Loading...

XML

Word

Printable

JSON

Type: Task
Resolution: Unresolved
Priority: Major - P3
Fix Version/s: None
Affects Version/s: None
Component/s: None
Labels:
None

Assigned Teams:

Server Security
CAR Domain/s:
None

Aha! Reference:
None
Tracking Level:
None
Risk Status:
None
Exec Notes:
None
Goal Name(s):
None
Goal Link:
None

Check the SPN exists use AD C++ Query API, Do not use ATL
- Get-ADObject -Filter "*" -SearchBase "CN=Administrator,CN=Users,DC=server,DC=ldaptest,DC=10gen,DC=cc" -Properties *
- Get-ADComputer -Identity <COMPUTER_NAME> -Properties ServicePrincipalNames | Select-Object -ExpandProperty ServicePrincipalNames
- https://docs.microsoft.com/en-us/windows/win32/ad/example-code-for-searching-for-users
Check their are no duplicate SPNs
- Query AD for duplicate SPNs
- The setspn tool normally checks for this

Assignee:: [DO NOT USE] Backlog - Security Team
Reporter:: Mark Benvenuto
Participants:: [DO NOT USE] Backlog - Security Team, Mark Benvenuto
Votes:: 0 Vote for this issue
Watchers:: 1 Start watching this issue

Created:: Sep 04 2019 08:05:19 PM UTC
Updated:: Dec 06 2022 02:49:02 AM UTC