kfosaaen / get-lapspasswords Goto Github PK
View Code? Open in Web Editor NEWPowershell function to pull the local admin passwords from LDAP, stored there by LAPS.
Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.
Is there a way to locate users with the permissions to view/decrypt the Local Admin passwords? Is this information stored in an AD Group that can be queried? This would provide a more targeted attack against those users.
I ran the Get-LAPSPasswords in the format recommended by the accompanying blog:
Get-LAPSPasswords -DomainController 192.168.1.1 -Credential DEMOkarl | Format-Table
The output was a 3mb file with 18,000+ lines in it. Looking at the output and then sorting it, it appears that each machine is shown 30 times with the same information. It's nothing a little "uniq" can't clean up...but am I doing something wrong to just get this to query once against each machine?
Hello,
Sorry to ask, please can you provide a sample Syntax for using the SearchDN Parameter.
I only want to export LAPS passwords for One particular OU and nothing else.
I've tried several different ways.
e.g.
Get-LAPSPasswords -DomainController DC01 -Credential domain\username -SearchDN DN=Pending Removal,OU=Deny Access,DC=domain,DC=com | Export-Csv c:\temp\output.csv -NoTypeInformation
Get-LAPSPasswords -DomainController DC01 -Credential domain\username -SearchDN CN=Pending Removal,OU=Deny Access,DC=domain,DC=com | Export-Csv c:\temp\output.csv -NoTypeInformation
Get-LAPSPasswords -DomainController DC01 -Credential domain\username -SearchDN OU=Pending Removal,OU=Deny Access,DC=domain,DC=com | Export-Csv c:\temp\output.csv -NoTypeInformation
I've tried "around the Parameter" and 'around the Parameter' and nothing around the parameter.
The error get is:
Get-LAPSPasswords : Cannot process argument transformation on parameter 'Limit'. Cannot convert the "System.Object[]"
value of type "System.Object[]" to type "System.Int32".
At line:1 char:104
~~~~~~~~~~~~~~~~~~~~~~~~
Thanks in advance for your help!
I've just signed up to Github and plan to add PowerShell scripts relating to AD and SCCM 2012 / Current branch.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.