Set-PolicyConfig
此 cmdlet 仅在安全性 & 合规性 PowerShell 中可用。 有关详细信息,请参阅 安全性 & 合规性 PowerShell。
使用 Set-PolicyConfig cmdlet 修改组织中配置的终结点限制。
有关以下语法部分的参数设置的详细信息,请参阅 Exchange cmdlet 语法。
语法
Set-PolicyConfig
[[-Identity] <OrganizationIdParameter>]
[-CaseHoldPolicyLimit <Int32>]
[-ClassificationScheme <ClassificationScheme>]
[-ComplianceUrl <String>]
[-Confirm]
[-DlpAppGroups <PswsHashtable[]>]
[-DlpAppGroupsPsws <PswsHashtable[]>]
[-DlpNetworkShareGroups <PswsHashtable>]
[-DlpPrinterGroups <PswsHashtable>]
[-DlpRemovableMediaGroups <PswsHashtable>]
[-DocumentIsUnsupportedSeverity <RuleSeverity>]
[-EnableAdvancedRuleBuilder <Boolean>]
[-EnableLabelCoauth <Boolean>]
[-EnableSpoAipMigration <Boolean>]
[-EndpointDlpGlobalSettings <PswsHashtable[]>]
[-EndpointDlpGlobalSettingsPsws <PswsHashtable[]>]
[-InformationBarrierMode <InformationBarrierMode>]
[-InformationBarrierPeopleSearchRestriction <InformationBarrierPeopleSearchRestriction>]
[-OnPremisesWorkload <Workload>]
[-ProcessingLimitExceededSeverity <RuleSeverity>]
[-PurviewLabelConsent <Boolean>]
[-ReservedForFutureUse <Boolean>]
[-RetentionForwardCrawl <Boolean>]
[-RuleErrorAction <PolicyRuleErrorAction>]
[-SenderAddressLocation <PolicySenderAddressLocation>]
[-SiteGroups <PswsHashtable[]>]
[-SiteGroupsPsws <PswsHashtable[]>]
[-WhatIf]
[<CommonParameters>]
说明
若要在安全性 & 合规性 PowerShell 中使用此 cmdlet,需要分配权限。 有关详细信息,请参阅 Microsoft Purview 合规门户中的权限。
示例
示例 1
{{ Add example code here }}
{{ 在此处添加示例说明 }}
参数
-CaseHoldPolicyLimit
{{ Fill CaseHoldPolicyLimit Description }}
Type: | Int32 |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-ClassificationScheme
{{ Fill ClassificationScheme Description }}
Type: | ClassificationScheme |
Accepted values: | Default, V0_AggregatedOnly, V1_DetailedResults |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-ComplianceUrl
{{ Fill ComplianceUrl Description }}
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-Confirm
Confirm 开关指定是否显示确认提示。 此开关对 cmdlet 造成的影响取决于在你继续操作之前 cmdlet 是否需要确认。
- 破坏性 cmdlet (例如,Remove-* cmdlet) 具有内置的暂停,该暂停会强制你在继续操作之前确认命令。 对于这些 cmdlet,可以使用此确切语法跳过确认提示:-Confirm:$false。
- 大多数其他 cmdlet (例如,New-* 和 Set-* cmdlet) 没有内置暂停。 对于这些 cmdlet,指定不含值的 Confirm 开关会引入暂停,从而强制要求你先确认命令,然后再继续操作。
Type: | SwitchParameter |
Aliases: | cf |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-DlpAppGroups
{{ Fill DlpAppGroups Description }}
Type: | PswsHashtable[] |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-DlpAppGroupsPsws
{{ Fill DlpAppGroupsPsws Description }}
Type: | PswsHashtable[] |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-DlpNetworkShareGroups
{{ Fill DlpNetworkShareGroups Description }}
Type: | PswsHashtable |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-DlpPrinterGroups
{{ Fill DlpPrinterGroups Description }}
Type: | PswsHashtable |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-DlpRemovableMediaGroups
{{ Fill DlpRemovableMediaGroups Description }}
Type: | PswsHashtable |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-DocumentIsUnsupportedSeverity
{{ Fill DocumentIsUnsupportedSeverity Description }}
Type: | RuleSeverity |
Accepted values: | Low, Medium, High, None, Informational, Information |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-EnableAdvancedRuleBuilder
{{ Fill EnableAdvancedRuleBuilder Description }}
Type: | Boolean |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-EnableLabelCoauth
EnableLabelCoauth 参数启用或禁用整个组织的 Office 桌面应用中的共同创作支持。 有效值包括:
- $true:已启用 Office 桌面应用中的共同创作支持。 通过敏感度标签标记和加密文档时,多个用户可以同时编辑这些文档。 未加密文件的标记信息不再保存在自定义属性中。 如果使用任何应用、服务、脚本或工具在旧位置读取或写入标记元数据,请不要启用共同创作。
- $false:禁用 Office 桌面应用中的共同创作支持。
在组织中的 Office 桌面应用中禁用共同创作支持会产生以下后果:
- 对于支持新的标签元数据的应用和服务,读取或保存标签时,它们现在将还原为原始元数据格式和位置。
- 启用设置时使用的 Office 文档的新元数据格式和位置不会复制到原始格式和位置。 因此,此未加密 Word、Excel 和 PowerPoint 文件的标记信息将会丢失。
- 在组织中,共同创作和自动保存不再适用于已标记和加密的文档。
- 对 OneDrive 和 SharePoint 中的 Office 文件,敏感度标签保持启用状态。
Type: | Boolean |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-EnableSpoAipMigration
EnableSpoAipMigration 参数启用或禁用 SharePoint 和 OneDrive 中支持的 Office 文件的内置标记。 有效值包含:
- $true:用户可以在 Office 网页版 中应用敏感度标签。 用户将在功能区上看到“敏感度”按钮,以便可以应用标签,并在状态栏上查看任何应用的标签名称。
- $false:用户无法在Office 网页版中应用敏感度标签。
Type: | Boolean |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-EndpointDlpGlobalSettings
EndpointDlpGlobalSettings 参数指定全局终结点。 此参数使用以下语法: @(@{"Setting"="<Setting>"; "Value"="<Value>}",@{"Setting"="<Setting>"; "Value"="<Value>"},...)
。
的值 <Setting>
是支持的值之一。
示例值:
@{"Setting"="PathExclusion"; "Value"="C:\Windows";}
@{"Setting"="PathExclusion"; "Value"="%AppData%\Mozilla";}
@{"Setting"="PathExclusion"; "Value"="C:\Users\*\Desktop";}
@{"Setting"="UnallowedApp"="Notepad ++;"Executable"="notepad++"}
@{"Setting"="UnallowedApp"="Executable"="cmd"}
@{"Setting"="UnallowedBrowser"="Chrome";"Executable"="chrome"}
@{"Setting"="CloudAppRestrictions"="Allow"}
@{"Setting"="CloudAppRestrictionList"="1.1.2.2"}
@{"Setting"="CloudAppRestrictionList"="subdomain.com"}
@{"Setting"="CloudAppRestrictionList"="another.differentdomain.edu"}
@{"Setting"="ShowEndpointJustificationDropdown"; "True";}
Type: | PswsHashtable[] |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-EndpointDlpGlobalSettingsPsws
{{ Fill EndpointDlpGlobalSettingsPsws Description }}
Type: | PswsHashtable[] |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-Identity
无需使用此参数。 组织中唯一的终结点限制对象名为“设置”。
Type: | OrganizationIdParameter |
Position: | 0 |
Default value: | None |
Required: | False |
Accept pipeline input: | True |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-InformationBarrierMode
{{ Fill InformationBarrierMode Description }}
Type: | InformationBarrierMode |
Accepted values: | Legacy, SingleSegment, MultiSegment |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-InformationBarrierPeopleSearchRestriction
{{ Fill InformationBarrierPeopleSearchRestriction Description }}
Type: | InformationBarrierPeopleSearchRestriction |
Accepted values: | Enabled, Disabled |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-OnPremisesWorkload
{{ Fill OnPremisesWorkload Description }}
Type: | Workload |
Accepted values: | None, Exchange, SharePoint, Intune, OneDriveForBusiness, PublicFolder, SharePointOnPremises, ExchangeOnPremises, AuditAlerting, Skype, ModernGroup, DynamicScope, Teams, UnifiedAuditAzure, EndpointDevices, ThirdPartyApps, OnPremisesScanner |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-ProcessingLimitExceededSeverity
{{ Fill ProcessingLimitExceededSeverity Description }}
Type: | RuleSeverity |
Accepted values: | Low, Medium, High, None, Informational, Information |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-PurviewLabelConsent
{{ Fill PurviewLabelConsent Description }}
Type: | Boolean |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-ReservedForFutureUse
{{ Fill ReservedForFutureUse Description }}
Type: | Boolean |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-RetentionForwardCrawl
{{ Fill RetentionForwardCrawl Description }}
Type: | Boolean |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-RuleErrorAction
RuleErrorAction 参数指定在评估规则期间遇到错误时要执行的操作。 有效值包含:
- Ignore
- RetryThenBlock (这是默认值)
Type: | PolicyRuleErrorAction |
Accepted values: | Ignore, RetryThenBlock |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-SenderAddressLocation
SenderAddressLocation 参数指定在检查发件人电子邮件地址的条件和异常中查找发件人地址的位置。 有效值包含:
- 标头:仅检查邮件头 (发件人,例如发件人、发件人或Reply-To字段) 。 此值为默认值。
- 信封:仅检查邮件信封中的发件人 (SMTP 传输中使用的 MAIL FROM 值,该值通常存储在) Return-Path字段中。
- HeaderOrEnvelope:检查邮件头和邮件信封中的发件人。
Type: | PolicySenderAddressLocation |
Accepted values: | Header, Envelope, HeaderOrEnvelope |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-SiteGroups
{{ Fill SiteGroups Description }}
Type: | PswsHashtable[] |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-SiteGroupsPsws
{{ Fill SiteGroupsPsws Description }}
Type: | PswsHashtable[] |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |
-WhatIf
WhatIf 开关在安全 & 合规性 PowerShell 中不起作用。
Type: | SwitchParameter |
Aliases: | wi |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Applies to: | Security & Compliance |