{"id":80,"date":"2026-03-22T12:51:35","date_gmt":"2026-03-22T12:51:35","guid":{"rendered":"https:\/\/overlaps.co.uk\/docs\/?page_id=80"},"modified":"2026-04-14T11:31:01","modified_gmt":"2026-04-14T10:31:01","slug":"command-line-configuration-tool","status":"publish","type":"page","link":"https:\/\/overlaps.co.uk\/docs\/overlaps-documentation\/additional-tools\/command-line-configuration-tool\/","title":{"rendered":"Command Line Configuration Tool"},"content":{"rendered":"\n
C:\\Program Files (x86)\\OVERLAPS\\olconfig.exe\n<\/pre>\n\n\n\n
The command-line configuration tool can be used to perform a number of tasks such as adding\/removing users and managing HTTPS certifications.<\/p>\n\n\n\n
Modules<\/h2>\n\n\n\n
There are 4 main sections (or modules) of the olconfig tool:<\/p>\n\n\n\n
    \n
  1. User<\/a><\/li>\n\n\n\n
  2. SelfService<\/a><\/li>\n\n\n\n
  3. Https<\/a><\/li>\n\n\n\n
  4. Security<\/a><\/li>\n<\/ol>\n\n\n\n
    User<\/h3>\n\n\n\n
    Used to:<\/p>\n\n\n\n
      \n
    • List Existing Explicit OVERLAPS Users<\/li>\n\n\n\n
    • Add Users<\/li>\n\n\n\n
    • Remove Users<\/li>\n\n\n\n
    • Disable Two-Factor Authentication on a user’s account<\/li>\n\n\n\n
    • Set whether a user is an Administrator or not (has the “Edit Settings” option)<\/li>\n\n\n\n
    • Import users from a text or CSV file<\/li>\n<\/ul>\n\n\n\n
      Command Line Arguments<\/h4>\n\n\n\n
      olconfig.exe user \/list<\/p>\n\n\n\n
      List all OVERLAPS users and groups.<\/p>\n\n\n\n
      olconfig.exe user [<domain>\\]<username> \/add<\/p>\n\n\n\n
      Add a user from Active Directory.<\/p>\n\n\n\n
      Example:<\/p>\n\n\n\n
      olconfig.exe user contoso\\exampleuser \/add\n<\/pre>\n\n\n\n
      olconfig.exe user [<domain>\\]<username> \/add \/admin<\/em><\/p>\n\n\n\n
      Add an Administrator user from Active Directory.<\/p>\n\n\n\n
      olconfig.exe user [<domain>\\]<username> \/remove<\/em><\/p>\n\n\n\n
      Remove a user or group.<\/p>\n\n\n\n
      olconfig.exe user [<domain>\\]<username> \/admin<\/em><\/p>\n\n\n\n
      Make an existing user an Administrator.<\/p>\n\n\n\n
      olconfig.exe user [<domain>\\]<username> \/noadmin<\/em><\/p>\n\n\n\n
      Remove an existing user’s Administrator rights.<\/p>\n\n\n\n
      olconfig.exe user [<domain>\\]<username> \/disabletwofactor<\/em><\/p>\n\n\n\n
      Disable two factor authentication on a user account.<\/p>\n\n\n\n
      olconfig.exe user \/import <C:\\\\path\\\\to\\\\list.txt><\/em><\/p>\n\n\n\n
      Import a list of users or groups from a text file. The file should only include one user per line, with or without domain information. This can be combined with the “\/admin” option to make all of the users administrators (though this is not recommended).<\/p>\n\n\n\n
      olconfig.exe user \/importcsv <C:\\\\path\\\\to\\\\list.csv><\/em><\/p>\n\n\n\n
      Import a list of users or groups from a csv file.<\/p>\n\n\n\n
      Each line in the CSV file should be in the format: “DistiguishedName”,”GUID”,IsGroup<\/strong> (0\/1, where 1 indicates the user is<\/strong> a group).<\/p>\n\n\n\n
      Example:<\/p>\n\n\n\n
      \"CN=username1,OU=users,DC=domain,DC=name\",\"1234-56789-012345-6780\",0\n\"CN=username2,OU=users,DC=domain,DC=name\",\"1234-56789-012345-6781\",0\n\"CN=username3,OU=users,DC=domain,DC=name\",\"1234-56789-012345-6782\",0\n\"CN=username4,OU=users,DC=domain,DC=name\",\"1234-56789-012345-6783\",0\n\"CN=group1,OU=groups,DC=domain,DC=name\",\"1234-56789-012345-6784\",1\n<\/pre>\n\n\n\n
      Note that the purpose of this import method (as compared to the text file import method) is that none of the data is validated, the user records are just inserted directly into the database. This can be significantly quicker for large import processes when you are certain that the information you have is correct, but should be used with caution.<\/p>\n\n\n\n
      Self Service<\/h3>\n\n\n\n
      Used to:<\/p>\n\n\n\n
        \n
      • Add a Self Service Computer to an Existing User<\/li>\n\n\n\n
      • Remove a Self Service Computer from a User<\/li>\n\n\n\n
      • Clear all Self Service Computers from a User<\/li>\n\n\n\n
      • Import Multiple Self Service Computers to Existing Users<\/li>\n<\/ul>\n\n\n\n
        Command Line Arguments<\/h4>\n\n\n\n
        olconfig.exe selfservice \/add \/user [<domain>\/]<username> \/computer <computer DN><\/p>\n\n\n\n
        Add a Self Service computer to an existing user.<\/p>\n\n\n\n
        Parameter Name<\/th>Description<\/th><\/tr><\/thead>
        \/user [<domain>]<username><\/td>The (optional) domain and username of the Self-Service user.
        The user must already exist in OVERLAPS.<\/td><\/tr>
        \/computer <computer DN><\/td>The distinguished name of an AD computer.
        Must be enclosed in quotes if there are any spaces.
        Can be specified more than once to add multiple computers.<\/td><\/tr>
        \/reqauth<\/td>The user needs to submit an Authorisation Request to access the
        passwords (not compatible with reqjust).<\/td><\/tr>
        \/reqjust<\/td>The user needs to supply a Justification before accessing the
        passwords (not compatible with reqauth).<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
        Example:<\/p>\n\n\n\n
        olconfig selfservice \/user contoso\\exampleuser \/computer \"CN=ComputerA,OU=Computers,DC=contoso,DC=com\" \/reqjust\n<\/pre>\n\n\n\n
        olconfig.exe selfservice \/remove \/user [<domain>\/]username> \/computer <computer DN><\/em><\/p>\n\n\n\n
        Remove a Self Service computer from a user.<\/p>\n\n\n\n
        Parameter Name<\/th>Description<\/th><\/tr><\/thead>
        \/user [<domain>]<username><\/td>The (optional) domain and username of the Self-Service user. The user
        must already exist in OVERLAPS.<\/td><\/tr>
        \/computer <computer DN><\/td>The distinguished name of an AD computer.
        Must be enclosed in quotes if there are any spaces.
        Can be specified more than once to remove multiple computers.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
        olconfig.exe selfservice \/clear \/user [<domain>\/]<username><\/p>\n\n\n\n
        Remove all Self Service computers from a user.<\/p>\n\n\n\n
        Parameter Name<\/th>Description<\/th><\/tr><\/thead>
        \/user [<domain>]<username><\/td>The (optional) domain and username of the Self-Service user. The
        user must already exist in OVERLAPS.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
        olconfig.exe selfservice \/importcsv <C:\\path\\to\\list.csv><\/em><\/p>\n\n\n\n
        Imports a list of Self Service computers from a CSV file.<\/p>\n\n\n\n
        The CSV file should be formatted as UTF-8 and one row for each user\/computer entry with the following columns:<\/p>\n\n\n\n
        \"UserDistinguishedName\",\"ComputerDistinguishedName\",\"ComputerGuid\",RequiresAuthorisation (0\/1),RequiresJustification (0\/1)\n<\/pre>\n\n\n\n
        For example:<\/p>\n\n\n\n
        \"CN=User1,OU=Users,DC=contoso,DC=com\",\"CN=ComputerA,OU=Computers,DC=contoso,DC=com\",\"00000000-0000-0000-0000-000000000000\",0,1\n\"CN=User1,OU=Users,DC=contoso,DC=com\",\"CN=ComputerB,OU=Computers,DC=contoso,DC=com\",\"00000000-0000-0000-0000-000000000000\",1,0\n\"CN=User1,OU=Users,DC=contoso,DC=com\",\"CN=ComputerC,OU=Computers,DC=contoso,DC=com\",\"00000000-0000-0000-0000-000000000000\",0,1\n<\/pre>\n\n\n\n
        The import process assumes that the user already exists in OVERLAPS and will fail if they are not. To add a new user first, refer the above “user” module.<\/p>\n\n\n\n
        HTTPS<\/h3>\n\n\n\n
        Used to: * Enable or disable HTTPS * Install a new certificate for HTTPS and create bindings so they will be used by OVERLAPS * Remove existing HTTPS certificate bindings<\/p>\n\n\n\n
        olconfig.exe https \/enable [\/restart]<\/em><\/p>\n\n\n\n
        Enable HTTPS in OVERLAPS and optionally restart the service.<\/p>\n\n\n\n
        Parameter Name<\/th>Description<\/th><\/tr><\/thead>
        \/restart<\/td>Restart the OVERLAPS service on success.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
        olconfig.exe https \/disable [\/restart]<\/em><\/p>\n\n\n\n
        Disable HTTPS in OVERLAPS and optionally restart the service.<\/p>\n\n\n\n
        Parameter Name<\/th>Description<\/th><\/tr><\/thead>
        \/restart<\/td>Restart the OVERLAPS service on success.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
        olconfig.exe https \/certfile [\/password ] [\/store ] [\/hostname ] [\/ipaddress ] [\/port ] [\/restart]<\/em><\/p>\n\n\n\n
        Install using a Certificate File (*.pfx) with the certificate password (if required).<\/p>\n\n\n\n
        Parameter Name<\/th>Description<\/th><\/tr><\/thead>
        \/certfile <filename><\/td>The certificate’s private key file (*.pfx)<\/td><\/tr>
        \/password <password><\/td>The password needed to read the private key file<\/td><\/tr>
        \/store <My|Root><\/td>Whether the certificate is stored in the Personal store (My – used for
        self-signed certificates), or the Trusted Root Authorities (Root) store.<\/td><\/tr>
        \/hostname <host><\/td>Specify the URL or semicolon list of hostnames to bind to.<\/td><\/tr>
        \/ipaddress <ip><\/td>Specify the IP address to bind to.<\/td><\/tr>
        \/port <port><\/td>The SSL\/TLS port (defaults to 443)<\/td><\/tr>
        \/restart<\/td>Restart the OVERLAPS service on success.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
        Examples:<\/p>\n\n\n\n
        olconfig.exe https \/certfile \"C:\\certificates\\third-party-private-key.pfx\" \/password C3rtificateP4ss \/restart\nInstalls the \\\"third-party-private-key.pfx\\\" certificate and binds it to the local IP of the server, then restarts OVERLAPS.\n\nolconfig.exe https \/certfile \"C:\\certificates\\third-party-private-key.pfx\" \/password C3rtificateP4ss \/store Root \/hostname overlaps.contoso.com \/ipaddress 192.168.0.4 \/restart\nInstalls the \\\"third-party-private-key.pfx\\\" certificate and binds it to a specific hostname and IP address.\n\nolconfig.exe https \/certfile \"C:\\certificates\\self-signed-private-key.pfx\" \/password C3rtificateP4ss \/store My \/hostname overlaps.contoso.com \/ipaddress 192.168.0.4 \/port 8443 \/restart\nInstalls the \\\"self-signed-private-key.pfx\\\" certificate and binds it to a specific hostname, IP address and port.\n\nolconfig.exe https \/certfile \"C:\\certificates\\self-signed-private-key.pfx\" \/password C3rtificateP4ss \/hostname overlaps.contoso.com;*.contoso.com \/port 8443\nInstalls the \\\"self-signed-private-key.pfx\\\" wildcard certificate and binds it to both the specific hostname and the wildcard.\n<\/pre>\n\n\n\n
        Note that if you don’t provide the “\/store” parameter, olconfig will attempt to determine the nature of the certificate and therefore the certificate store automatically.<\/p>\n\n\n\n
        olconfig.exe https \/thumbprint \/store [\/hostname ] [\/ipaddress ] [\/port ] [\/restart]<\/em><\/p>\n\n\n\n
        Install using an already installed Certificate (in the Local Computer\/Personal Store or Trusted Root Authorities).<\/p>\n\n\n\n
        Parameter Name<\/th>Description<\/th><\/tr><\/thead>
        \/thumbprint <certid><\/td>The certificate’s “thumbprint”.<\/td><\/tr>
        \/store <My|Root><\/td>Which store the certificate can be found in.<\/td><\/tr>
        \/hostname <host><\/td>Specify the URL or semicolon list of hostnames to bind to.<\/td><\/tr>
        \/ipaddress <ip><\/td>Specify the IP address to bind to.<\/td><\/tr>
        \/port <port><\/td>The SSL\/TLS port (defaults to 443)<\/td><\/tr>
        \/restart<\/td>Restart the OVERLAPS service on success.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
        Examples:<\/p>\n\n\n\n
        olconfig.exe https \/thumbprint c6b10ffec9f6a5051a78cc86132f4eddd83cafc3 \/password C3rtificateP4ss \/store Root \/hostname overlaps.contoso.com \/ipaddress 192.168.0.4 \/restart\nolconfig.exe https \/thumbprint c6b10ffec9f6a5051a78cc86132f4eddd83cafc4 \/password C3rtificateP4ss \/store My \/hostname overlaps.contoso.com \/ipaddress 192.168.0.4 \/port 8443 \/restart\n<\/pre>\n\n\n\n
        olconfig.exe https \/disableclientcertcheck<\/em><\/p>\n\n\n\n
        Disable Client Certificate checks on existing certificate bindings (to stop browsers prompting users for a certificate, requires a server restart).<\/p>\n\n\n\n
        olconfig.exe https \/unbind [\/ipaddress ] [\/hostname ] [\/port ] [\/restart]<\/em><\/p>\n\n\n\n
        Unbind an existing certificate binding.<\/p>\n\n\n\n
        Parameter Name<\/th>Description<\/th><\/tr><\/thead>
        \/hostname <host><\/td>Specify the URL or semicolon list of hostnames to unbind from.<\/td><\/tr>
        \/ipaddress <ip><\/td>Specify the IP address to unbind from.<\/td><\/tr>
        \/port <port><\/td>The SSL\/TLS port (defaults to 443)<\/td><\/tr>
        \/restart<\/td>Restart the OVERLAPS service on success.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
        Examples:<\/p>\n\n\n\n
        olconfig.exe https \/unbind \/ipaddress 192.168.12.12 \/port 8443\nUnbinds the certificate from a specific IP address and port.\n\nolconfig.exe https \/unbind \/hostname overlaps.contoso.com\nUnbinds the certificate from a specific hostname using the default port (443).\n<\/pre>\n\n\n\n
        Security<\/h3>\n\n\n\n
        olconfig.exe security [\/krbstatus] [\/enablekrb ] [\/disablekrb ]<\/p>\n\n\n\n
        Used to:<\/p>\n\n\n\n
          \n
        • Get the systems current Kerberos SPN configuration.<\/li>\n\n\n\n
        • Enable or disable Kerberos by registering or unregistering SPNs.<\/li>\n<\/ul>\n\n\n\n
          Parameter Name<\/th>Description<\/th><\/tr><\/thead>
          \/krbstatus<\/td>Show the current Kerberos SPN status<\/td><\/tr>
          \/enablekrb <http|https|both><\/td>Enable Kerberos encryption on Windows Authentication<\/td><\/tr>
          \/disablekrb <http|https|both><\/td>Disable Kerberos encryption for Windows Authentication<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
          Optional Parameters:<\/p>\n\n\n\n
          Parameter Name<\/th>Description<\/th><\/tr><\/thead>
          \/url <hostname\/address><\/td>The hostname or address of the server (defaults to the hostname)<\/td><\/tr>
          \/account <account><\/td>The service account OVERLAPS runs as (defaults to LOCAL SYSTEM)<\/td><\/tr><\/tbody><\/table><\/figure>\n","protected":false},"excerpt":{"rendered":"
          The command-line configuration tool can be used to perform a number of tasks such as adding\/removing users and managing HTTPS certifications. Modules There are 4 main sections (or modules) of the olconfig tool: User Used to: Command Line Arguments olconfig.exe user \/list List all OVERLAPS users and groups. olconfig.exe user [<domain>\\]<username> \/add Add a user […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":78,"menu_order":100,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-80","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/pages\/80","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/comments?post=80"}],"version-history":[{"count":2,"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/pages\/80\/revisions"}],"predecessor-version":[{"id":467,"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/pages\/80\/revisions\/467"}],"up":[{"embeddable":true,"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/pages\/78"}],"wp:attachment":[{"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/media?parent=80"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}