.. / Get-ADUser

Gets one or more Active Directory users


Functions:
Type:
Toolsets:

Domain

List users based on filter

Get-ADUser -Filter {DoesNotRequirePreauth -eq $true}
Usecase
Enumerate aseproastable users

Comments
PowerShell Module: ActiveDirectory

List users based on filter

Get-ADUser -Filter {ServicePrincipalName -ne "$null"} -Properties ServicePrincipalName
Usecase
Enumerate kerberoastable users

Comments
PowerShell Module: ActiveDirectory

List users based on filter

Get-ADUser -Filter {TrustedForDelegation -eq $true}
Usecase
Enumerate accounts that are trusted for unconstrained delegation

Comments
PowerShell Module: ActiveDirectory

List users based on LDAP filter

Get-ADUser -LDAPFilter "(adminCount=1)" -Server ad.bitsadmin.com
Usecase
Enumerate users which [have been/are] members of at least one Administrative group

Comments
PowerShell Module: ActiveDirectory




Updated: 2023-07-01
Contributor: Arris Huijgen (bitsadmin)