Результаты полнотекстового поиска:
- Powershell скрипт для получения списка всех учётных записей с Kerberos Unconstrained Delegation в домене Active Directory
- Param ( # start the search at this DN. Default is to search all of the domain. [string]$DN = "OU=SUB,D... 0x2000 $TRUSTED_FOR_DELEGATION = 0x80000 $TRUSTED_TO_AUTH_FOR_DELEGATION= 0x1000000 $PARTIAL_SECRETS_A... $bitmask = $TRUSTED_FOR_DELEGATION -bor $TRUSTED_TO_AUTH_FOR_DELEGATION -bor $PARTIAL_SECRETS_ACCOUNT # LDAP filter to find all accounts having some form of delegation.