Created
December 13, 2020 19:25
-
-
Save mrzcn/7b031b105cfc9c0a0206a10e5445e526 to your computer and use it in GitHub Desktop.
Active Directory Kerberos kapalı kullanıcıları listeleyen Query
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
There are two simple ways you can find these accounts in Active Directory. The first method involves creating a custom LDAP query in Active Directory Users & Computers (see Reference below) and using the LDAP query string below: | |
(&(objectCategory=person)(userAccountControl:1.2.840.113556.1.4.803:=4194304)) | |
The second method is to use PowerShell to query Active Directory. Two examples are shown below: | |
get-aduser -LDAP "(&(objectCategory=person)(userAccountControl:1.2.840.113556.1.4.803:=4194304))" -properties DoesNotRequirePreAuth | |
get-aduser -filter * -properties DoesNotRequirePreAuth |where {$_.DoesNotRequirePreAuth -eq "TRUE"} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment