TestimoX

API Reference

Class

ServiceAccountEncryptionAnalyzer

Edit on GitHub
Namespace ADPlayground.Kerberos
Assembly ADPlayground
Source ADPlayground/Kerberos/ServiceAccountEncryptionAnalyzer.cs:19
Modifiers static

Analyzer for Kerberos encryption settings of service accounts (SPN-bearing user accounts).

Inheritance

  • Object
  • ServiceAccountEncryptionAnalyzer

Methods

public static IReadOnlyList<String> GetDesEnabledServiceAccounts(String domainName) #
ADPlayground/Kerberos/ServiceAccountEncryptionAnalyzer.cs:19
Returns: IReadOnlyList<String>

Returns SAM account names of service accounts that have DES encryption enabled. Excludes managed service accounts (names ending with '$').

Parameters

domainName System.String requiredposition: 0