationAction, InformationVariable,
WarningAction, WarningVariable, OutBuffer, PipelineVariable and OutVariable.
For more information, see about_CommonParameters (https://go.microsoft.com/fwlink/?LinkID=113216)
SysadminsLV.PKI.Security.AccessControl.OcspResponderSecurityDescriptor
SysadminsLV.PKI.Security.AccessControl.OcspResponderSecurityDescriptor
PS C:\> Connect-OnlineResponder "ocsp1.example.com" | Get-OnlineResponderAcl | Remove-OnlineResponderAcl -Identity "Old OCSP Admins" -AccessType Allow | Set-OnlineResponderAcl
In this example, a group "Old OCSP Admins" is removed from ACL for Online Responder "ocsp1.example.com"