TestimoX

API Reference

Class

AdminDelegationProtectionService

Edit on GitHub
Namespace ADPlayground.Delegation
Assembly ADPlayground
Source ADPlayground/DNSDebugLogging/DnsLogIpSummary.cs:15
Modifiers static

Builds snapshots highlighting privileged accounts that are not marked as "sensitive and cannot be delegated".

Inheritance

  • Object
  • AdminDelegationProtectionService

Methods

public static async Task<AdminDelegationSnapshot> GetSnapshotAsync(ActiveDirectoryDataServices dataServices, String domainName, AdminDelegationOptions options = null, CancellationToken cancellationToken = null) #
Returns: Task<AdminDelegationSnapshot>

Builds a snapshot of privileged accounts lacking delegation protection flags (sensitive, T2A4D, etc.).

Parameters

dataServices ADPlayground.ActiveDirectoryDataServices requiredposition: 0
Optional data services instance; when null the default instance is used.
domainName System.String requiredposition: 1
DNS domain name to analyze.
options ADPlayground.Delegation.AdminDelegationOptions = null optionalposition: 2
Optional tuning options controlling thresholds and inclusion of disabled accounts.
cancellationToken System.Threading.CancellationToken = null optionalposition: 3
Cancellation token.

Returns

Materialized snapshot with unprotected accounts.