Skip to content

Commit d1c809e

Browse files
Update documentation for -PrincipalsAllowedToDelegateToAccount
Clarify usage of Set-ADComputer for principals delegation.
1 parent e3c3206 commit d1c809e

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

docset/winserver2025-ps/ActiveDirectory/Set-ADComputer.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -816,7 +816,7 @@ Accept wildcard characters: False
816816
Specifies the accounts which can act on the behalf of users to services running as this computer account.
817817
This parameter sets the **msDS-AllowedToActOnBehalfOfOtherIdentity** attribute of a computer account object.
818818

819-
`Running Set-ADComputer without specifying the first principal will cause it to get overridden`
819+
You can specify the Distinguished Name of an account when it is from the same domain as the account in focus. When you want a security principal from another domain, you need to construct an ADPrincipal object with the desired account, for example using Get-ADGroup.
820820

821821
```yaml
822822
Type: ADPrincipal[]

0 commit comments

Comments
 (0)