API Reference
UserSecurityView
Security-centric user view including delegation and crypto posture.
Inheritance
- Object
- UserSecurityView
Constructors
public UserSecurityView() #Inherited Methods
Properties
public String SamAccountName { get; set; } #Legacy logon name (DOMAIN\user).
public String DomainName { get; set; } #DNS domain containing the user object.
public Boolean Enabled { get; set; } #Indicates whether the account is enabled.
public Boolean IsAdmin { get; set; } #Indicates membership in privileged administrative roles (e.g., Domain Admins, Enterprise Admins).
public Boolean AdminCount { get; set; } #Reflects the adminCount attribute (true for adminSDHolder-protected objects).
public Boolean IsProtectedUsersMember { get; set; } #True when the account belongs to the Protected Users group.
public Boolean Sensitive { get; set; } #True when the account is marked as 'sensitive and cannot be delegated'.
public Boolean PreAuthDisabled { get; set; } #True when Kerberos pre-authentication is disabled.
public Boolean PasswordNeverExpires { get; set; } #True when the password policy exempts the account from expiration.
public Boolean PasswordNotRequired { get; set; } #True if the account can authenticate without a password.
public Boolean ReversiblePwdEncryption { get; set; } #True when the directory stores the password in reversible form.
public Boolean SmartcardRequired { get; set; } #True when the account requires smart card logon.
public Boolean HasSidHistory { get; set; } #True if SID history entries exist for the account.
public Boolean DelegationUnconstrained { get; set; } #True when the user trusts all services for delegation.
public Boolean DelegationConstrained { get; set; } #True when constrained delegation targets are configured.
public Boolean Rc4Only { get; set; } #True when only RC4 encryption types are allowed for Kerberos.
public Boolean AesDisabled { get; set; } #True when AES encryption types are disabled for Kerberos.
public Nullable<Int32> LastLogonDays { get; set; } #Number of days since the user authenticated (authoritative when collected).
public Nullable<Int32> PasswordAgeDays { get; set; } #Number of days since the user last changed the password.