API Reference
DomainControllerSecuritySnapshot
Snapshot of security-relevant DC settings.
Inheritance
- Object
- DomainControllerSecuritySnapshot
Constructors
public DomainControllerSecuritySnapshot() #Inherited Methods
Properties
public String DomainName { get; set; } #DNS domain name.
public IReadOnlyList<DomainControllerStatus> Controllers { get; set; } #Collected per-controller status rows.
public IReadOnlyList<DomainControllerStatus> MissingLdapSigning { get; set; } #Controllers where LDAP signing is not required.
public IReadOnlyList<DomainControllerStatus> InsecureLdapBinds { get; set; } #Controllers allowing insecure LDAP binds.
public IReadOnlyList<DomainControllerStatus> SmbSigningNotRequired { get; set; } #Controllers that do not require SMB signing.
public IReadOnlyList<DomainControllerStatus> PolicySmbSigningNotRequired { get; set; } #Controllers where group policy does not enforce SMB signing.
public IReadOnlyList<DomainControllerStatus> MissingAuditPolicy { get; set; } #Controllers missing advanced audit subcategories.
public IReadOnlyList<DomainControllerStatus> MissingAdvancedAuditPolicy { get; set; } #Controllers missing recommended advanced audit subcategories.
public IReadOnlyList<DomainControllerStatus> MissingLdapChannelBinding { get; set; } #Controllers where LDAP channel binding mode is not required.
public IReadOnlyList<DomainControllerStatus> PrintSpoolerRunning { get; set; } #Controllers where the Print Spooler service is running.
public IReadOnlyList<DcAuditPolicyStatus> AuditPolicySimpleFindings { get; set; } #Advanced audit policy failures (simple categories) per controller.
public IReadOnlyList<DcAuditPolicyStatus> AuditPolicyAdvancedFindings { get; set; } #Advanced audit policy failures (advanced categories) per controller.
public IReadOnlyList<DcAuditPolicyAdvancedStatus> AuditPolicyAdvancedStatuses { get; set; } #Per-subcategory status for advanced audit requirements.
public IReadOnlyList<PolicyAttribution> AuditPolicyAttribution { get; set; } #GPOs that contribute audit.csv to DCs (policy attribution).
public IReadOnlyList<DcAuditSecurityOptionStatus> SecurityOptionStatuses { get; set; } #Audit-related security option statuses (e.g., 4688 command line).
public Int32 SecurityOptionGapCount { get; set; } #Count of security option entries that do not meet the baseline.