Загрузка данных
PS C:\Windows\system32> Import-Module ActiveDirectory
Write-Host "`n=== DOMAIN CONTROLLERS ===" -ForegroundColor Cyan
Get-ADDomainController -Filter * |
Select-Object HostName,IPv4Address,Site |
Format-Table -AutoSize
Write-Host "`n=== SEARCH USER IN AD ===" -ForegroundColor Cyan
Get-ADUser -LDAPFilter '(|(sAMAccountName=*Alchevskaya*)(userPrincipalName=*Alchevskaya*)(mail=alchevskayaalena@yandex.ru)(sn=*Алчевская*))' `
-Properties DisplayName,Mail,WhenCreated,Enabled |
Select-Object Name,SamAccountName,UserPrincipalName,Mail,Enabled,WhenCreated,DistinguishedName |
Format-List
Write-Host "`n=== USERNAME LENGTH ===" -ForegroundColor Cyan
$u = "Cheridnichenko-AlchevskayaA"
Write-Host "Username: $u"
Write-Host "Length: $($u.Length)"
Write-Host "Recommended AD sAMAccountName limit: 20"
Write-Host "`n=== AUDIT POLICY ===" -ForegroundColor Cyan
auditpol /get /category:*
=== DOMAIN CONTROLLERS ===
HostName IPv4Address Site
-------- ----------- ----
ru-dc-p01.sys.clz.ru 10.191.11.4 CLOUD
ru-dc-p02.sys.clz.ru 10.191.11.5 CLOUD
=== SEARCH USER IN AD ===
=== USERNAME LENGTH ===
Username: Cheridnichenko-AlchevskayaA
Length: 27
Recommended AD sAMAccountName limit: 20
=== AUDIT POLICY ===
System audit policy
Category/Subcategory Setting
System
Security System Extension No Auditing
System Integrity No Auditing
IPsec Driver No Auditing
Other System Events No Auditing
Security State Change No Auditing
Logon/Logoff
Logon Success and Failure
Logoff Success and Failure
Account Lockout Success and Failure
IPsec Main Mode No Auditing
IPsec Quick Mode No Auditing
IPsec Extended Mode No Auditing
Special Logon Success and Failure
Other Logon/Logoff Events Success and Failure
Network Policy Server Success and Failure
User / Device Claims No Auditing
Group Membership No Auditing
Access Rights No Auditing
Object Access
File System No Auditing
Registry No Auditing
Kernel Object No Auditing
SAM No Auditing
Certification Services No Auditing
Application Generated No Auditing
Handle Manipulation No Auditing
File Share No Auditing
Filtering Platform Packet Drop No Auditing
Filtering Platform Connection No Auditing
Other Object Access Events No Auditing
Detailed File Share No Auditing
Removable Storage No Auditing
Central Policy Staging No Auditing
Privilege Use
Non Sensitive Privilege Use No Auditing
Other Privilege Use Events No Auditing
Sensitive Privilege Use No Auditing
Detailed Tracking
Process Creation No Auditing
Process Termination No Auditing
DPAPI Activity No Auditing
RPC Events No Auditing
Plug and Play Events No Auditing
Token Right Adjusted Events No Auditing
Policy Change
Audit Policy Change Success and Failure
Authentication Policy Change No Auditing
Authorization Policy Change No Auditing
MPSSVC Rule-Level Policy Change No Auditing
Filtering Platform Policy Change No Auditing
Other Policy Change Events No Auditing
Account Management
Computer Account Management No Auditing
Security Group Management Success and Failure
Distribution Group Management No Auditing
Application Group Management Success and Failure
Other Account Management Events No Auditing
User Account Management Success and Failure
DS Access
Directory Service Access No Auditing
Directory Service Changes No Auditing
Directory Service Replication Success and Failure
Detailed Directory Service Replication Success and Failure
Account Logon
Kerberos Service Ticket Operations Success and Failure
Other Account Logon Events Success and Failure
Kerberos Authentication Service Success and Failure
Credential Validation Success and Failure
PS C:\Windows\system32>