API Reference
Class
ConstrainedDelegationAnalyzer
Provides methods to analyze constrained delegation configurations.
Inheritance
- Object
- ConstrainedDelegationAnalyzer
Remarks
See usage examples in the unit tests for typical scenarios.
Constructors
public ConstrainedDelegationAnalyzer(Func<String, IEnumerable<DelegationEntry>> fetchDelegations = null, Func<String, String, Boolean> validateTarget = null, Func<IEnumerable<String>> enumerateDomains = null) #Initializes a new instance of the ConstrainedDelegationAnalyzer class.
Parameters
- fetchDelegations System.Func{System.String,System.Collections.Generic.IEnumerable{ADPlayground.DelegationEntry}} = null
- Delegate retrieving delegation data for a domain.
- validateTarget System.Func{System.String,System.String,System.Boolean} = null
- Delegate validating that a target SPN exists.
- enumerateDomains System.Func{System.Collections.Generic.IEnumerable{System.String}} = null
- Delegate returning domain names to process.
Methods
public Void CheckDomain(String domainName = null) #Returns:
VoidLogs warnings for invalid delegation targets in the given domain.
Parameters
- domainName System.String = null
- Domain to check or null for the current domain.
public IEnumerable<DelegationValidationResult> ValidateDomain(String domainName) #Returns:
IEnumerable<DelegationValidationResult>Validates the delegation targets configured in the specified domain.
Parameters
- domainName System.String
- Target domain name.
Returns
Collection of validation results.
public IEnumerable<DelegationValidationResult> ValidateForest() #Returns:
IEnumerable<DelegationValidationResult>Validates delegation targets across all domains in the forest.
Returns
Collection of validation results.