RepoMirrors/DSInternals
1
0
Fork 0
mirror of https://github.com/MichaelGrafnetter/DSInternals synced 2025-02-19 12:36:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed a bug in credential roaming display and doc

Browse Source
This commit is contained in:
Michael Grafnetter 2020-03-17 17:53:42 +01:00
parent 6310a8c39a
commit f4c33e107e
4 changed files with 56 additions and 55 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Documentation/PowerShell/Get-ADDBAccount.md
View File

@ -183,12 +183,12 @@ Credential Roaming
Created: 3/12/2017 9:15:56 AM
Modified: 3/13/2017 10:01:18 AM
Credentials:
DPAPIMasterKey: 47070660-c259-4d90-8bc9-187605323450
DPAPIMasterKey: 7fc19508-7b85-4a7c-9e5d-15f9e00e7ce5
CryptoApiCertificate: 574E4687133998544C0095C7B348C52CD398182E
CNGCertificate: 3B83BFA7037F6A79B3F3D17D229E1BC097F35B51
RSAPrivateKey: 701577141985b6923998dcca035c007a_f8b7bbef-d227-4ac7-badd-3a238a7f741e
CNGPrivateKey: E8F13C2BA0209401C4DFE839CD57375E26BBE38F
DPAPIMasterKey: joe\Protect\S-1-5-21-1236425271-2880748467-2592687428-1110\47070660-c259-4d90-8bc9-187605323450
DPAPIMasterKey: joe\Protect\S-1-5-21-1236425271-2880748467-2592687428-1110\7fc19508-7b85-4a7c-9e5d-15f9e00e7ce5
CryptoApiCertificate: joe\SystemCertificates\My\Certificates\574E4687133998544C0095C7B348C52CD398182E
CNGCertificate: joe\SystemCertificates\My\Certificates\3B83BFA7037F6A79B3F3D17D229E1BC097F35B51
RSAPrivateKey: joe\Crypto\RSA\S-1-5-21-1236425271-2880748467-2592687428-1110\701577141985b6923998dcca035c007a_f8b7bbef-d227-4ac7-badd-3a238a7f741e
CNGPrivateKey: joe\Crypto\Keys\E8F13C2BA0209401C4DFE839CD57375E26BBE38F
```
Retrieves information about a single account from an Active Directory database. Secret attributes are decrypted using the provided boot key.

42
Documentation/PowerShell/Test-PasswordQuality.md
View File

@ -38,53 +38,53 @@ Active Directory Password Quality Report
----------------------------------------
Passwords of these accounts are stored using reversible encryption:
smith
doe
CONTOSO\smith
CONTOSO\doe
LM hashes of passwords of these accounts are present:
hodge
CONTOSO\hodge
These accounts have no password set:
test01
test02
CONTOSO\test01
CONTOSO\test02
Passwords of these accounts have been found in the dictionary:
Administrator
CONTOSO\Administrator
These groups of accounts have the same passwords:
Group 1:
graham
graham_admin
CONTOSO\graham
CONTOSO\graham_admin
Group 1:
admin
sql_svc01
CONTOSO\admin
CONTOSO\sql_svc01
These computer accounts have default passwords:
DESKTOP27$
CONTOSO\DESKTOP27$
Kerberos AES keys are missing from these accounts:
sql_svc01
CONTOSO\sql_svc01
Kerberos pre-authentication is not required for these accounts:
jboss
CONTOSO\jboss
Only DES encryption is allowed to be used with these accounts:
sql_svc01
CONTOSO\sql_svc01
These administrative accounts are allowed to be delegated to a service:
AdatumAdmin
Administrator
CONTOSO\AdatumAdmin
CONTOSO\Administrator
Passwords of these accounts will never expire:
admin
sql_svc01
CONTOSO\admin
CONTOSO\sql_svc01
These accounts are not required to have a password:
gonzales
CONTOSO\gonzales
These accounts that require smart card authentication have a password:
smithj
jonesp
CONTOSO\smithj
CONTOSO\jonesp
#>
```

3
Src/DSInternals.PowerShell/Views/DSInternals.RoamedCredential.format.ps1xml
View File

@ -2,6 +2,7 @@
<Configuration><!-- xsi:noNamespaceSchemaLocation="https://raw.githubusercontent.com/PowerShell/PowerShell/master/src/Schemas/Format.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">-->
<Controls>
<Control>
<!-- This control is used by the DSAccount view. -->
<Name>RoamedCredential</Name>
<CustomControl>
<CustomEntries>
@ -35,7 +36,7 @@
<PropertyName>Type</PropertyName>
</TableColumnItem>
<TableColumnItem>
<PropertyName>FileName</PropertyName>
<PropertyName>FilePath</PropertyName>
</TableColumnItem>
</TableColumnItems>
</TableRowEntry>

54
Src/DSInternals.PowerShell/en-US/DSInternals.PowerShell.dll-Help.xml
View File

@ -3397,12 +3397,12 @@ Credential Roaming
Created: 3/12/2017 9:15:56 AM
Modified: 3/13/2017 10:01:18 AM
Credentials:
DPAPIMasterKey: 47070660-c259-4d90-8bc9-187605323450
DPAPIMasterKey: 7fc19508-7b85-4a7c-9e5d-15f9e00e7ce5
CryptoApiCertificate: 574E4687133998544C0095C7B348C52CD398182E
CNGCertificate: 3B83BFA7037F6A79B3F3D17D229E1BC097F35B51
RSAPrivateKey: 701577141985b6923998dcca035c007a_f8b7bbef-d227-4ac7-badd-3a238a7f741e
CNGPrivateKey: E8F13C2BA0209401C4DFE839CD57375E26BBE38F</dev:code>
DPAPIMasterKey: joe\Protect\S-1-5-21-1236425271-2880748467-2592687428-1110\47070660-c259-4d90-8bc9-187605323450
DPAPIMasterKey: joe\Protect\S-1-5-21-1236425271-2880748467-2592687428-1110\7fc19508-7b85-4a7c-9e5d-15f9e00e7ce5
CryptoApiCertificate: joe\SystemCertificates\My\Certificates\574E4687133998544C0095C7B348C52CD398182E
CNGCertificate: joe\SystemCertificates\My\Certificates\3B83BFA7037F6A79B3F3D17D229E1BC097F35B51
RSAPrivateKey: joe\Crypto\RSA\S-1-5-21-1236425271-2880748467-2592687428-1110\701577141985b6923998dcca035c007a_f8b7bbef-d227-4ac7-badd-3a238a7f741e
CNGPrivateKey: joe\Crypto\Keys\E8F13C2BA0209401C4DFE839CD57375E26BBE38F</dev:code>
<dev:remarks>
<maml:para>Retrieves information about a single account from an Active Directory database. Secret attributes are decrypted using the provided boot key.</maml:para>
</dev:remarks>
@ -9402,53 +9402,53 @@ Active Directory Password Quality Report
----------------------------------------
Passwords of these accounts are stored using reversible encryption:
smith
doe
CONTOSO\smith
CONTOSO\doe
LM hashes of passwords of these accounts are present:
hodge
CONTOSO\hodge
These accounts have no password set:
test01
test02
CONTOSO\test01
CONTOSO\test02
Passwords of these accounts have been found in the dictionary:
Administrator
CONTOSO\Administrator
These groups of accounts have the same passwords:
Group 1:
graham
graham_admin
CONTOSO\graham
CONTOSO\graham_admin
Group 1:
admin
sql_svc01
CONTOSO\admin
CONTOSO\sql_svc01
These computer accounts have default passwords:
DESKTOP27$
CONTOSO\DESKTOP27$
Kerberos AES keys are missing from these accounts:
sql_svc01
CONTOSO\sql_svc01
Kerberos pre-authentication is not required for these accounts:
jboss
CONTOSO\jboss
Only DES encryption is allowed to be used with these accounts:
sql_svc01
CONTOSO\sql_svc01
These administrative accounts are allowed to be delegated to a service:
AdatumAdmin
Administrator
CONTOSO\AdatumAdmin
CONTOSO\Administrator
Passwords of these accounts will never expire:
admin
sql_svc01
CONTOSO\admin
CONTOSO\sql_svc01
These accounts are not required to have a password:
gonzales
CONTOSO\gonzales
These accounts that require smart card authentication have a password:
smithj
jonesp
CONTOSO\smithj
CONTOSO\jonesp
#&gt;</dev:code>
<dev:remarks>
<maml:para>Performs an offline credential hygiene audit of AD database against HIBP.</maml:para>