This section lists all the Microsoft Windows PowerShell cmdlets available in Mobile Device Manager (MDM) Shell that enable the automation of administrative tasks for MDM servers.
For information regarding the administrator security roles required to use these cmdlets, see Server Administrator Roles in MDM.
MDM Shell Cmdlets
- Add-BlockedDevice
-
The Add-BlockedDevicecmdlet adds a compromised managed Windows Mobile device to the blocked device table.
- Add-MDMGatewayServer
-
The Add-MDMGatewayServercmdlet adds a new MDM Gateway Server to MDM.
- Disable-MDMInventory
-
The Disable-MDMInventorycmdlet suspends all currently active device inventory collection tasks.
- Disable-MDMTrace
-
The Disable-MDMTracecmdlet disables Windows Preprocessor (WPP) logging for one or more components.
- Enable-MDMInventory
-
The Enable-MDMInventorycmdlet resumes all device inventory collection tasks that were suspended with the Disable-MDMInventorycmdlet.
- Enable-MDMTrace
-
The Enable-MDMTracecmdlet enables WPP logging for one or more components.
- Get-BlockedDevice
-
The Get-BlockedDevicecmdlet returns information about the current set of managed blocked devices.
- Get-DeviceManagementConfig
-
The Get-DeviceManagementConfigcmdlet returns the current global device management configuration.
- Get-EnrollmentConfig
-
The Get-EnrollmentConfigcmdlet returns the current configuration of the Enrollment service.
- Get-EnrollmentRequest
-
The Get-EnrollmentRequestcmdlet returns pending managed device enrollment requests.
- Get-EnrollmentServiceLog
-
The Get-EnrollmentServiceLogcmdlet returns operational log entries from the Enrollment service database.
- Get-MDMCertificateTemplate
-
The Get-MDMCertificateTemplatecmdlet returns the certificate templates that have been granted authority to be used in the current MDM instance.
- Get-MDMCurrentInstance
-
The Get-MDMCurrentInstancecmdlet returns the MDM instance that the current MDM Shell is managing.
- Get-MDMDevice
-
The Get-MDMDevicecmdlet returns information about managed devices that controls.
- Get-MDMDeviceHistory
-
The Get-MDMDeviceHistorycmdlet returns the complete set of transaction information for the specified managed device from the server operations log file.
- Get-MDMDeviceInventory
-
The Get-MDMDeviceInventorycmdlet returns the complete set of collected inventory data for the specified managed device.
- Get-MDMDeviceRecoveryPassword
-
The Get-MDMDeviceRecoveryPasswordcmdlet returns the recovery password corresponding to the specified managed device.
- Get-MDMDeviceStatus
-
The Get-MDMDeviceStatuscmdlet returns status information for the specified managed device.
- Get-MDMGatewayServer
-
The Get-MDMGatewayServercmdlet returns the current gateway-specific settings and the last known configuration status.
- Get-MDMGlobalGatewayConfig
-
The Get-MDMGlobalGatewayConfigcmdlet returns the global virtual private network (VPN) settings shared among all computers that are running MDM Gateway Server.
- Get-MDMInstance
-
The Get-MDMInstancecmdlet returns the MDM instances in the MDM system.
- Get-MDMInventoryItem
-
The Get-MDMInventoryItemcmdlet returns the currently active device inventory collection tasks.
- Get-MDMServer
-
The Get-MDMServercmdlet returns the collection of servers in MDM.
- Get-MDMTrace
-
The Get-MDMTracecmdlet returns the currently enabled and active Windows Software Trace Preprocessor (WPP) components.
- Get-MobilePolicyServiceConfig
-
The Get-MobilePolicyServiceConfigcmdlet returns the current configuration of the Group Policy service.
- Get-SoftwareDistributionConfig
-
The Get-SoftwareDistributionConfigcmdlet returns the current configuration of MDM software distribution service.
- Get-WipeConfig
-
The Get-WipeConfigcmdlet returns the current configuration of the wipe service.
- Get-WipeRequest
-
The Get-WipeRequestcmdlet returns the unprocessed wipe requests for the specified managed device.
- Grant-MDMCertificateTemplate
-
The Grant-MDMCertificateTemplatecmdlet authorizes a certificate template to be used in the current MDM instance.
- New-EnrollmentRequest
-
The New-EnrollmentRequestcmdlet creates a new managed device enrollment request.
- New-MDMInventoryItem
-
The New-MDMInventoryItemcmdlet creates a new device inventory collection task.
- New-WipeRequest
-
The New-WipeRequestcmdlet creates a new wipe request that deletes all content on the targeted managed device.
- Remove-BlockedDevice
-
The Remove-BlockedDevicecmdlet removes a managed device from the Blocked Device Table.
- Remove-EnrollmentRequest
-
The Remove-EnrollmentRequestcmdlet removes a pending enrollment request for a managed device.
- Remove-EnrollmentServiceLog
-
The Remove-EnrollmentServiceLogcmdlet removes operational log entries from the Enrollment service database.
- Remove-MDMGatewayServer
-
The Remove-MDMGatewayServercmdlet removes MDM Gateway Server and all corresponding properties from MDM.
- Remove-MDMInventoryItem
-
The Remove-MDMInventoryItemcmdlet removes the specified device inventory collection task from the task list on the server.
- Remove-WipeRequest
-
The Remove-WipeRequestcmdlet removes a wipe request for the specified managed device if the wipe request is yet unprocessed.
- Restore-MDMInventoryDefaults
-
The Restore-MDMInventoryDefaultscmdlet sets all device inventory collection settings to their default values.
- Revoke-MDMCertificateTemplate
-
The Revoke-MDMCertificateTemplatecmdlet revokes the authorization of a certificate template in the current MDM instance.
- Set-DeviceManagementConfig
-
The Set-DeviceManagementConfigcmdlet sets the global device management configuration values.
- Set-EnrollmentConfig
-
The Set-EnrollmentConfigcmdlet updates the current configuration of the Enrollment service by using the provided values.
- Set-EnrollmentPermissions
-
The Set-EnrollmentPermissionscmdlet grants MDM Enrollment Server permission to create objects in Active Directory.
- Set-MDMCurrentInstance
-
The Set-MDMCurrentInstancecmdlet configures the current MDM Shell to manage the specified MDM instance.
- Set-MDMGatewayServer
-
The Set-MDMGatewayServercmdlet updates the current settings for the specified MDM Gateway Server.
- Set-MDMGlobalGatewayConfig
-
The Set-MDMGlobalGatewayConfigcmdlet updates the global VPN settings shared among all computers that are running MDM Gateway Server.
- Set-MDMInventoryItem
-
The Set-MDMInventoryItemcmdlet sets the collection frequency for a device inventory collection item.
- Set-MobilePolicyServiceConfig
-
The Set-MobilePolicyServiceConfigcmdlet sets the configuration of the Group Policy service.
- Set-SoftwareDistributionConfig
-
The Set-SoftwareDistributionConfigcmdlet sets the configuration of MDM software distribution service.
- Set-WipeConfig
-
The Set-WipeConfigcmdlet configures the properties of the wipe service.
- Start-MDMVPNService
-
The Start-MDMVPNServicecmdlet starts the VPN service on the specified MDM Gateway Server.
- Stop-MDMVPNService
-
The Stop-MDMVPNServicecmdlet stops the VPN service on the specified MDM Gateway Server.
- Update-MDMDeviceRecoveryPassword
-
The Update-MDMDeviceRecoveryPasswordcmdlet forces the specified managed device to generate a new recovery password and send it to the server in the next scheduled device management session.
- Update-MDMDeviceRecoveryPasswordEncryptionKey
-
The Update-MDMDeviceRecoveryPasswordEncryptionKeycmdlet deletes all device recovery passwords in the current MDM instance. Managed devices then generate new recovery passwords.
- Update-MDMGatewayServer
-
The Update-MDMGatewayServercmdlet updates each MDM Gateway Server from the Gateway Central Management (MDM GCM) component of MDM Device Management Server.
- Update-MobilePolicyCalculation
-
The Update-MobilePolicyCalculationcmdlet updates the Resultant Set of Policy (RSoP) held by the server for a given device.