From 1a71c9b98948e348008c97ad7eab371813a31329 Mon Sep 17 00:00:00 2001 From: Herbert Mauerer <41573578+HerbertMauerer@users.noreply.github.com> Date: Wed, 26 Mar 2025 10:27:52 +0100 Subject: [PATCH 1/3] Update Test-ComputerSecureChannel.md needs a hint that this cmdlet is not made for DCs. --- .../Test-ComputerSecureChannel.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/reference/5.1/Microsoft.PowerShell.Management/Test-ComputerSecureChannel.md b/reference/5.1/Microsoft.PowerShell.Management/Test-ComputerSecureChannel.md index 21d7ec1e481b..7d9dcba264f1 100644 --- a/reference/5.1/Microsoft.PowerShell.Management/Test-ComputerSecureChannel.md +++ b/reference/5.1/Microsoft.PowerShell.Management/Test-ComputerSecureChannel.md @@ -34,6 +34,8 @@ more detailed test results, use the **Verbose** parameter. This cmdlet works much like `NetDom.exe`. Both NetDom and `Test-ComputerSecureChannel` use the **NetLogon** service to perform the actions. +**Note:** Based on how the cmdlet uses Netlogon Services, it is working reliably only on Domain Members. The configuration context of Domain Controllers with regard to their secure channels makes the cmdlet return false positive errors. We recommend you use NetDom or NlTest to verify and reset the secure channels for Domain Controllers. + ## EXAMPLES ### Example 1: Test a channel between the local computer and its domain From 3c65e4a1536efde43d1875a33b9350e92d77b47e Mon Sep 17 00:00:00 2001 From: Sean Wheeler Date: Wed, 26 Mar 2025 07:47:40 -0500 Subject: [PATCH 2/3] Update Test-ComputerSecureChannel documentation for clarity --- .../Test-ComputerSecureChannel.md | 15 ++++++++++++--- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/reference/5.1/Microsoft.PowerShell.Management/Test-ComputerSecureChannel.md b/reference/5.1/Microsoft.PowerShell.Management/Test-ComputerSecureChannel.md index 7d9dcba264f1..b25834324998 100644 --- a/reference/5.1/Microsoft.PowerShell.Management/Test-ComputerSecureChannel.md +++ b/reference/5.1/Microsoft.PowerShell.Management/Test-ComputerSecureChannel.md @@ -34,7 +34,10 @@ more detailed test results, use the **Verbose** parameter. This cmdlet works much like `NetDom.exe`. Both NetDom and `Test-ComputerSecureChannel` use the **NetLogon** service to perform the actions. -**Note:** Based on how the cmdlet uses Netlogon Services, it is working reliably only on Domain Members. The configuration context of Domain Controllers with regard to their secure channels makes the cmdlet return false positive errors. We recommend you use NetDom or NlTest to verify and reset the secure channels for Domain Controllers. +> [!NOTE] +> This cmdlet only works on Domain Member computers. When you run it on Domain Controllers, it +> returns false positive errors. To verify and reset the secure channels for Domain Controllers, +> use `netdom.exe` or `nltest.exe`. ## EXAMPLES @@ -76,7 +79,8 @@ VERBOSE: "The secure channel between 'SERVER01' and 'net.fabrikam.com' is alive ``` This command uses the **Verbose** common parameter to request detailed messages about the operation. -For more information about **Verbose**, see [about_CommonParameters](../Microsoft.PowerShell.Core/About/about_CommonParameters.md). +For more information about **Verbose**, see +[about_CommonParameters](../Microsoft.PowerShell.Core/About/about_CommonParameters.md). ### Example 5: Test a connection before you run a script @@ -190,7 +194,8 @@ Accept wildcard characters: False This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, --WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](https://go.microsoft.com/fwlink/?LinkID=113216). +-WarningAction, and -WarningVariable. For more information, see +[about_CommonParameters](https://go.microsoft.com/fwlink/?LinkID=113216). ## INPUTS @@ -220,3 +225,7 @@ This cmdlet returns `$true` if the connection is working correctly and `$false` [Restart-Computer](Restart-Computer.md) [Stop-Computer](Stop-Computer.md) + +[Use Netdom.exe to reset machine account passwords of a Windows Server domain controller](/troubleshoot/windows-server/windows-security/use-netdom-reset-domain-controller-password) + +[Nltest.exe](/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/cc731935(v=ws.11)) From f289040e88149713c7072b54f874e01cfe4c192b Mon Sep 17 00:00:00 2001 From: Sean Wheeler Date: Wed, 26 Mar 2025 07:49:08 -0500 Subject: [PATCH 3/3] Fix contraction in Test-ComputerSecureChannel documentation --- .../Test-ComputerSecureChannel.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/reference/5.1/Microsoft.PowerShell.Management/Test-ComputerSecureChannel.md b/reference/5.1/Microsoft.PowerShell.Management/Test-ComputerSecureChannel.md index b25834324998..1c990b5a60c1 100644 --- a/reference/5.1/Microsoft.PowerShell.Management/Test-ComputerSecureChannel.md +++ b/reference/5.1/Microsoft.PowerShell.Management/Test-ComputerSecureChannel.md @@ -176,7 +176,7 @@ Accept wildcard characters: False ### -WhatIf -Shows what would happen if the cmdlet runs. The cmdlet is not run. +Shows what would happen if the cmdlet runs. The cmdlet isn't run. ```yaml Type: System.Management.Automation.SwitchParameter