TestimoX

API Reference

Class

View (KerberosCryptoPolicyService)

Namespace ADPlayground.Gpo.KerberosCryptoPolicyService
Assembly ADPlayground
Modifiers sealed

Policy snapshot for Kerberos encryption type configuration in the Domain Controllers OU.

Inheritance

  • Object
  • View

Constructors

Properties

public Boolean CollectionSucceeded { get; set; } #

True when Kerberos crypto policy collection completed successfully.

public String CollectionError { get; set; } #

Error details when collection fails; null when successful.

public String DomainName { get; set; } #
ResultMetadata

DNS domain name of the Active Directory forest/domain.

public String TargetDn { get; set; } #
ResultMetadata

Distinguished name of the DCs OU this policy applies to.

public Nullable<UInt32> SupportedEncryptionTypes { get; set; } #

Numeric value of SupportedEncryptionTypes from policy (if configured).

public Boolean DesAllowed { get; set; } #

True when any DES algorithm is enabled by policy.

public Boolean Rc4Allowed { get; set; } #

True when RC4-HMAC is enabled by policy.

public Boolean AesPreferred { get; set; } #

True when AES128/256 is present, indicating AES is preferred.

public IReadOnlyList<PolicyAttribution> Attribution { get; set; } #
ResultMetadata

Effective GPO winner and contributing sources for the evaluated value.

public String AttributionTopWriters { get; } #
ResultMetadata

Distinct list (up to three) of GPOs that wrote the effective value.