Weak password encryption in Group Policy Preference

Hello,

Since Windows Server 2008, we are able to set local administrator password thanks to Group Policy Preference but, this “encryption” key is available on MSDN, so, anyone can read the clear text password with a few lines of PowerShell. Continue reading

Finding Partial Attributes Set of Active Directory Global Catalog

Hello,

By design, Active Directory Global Catalog Domain Controllers replicates more attributes to each other (between the same forest) than to others Domain controllers (No GC, local domain). Those attributes replicated between global catalog of the forest are called “Partial Attributes Set” (PAS), and you canĀ  see those with the schema mmc : Continue reading