Daily IT Matters, this is the place where I post my daily findings on IT.

Wednesday, July 30, 2014

Find user accounts who do not require Kerberos PreAuthentication

This is just a simple one.

I had to find users who did not had the preauthentication option checked.
Read more here: http://technet.microsoft.com/en-us/library/bb742516.aspx

Please note that I use samAccountType instead of the less efficient
(&(objectClass=user)(objectCategory=person))

Get-ADUser -LDAPFilter "(&(samAccountType=805306368)(useraccountcontrol:1.2.840.113556.1.4.803:=4194304))"

No comments:

Google