Get-DSPamPasswordRotationLog

Synopsis

Get PAM password rotation report.

Syntax

__AllParameterSets

Get-DSPamPasswordRotationLog [-DateFilter <DateFilter>] [-After <datetime>] [-Before <datetime>]
 [-CredentialType <PamConnectionType[]>] [-VaultID <guid[]>] [-Filter <string>]
 [-PageSize <int>] [-IncludeNoPasswordUpdate] [<CommonParameters>]

Description

Get the PAM last password update report from the server. Optionally filter by date range, credential type, or vault. If no date filter is applied, entries from the last 7 days are fetched. Returns all matching entries across all pages.

Examples

Example 1

PS C:\> Get-DSPamPasswordRotationLog

Gets PAM password rotation entries from the last 7 days (default).

Example 2

PS C:\> $before = (Get-Date '2025-03-31').AddDays(1).AddMilliseconds(-1)
PS C:\> Get-DSPamPasswordRotationLog -DateFilter Custom -After '2025-01-01' -Before $before

Gets PAM password rotation entries for Q1 2025. Since -Before defaults to midnight, $before is set to 23:59:59.999 to include the full last day.

Example 3

PS C:\> Get-DSPamPasswordRotationLog -DateFilter Last30Days -IncludeNoPasswordUpdate

Gets all PAM accounts from the last 30 days, including those with no password update.

Parameters

-After

Start date for custom date range (required when using -DateFilter Custom).

Type: System.Nullable`1[System.DateTime]
DefaultValue: ''
SupportsWildcards: false
Aliases: []
ParameterSets:
- Name: (All)
  Position: Named
  IsRequired: false
  ValueFromPipeline: false
  ValueFromPipelineByPropertyName: false
  ValueFromRemainingArguments: false
DontShow: false
AcceptedValues: []
HelpMessage: ''

-Before

End date for custom date range (use with -DateFilter Custom). Defaults to current date/time if not specified.

Type: System.Nullable`1[System.DateTime]
DefaultValue: ''
SupportsWildcards: false
Aliases: []
ParameterSets:
- Name: (All)
  Position: Named
  IsRequired: false
  ValueFromPipeline: false
  ValueFromPipelineByPropertyName: false
  ValueFromRemainingArguments: false
DontShow: false
AcceptedValues: []
HelpMessage: ''

-CredentialType

Filter by one or more credential types.

Type: Devolutions.RemoteDesktopManager.PamConnectionType[]
DefaultValue: ''
SupportsWildcards: false
Aliases: []
ParameterSets:
- Name: (All)
  Position: Named
  IsRequired: false
  ValueFromPipeline: false
  ValueFromPipelineByPropertyName: false
  ValueFromRemainingArguments: false
DontShow: false
AcceptedValues: []
HelpMessage: ''

-DateFilter

Date filter for the report. Defaults to the last 7 days if not specified.

Type: Devolutions.RemoteDesktopManager.DateFilter
DefaultValue: ''
SupportsWildcards: false
Aliases: []
ParameterSets:
- Name: (All)
  Position: Named
  IsRequired: false
  ValueFromPipeline: false
  ValueFromPipelineByPropertyName: false
  ValueFromRemainingArguments: false
DontShow: false
AcceptedValues: []
HelpMessage: ''

-Filter

Text filter applied server-side on account name or username.

Type: System.String
DefaultValue: ''
SupportsWildcards: false
Aliases: []
ParameterSets:
- Name: (All)
  Position: Named
  IsRequired: false
  ValueFromPipeline: false
  ValueFromPipelineByPropertyName: false
  ValueFromRemainingArguments: false
DontShow: false
AcceptedValues: []
HelpMessage: ''

-IncludeNoPasswordUpdate

Include accounts that have never had a password update.

Type: System.Management.Automation.SwitchParameter
DefaultValue: ''
SupportsWildcards: false
Aliases: []
ParameterSets:
- Name: (All)
  Position: Named
  IsRequired: false
  ValueFromPipeline: false
  ValueFromPipelineByPropertyName: false
  ValueFromRemainingArguments: false
DontShow: false
AcceptedValues: []
HelpMessage: ''

-PageSize

Number of log entries fetched per request. Default is 10000. Increase this value to reduce the number of requests for large datasets (fewer round trips), or decrease it if you encounter timeout issues due to heavy payloads.

Type: System.Int32
DefaultValue: ''
SupportsWildcards: false
Aliases: []
ParameterSets:
- Name: (All)
  Position: Named
  IsRequired: false
  ValueFromPipeline: false
  ValueFromPipelineByPropertyName: false
  ValueFromRemainingArguments: false
DontShow: false
AcceptedValues: []
HelpMessage: ''

-VaultID

Filter by one or more vault IDs.

Type: System.Guid[]
DefaultValue: ''
SupportsWildcards: false
Aliases: []
ParameterSets:
- Name: (All)
  Position: Named
  IsRequired: false
  ValueFromPipeline: false
  ValueFromPipelineByPropertyName: false
  ValueFromRemainingArguments: false
DontShow: false
AcceptedValues: []
HelpMessage: ''

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

Outputs

RemoteDesktopManager.PowerShellModule.PSOutputObject.PSPamPasswordRotationLogItem

Notes

For more information, type "Get-Help Get-DSPamPasswordRotationLog -detailed". For technical information, type "Get-Help Get-DSPamPasswordRotationLog -full".