Posts

Showing posts from July, 2014

Find user accounts who do not require Kerberos PreAuthentication

This is just a simple one. I had to find users who did not had the preauthentication option checked. Read more here: http://technet.microsoft.com/en-us/library/bb742516.aspx Please note that I use samAccountType instead of the less efficient (&(objectClass=user)(objectCategory=person)) Get-ADUser -LDAPFilter "(&(samAccountType=805306368)(useraccountcontrol:1.2.840.113556.1.4.803:=4194304))"