TestimoX

API Reference

Class

RodcKrbtgtAnalyzer

Namespace ADPlayground.Kerberos
Assembly ADPlayground
Modifiers static

Provides methods to locate RODC computer accounts without an associated krbtgt entry.

Inheritance

  • Object
  • RodcKrbtgtAnalyzer

Methods

public static IEnumerable<String> FilterOrphanedRodcs(IEnumerable<ValueTuple<String, Boolean>> rodcs) #
Returns: IEnumerable<String>

Filters provided RODC data to those missing a krbtgt link.

Parameters

rodcs System.Collections.Generic.IEnumerable{System.ValueTuple{System.String,System.Boolean}} requiredposition: 0
Tuple of account name and whether a krbtgt link exists.

Returns

Collection of SAM account names.

GetOrphanedRodcs 2 overloads
public static IEnumerable<String> GetOrphanedRodcs() #
Returns: IEnumerable<String>

Enumerates RODCs in every domain of the current forest and returns those that lack the msDS-KrbTgtLink attribute.

Returns

Collection of SAM account names.

public static IEnumerable<String> GetOrphanedRodcs(String domainName) #
Returns: IEnumerable<String>

Enumerates RODCs in the specified domain that have no associated krbtgt account.

Parameters

domainName System.String requiredposition: 0
Target domain name.

Returns

Collection of SAM account names.