1. # 启用保持登录状态
    2. Set-AdfsProperties -KmsiEnabled:$true
    4. # 启用更改密码
    5. Enable-AdfsEndpoint "/adfs/portal/updatepassword/"
    6. Set-AdfsEndpoint "/adfs/portal/updatepassword/" -Proxy:$true
    7. Restart-Service AdfsSrv -Force
    9. # 启用Office 365密码过期通知
    10. $msolId = "urn:federation:MicrosoftOnline"
    11. $rptName = "Microsoft Office 365 Identity Platform"
    12. $rptRules = (Get-AdfsRelyingPartyTrust -Identifier $msolId).IssuanceTransformRules
    13. $newRule =  '@RuleTemplate = "LdapClaims" @RuleName = "UPN Claim Rule" c1:[Type == "http://schemas.microsoft.com/ws/2012/01/passwordexpirationtime"] => issue(store = "_PasswordExpiryStore", types = ("http://schemas.microsoft.com/ws/2012/01/passwordexpirationtime","http://schemas.microsoft.com/ws/2012/01/passwordexpirationdays","http://schemas.microsoft.com/ws/2012/01/passwordchangeurl"), query = "{0};", param = c1.Value);'
    14. $rptRules = $rptRules + $newRule
    15. Set-AdfsRelyingPartyTrust -TargetName $rptName -IssuanceTransformRules $rptRules
    17. # 以下命令将配置Extranet锁定保护，以在15次失败的登录后将用户锁定10分钟，并允许从PDC模拟器以外的DC检索失败的登录计数
    18. Set-AdfsProperties -EnableExtranetLockout:$true -ExtranetLockoutThreshold 15 -ExtranetObservationWindow (New-TimeSpan -Minutes 10) -ExtranetLockoutRequirePDC $false
    20. # 在新服务器上执行，更改令牌证书有效期
    21. Set-AdfsProperties -Certificateduration 1827
    22. Update-AdfsCertificate -CertificateType Token-Decrypting -Urgent
    23. Update-AdfsCertificate -CertificateType Token-Signing -Urgent
    25. # 启动ADFS身份验证log记录
    26. Set-ADFSProperties –LogLevel Information,Errors,Verbose,Warnings,FailureAudits,SuccessAudits