kfosaaen / get-lapspasswords Goto Github PK

Is there a way to locate users with the permissions to view/decrypt the Local Admin passwords? Is this information stored in an AD Group that can be queried? This would provide a more targeted attack against those users.

I ran the Get-LAPSPasswords in the format recommended by the accompanying blog:

Get-LAPSPasswords -DomainController 192.168.1.1 -Credential DEMOkarl | Format-Table

The output was a 3mb file with 18,000+ lines in it. Looking at the output and then sorting it, it appears that each machine is shown 30 times with the same information. It's nothing a little "uniq" can't clean up...but am I doing something wrong to just get this to query once against each machine?

Hello,
Sorry to ask, please can you provide a sample Syntax for using the SearchDN Parameter.
I only want to export LAPS passwords for One particular OU and nothing else.

I've tried several different ways.
e.g.
Get-LAPSPasswords -DomainController DC01 -Credential domain\username -SearchDN DN=Pending Removal,OU=Deny Access,DC=domain,DC=com | Export-Csv c:\temp\output.csv -NoTypeInformation
Get-LAPSPasswords -DomainController DC01 -Credential domain\username -SearchDN CN=Pending Removal,OU=Deny Access,DC=domain,DC=com | Export-Csv c:\temp\output.csv -NoTypeInformation
Get-LAPSPasswords -DomainController DC01 -Credential domain\username -SearchDN OU=Pending Removal,OU=Deny Access,DC=domain,DC=com | Export-Csv c:\temp\output.csv -NoTypeInformation

I've tried "around the Parameter" and 'around the Parameter' and nothing around the parameter.

The error get is:

Get-LAPSPasswords : Cannot process argument transformation on parameter 'Limit'. Cannot convert the "System.Object[]"
value of type "System.Object[]" to type "System.Int32".
At line:1 char:104

• ... username -SearchDN DN=Pending Removal,OU=Deny Access, ...

•                                      ~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : InvalidData: (:) [Get-LAPSPasswords], ParameterBindingArgumentTransformationException
  • FullyQualifiedErrorId : ParameterArgumentTransformationError,Get-LAPSPasswords

Thanks in advance for your help!
I've just signed up to Github and plan to add PowerShell scripts relating to AD and SCCM 2012 / Current branch.