SchweigersTechBlog

Kerberoasting – msDS-SupportedEncryptionType

Kerberoasting – msDS-SupportedEncryptionType

by · 

Get-ADUser -Properties msDS-SupportedEncryptionTypes -Filter * | Where-Object {
    $_.Enabled -and
    $_."msDS-SupportedEncryptionTypes" -ne $null -and
    $_."msDS-SupportedEncryptionTypes" -ne 0 -and
    ($_."msDS-SupportedEncryptionTypes" -band 0x18) -eq 0
}

Get-ADComputer -Properties msDS-SupportedEncryptionTypes -Filter * | Where-Object {
    $_.Enabled -and
    $_."msDS-SupportedEncryptionTypes" -ne $null -and
    $_."msDS-SupportedEncryptionTypes" -ne 0 -and
    ($_."msDS-SupportedEncryptionTypes" -band 0x18) -eq 0
}

You may also like...