API Reference
Class
DelegationProtectionChecker
Searches for privileged accounts missing the NOT_DELEGATED userAccountControl flag.
Inheritance
- Object
- DelegationProtectionChecker
Constructors
public DelegationProtectionChecker(Func<String, IEnumerable<ValueTuple<String, Int32>>> fetchAccounts = null, Func<IEnumerable<String>> enumerateDomains = null) #Initializes a new instance of the DelegationProtectionChecker class.
Parameters
- fetchAccounts System.Func{System.String,System.Collections.Generic.IEnumerable{System.ValueTuple{System.String,System.Int32}}} = null
- Delegate retrieving adminCount accounts and their userAccountControl value.
- enumerateDomains System.Func{System.Collections.Generic.IEnumerable{System.String}} = null
- Delegate returning domain names to query.
Methods
public Void CheckDomain(String domainName = null) #Returns:
VoidReports accounts in a domain that do not have the NOT_DELEGATED flag set.
Parameters
- domainName System.String = null
- Target domain name or null for the current domain.
public IEnumerable<ValueTuple<String, Int32>> GetAccounts(String domainName) #Returns:
IEnumerable<ValueTuple<String, Int32>>Gets adminCount accounts and their userAccountControl flag for a domain.
Parameters
- domainName System.String
- Target domain name.
Returns
Collection of account name and UAC value tuples.