ACTIVE DIRECTORY AUDITOR
Report created on Aug 25, 2022 10:09 AM
Report: 08-25-2022
Active Directory Domain Information
Active Directory Domain
NameForestPdcRoleOwnerRidRoleOwnerInfrastructureRoleOwnerDomainControllersChildDomainsDomainMode
LABSTRUX.comLABSTRUX.comEC2AMAZ-FFJJRM4.LABSTRUX.comEC2AMAZ-FFJJRM4.LABSTRUX.comEC2AMAZ-FFJJRM4.LABSTRUX.comWIN-9IV40ILKA0F.LABSTRUX.com, EC2AMAZ-FFJJRM4.LABSTRUX.comWindows2012R2Domain
Active Directory Default Password Policy
ComplexityEnableMinPasswordAgeMinPasswordLengthPasswordHistoryCountReversibleEncryptionEnabledLockoutThresholdLockoutObservationWindowLockoutDuration
True11424False31515

Report: 08-25-2022
Active Directory Enabled User Information
Active Directory Enabled Users
DisplayNameAccountNameEnabledLockedPasswordNotReqPasswordNeverExpPasswordLastSetPasswordAgeInDaysSmartcardRequiredWhenCreatedLastLogonDateInactivityInDays
powerstrux-userpowerstrux-userTrueFalseFalseFalse12/31/1600 7:00:00 PM154003False02/01/2016 02:27:052397
powerstrux-user1powerstrux-user1TrueFalseFalseTrue2/2/2022 6:58:36 PM203False07/18/2016 23:31:597/22/2022 12:17:01 PM33
powerstrux-user2powerstrux-user2TrueFalseFalseTrue4/27/2020 9:50:09 AM850False06/17/2019 14:25:018/25/2022 8:21:23 AM0
Active Directory Enabled User Compliance Information
Active Directory Inactive Users (More than 35 Days)
DisplayNameAccountNameWhenCreatedLastLogonDateInactivityInDays
powerstrux-userpowerstrux-user02/01/2016 02:27:052397
Active Directory Smartcard Not Required
DisplayNameAccountNameSmartcardRequired
powerstrux-userpowerstrux-userFalse
powerstrux-user1powerstrux-user1False
powerstrux-user2powerstrux-user2False
Active Directory Password Not Required
DisplayNameAccountNamePasswordNotReq
NoneNoneNone
Active Directory Password Never Expires
DisplayNameAccountNamePasswordNeverExp
powerstrux-user1powerstrux-user1True
powerstrux-user2powerstrux-user2True

Report: 08-25-2022
Active Directory Group Membership
Active Directory Domain Admins
DisplayNameAccountNameDistinguishedName
powerstrux-userpowerstrux-userCN=powerstrux-user,CN=Users,DC=LABSTRUX,DC=com
powerstrux-user1powerstrux-user1CN=powerstrux-user1,CN=Users,DC=LABSTRUX,DC=com
powerstrux-user2powerstrux-user2CN=powerstrux-user2,CN=Users,DC=LABSTRUX,DC=com
Active Directory Enterprise Admins
DisplayNameAccountNameDistinguishedName
powerstrux-userpowerstrux-userCN=powerstrux-user,CN=Users,DC=LABSTRUX,DC=com
powerstrux-user1powerstrux-user1CN=powerstrux-user1,CN=Users,DC=LABSTRUX,DC=com
powerstrux-user2powerstrux-user2CN=powerstrux-user2,CN=Users,DC=LABSTRUX,DC=com
Active Directory Administrators
DisplayNameAccountNameDistinguishedName
powerstrux-userpowerstrux-userCN=powerstrux-user,CN=Users,DC=LABSTRUX,DC=com
powerstrux-user1powerstrux-user1CN=powerstrux-user1,CN=Users,DC=LABSTRUX,DC=com
powerstrux-user2powerstrux-user2CN=powerstrux-user2,CN=Users,DC=LABSTRUX,DC=com
Active Directory Backup Operators
DisplayNameAccountNameDistinguishedName
NoneNoneNone

Report: 08-25-2022
Active Directory Enabled Computer Information
Active Directory Enabled Computers
DisplayNameEnabledOperatingSystemWhenCreatedLastLogonDateInactivityInDays
WIN-9IV40ILKA0FTrueWindows Server 2012 R2 Standard01/30/2016 22:50:118/9/2022 7:57:56 AM16
EC2AMAZ-FFJJRM4TrueWindows Server 2016 Datacenter03/13/2020 13:16:138/25/2022 7:26:38 AM0
WIN-FF20ES0GCI8TrueWindows Server 2008 R2 Datacenter10/07/2019 23:59:171/25/2021 12:10:45 AM577
EC2AMAZ-MQ4AA9KTrueWindows Server 2016 Datacenter07/31/2019 03:37:585/26/2020 10:27:38 PM820
EC2AMAZ-PPR5MOMTrueWindows Server 2019 Datacenter07/31/2019 01:34:268/11/2022 10:41:37 AM13
EC2AMAZ-036786ETrueWindows Server 2016 Datacenter03/18/2020 21:44:368/2/2022 12:00:11 PM22
Active Directory Inactive Computers (More than 35 Days)
DisplayNameOperatingSystemWhenCreatedLastLogonDateInactivityInDays
EC2AMAZ-MQ4AA9KWindows Server 2016 Datacenter07/31/2019 03:37:585/26/2020 10:27:38 PM820
WIN-FF20ES0GCI8Windows Server 2008 R2 Datacenter10/07/2019 23:59:171/25/2021 12:10:45 AM577
Active Directory Unsupported Operating Systems
DisplayNameOperatingSystemWhenCreated
WIN-FF20ES0GCI8Windows Server 2008 R2 Datacenter10/07/2019 23:59:17

Report: 08-25-2022
Active Directory Red Team Information
Active Directory Kerberoastable Users
DisplayNameAccountNameSPNEnabledIsAdmin
krbtgtkrbtgtkadmin/changepwFalseTrue
Active Directory AS-REP Roastable Users
DisplayNameAccountNameDontRequirePreauth
NoneNoneNone
Active Directory Users Trusted for Delegation
DisplayNameAccountNameTrustedForDelegation
NoneNoneNone
Active Directory Computers Trusted for Delegation
DisplayNameTrustedForDelegation
NoneNone

Report: 08-25-2022
PowerStruxAD Configuration
KeyValue
ReportLocation $ENV:USERPROFILE\Desktop
ReportName $(Get-Date -Format yyyyMMdd)_ACTIVEDIRECTORY_REPORT
LastLogonInDaysUser 35
LastLogonInDaysComputer 35
RegexUnsupportedOs Server (2003|2008)|Windows (XP|7)