2015-12-27 17:18:31 +00:00
|
|
|
---------------------------------
|
|
|
|
|
| DSInternals PowerShell Module |
|
|
|
|
|
---------------------------------
|
|
|
|
|
|
|
|
|
|
The DSInternals PowerShell Module exposes several internal and undocumented features of Active Directory.
|
|
|
|
|
|
|
|
|
|
List of Cmdlets
|
|
|
|
|
---------------
|
|
|
|
|
|
|
|
|
|
Offline AD Database Access:
|
|
|
|
|
|
|
|
|
|
Get-ADDBAccount
|
|
|
|
|
Get-ADDBDomainController
|
|
|
|
|
Get-BootKey
|
|
|
|
|
Get-ADDBBackupKey
|
|
|
|
|
Get-ADDBSchemaAttribute
|
|
|
|
|
Add-ADDBSidHistory
|
|
|
|
|
Set-ADDBPrimaryGroup
|
|
|
|
|
Set-ADDBDomainController
|
|
|
|
|
Set-ADDBBootKey
|
|
|
|
|
Remove-ADDBObject
|
|
|
|
|
|
|
|
|
|
Online AD Database Access:
|
|
|
|
|
|
|
|
|
|
Get-ADReplAccount
|
|
|
|
|
Get-ADReplBackupKey
|
|
|
|
|
Set-SamAccountPasswordHash
|
|
|
|
|
|
|
|
|
|
Password Hash Calculation:
|
|
|
|
|
|
|
|
|
|
ConvertTo-NTHash
|
|
|
|
|
ConvertTo-LMHash
|
|
|
|
|
ConvertTo-OrgIdHash
|
|
|
|
|
|
|
|
|
|
Password Decryption:
|
|
|
|
|
|
|
|
|
|
ConvertFrom-ADManagedPasswordBlob
|
|
|
|
|
ConvertFrom-UnicodePassword
|
|
|
|
|
ConvertTo-UnicodePassword
|
|
|
|
|
ConvertFrom-GPPrefPassword
|
|
|
|
|
ConvertTo-GPPrefPassword
|
|
|
|
|
|
|
|
|
|
Misc:
|
|
|
|
|
|
|
|
|
|
ConvertTo-Hex
|
|
|
|
|
Save-DPAPIBlob
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
System Requirements
|
|
|
|
|
-------------------
|
|
|
|
|
|
2016-04-30 09:57:48 +00:00
|
|
|
- Windows PowerShell 3+ (both 64-bit and 32-bit hosts are supported)
|
2016-02-07 09:13:11 +00:00
|
|
|
- .NET Framework 4.5.1+
|
2015-12-27 17:18:31 +00:00
|
|
|
|
|
|
|
|
The cmdlets have been tested on these operating systems:
|
|
|
|
|
|
2016-04-30 09:57:48 +00:00
|
|
|
Windows Server 2016
|
2015-12-27 17:18:31 +00:00
|
|
|
Windows Server 2012 R2
|
|
|
|
|
Windows Server 2008 R2
|
2016-04-30 09:57:48 +00:00
|
|
|
Windows 10
|
|
|
|
|
Windows 8.1
|
|
|
|
|
Windows 7
|
2015-12-27 17:18:31 +00:00
|
|
|
|
2016-02-07 09:13:11 +00:00
|
|
|
The cmdlets working with the AD database do not support Windows 2000 domain functional level.
|
2015-12-27 17:18:31 +00:00
|
|
|
|
|
|
|
|
Installation
|
|
|
|
|
------------
|
|
|
|
|
|
|
|
|
|
Option 1:
|
|
|
|
|
|
|
|
|
|
In PowerShell 5, you can install the DSInternals module from PowerShell Gallery by running this command:
|
|
|
|
|
|
|
|
|
|
Install-Module DSInternals
|
|
|
|
|
|
|
|
|
|
Option 2a:
|
|
|
|
|
|
|
|
|
|
Extract the ZIP file and copy the DSInternals directory to your PowerShell modules directory, e.g.
|
|
|
|
|
C:\Windows\system32\WindowsPowerShell\v1.0\Modules\DSInternals or
|
|
|
|
|
C:\Users\John\Documents\WindowsPowerShell\Modules\DSInternals
|
|
|
|
|
|
|
|
|
|
Option 2b:
|
|
|
|
|
|
|
|
|
|
Extract the ZIP file to any location import the DSInternals module using the Import-Module cmdlet, e.g.
|
|
|
|
|
|
|
|
|
|
cd C:\Users\John\Downloads\DSInternals
|
|
|
|
|
Import-Module .\DSInternals
|
|
|
|
|
|
|
|
|
|
Note:
|
|
|
|
|
|
|
|
|
|
Before extracting any files from the archive, do not forget to "unblock" the ZIP file in the Properties dialog.
|
|
|
|
|
If you fail to do so, all the extracted DLLs will inherit this attribute and PowerShell will refuse to load them.
|
|
|
|
|
|
|
|
|
|
Author
|
|
|
|
|
------
|
|
|
|
|
|
|
|
|
|
Michael Grafnetter
|
|
|
|
|
|
|
|
|
|
Homepage
|
|
|
|
|
--------
|
|
|
|
|
|
|
|
|
|
https://www.dsinternals.com
|
