Specifies the root certificate to which DirectAccess and VPN clients should chain. This parameter is used 1. to change the ...

Specifies the root certificate to which DirectAccess and VPN clients should chain. This parameter is used 
1. to change the IPsec root certificate or 
2. to enable PKI if there is no IPsec root certificate already configured
IPsec root certificate is a global configuration, i.e. the same certificate is found on all nodes in the DirectAccess deployment. Hence, configuring the root certificate updates it on all DirectAccess servers. If the specified certificate is not found on one or more servers then the IPsec root certificate is not updated on any of the servers and the cmdlet errors out. In a load balancing scenario if one or more nodes is down when the cmdlet is run then the certificate is only updated on the nodes that are running. But the DirectAccess server Group Policy object is updated to ensure that when these computers come up load balancing is in stopped state on them due to a certificate mismatch. For the certificate change to take effect, the admin needs to install a similar certificate on them and re-run this cmdlet

Specifies the protocol used for name-password authentication (following Called Link Identification CLID authentication). ... Specifies the relative preference assigned to each tunnel when more than one set of tunneling attributes is returned to the ... Specifies the remote AuthenticationMethod used by the RRAS server. If PreSharedKey is specified, SharedSecret parameter becomes ... Specifies the remote control setting. 0 - 'Disable', 1 - 'EnableInputNotify', 2 - 'EnableInputNoNotify', 3 - 'EnableNoInputNotify', ... Specifies the root certificate to which DirectAccess and VPN clients should chain. This parameter is used 1. to change the ... Specifies the security layer used between the client and the server. 0 - Use RDP security layer, 1 - Negotiate layer with ... Specifies the server weight value to use in load balancing. To set this item, ServerPurpose must be set to a value of '1' ... Specifies the state of the SHA1 hash. 0 - Not valid, 1 - Default self signed, 2 - Default Group Policy enforced, 3 - Custom. ... Specifies the status of the license. The status can be one of the following values: 'Unknown', 'Temporary license', 'Active', ...