PowerShell ile Active Directory Audit Raporlari

//PowerShell ile Active Directory Audit Raporlari

PowerShell ile Active Directory Audit Raporlari

Merhabalar, Powershell ile Active Directory Audit raporlarını kolayca alabileceğiniz bir komut bütütnünden bahsetmek istiyorum sizlere. Bu powershell komutunu çalıştırdığınızda forest ve domain bazlı raporlar alabiliyorsunuz. Örnek vermek gerekirse sisteminizde kaç kullanıcınız var, kaç grubunuz var, kimler admin hakkına sahip, kaç dc niz var, site yapınız nasıl gibi bir çok bilgiye erişme şansınız var.

Powershell dosyasını buradan indirebilirsiniz.

Powershell i açtığınızda

Set-ExecutionPolicy RemoteSigned

Set-ExecutionPolicy Unrestricted

bu komutları çalıştırdıktan sonra cscripts dizinine kopyaladığınız powershell komutunu, powershell üzerinde o dizine gelerek ./New-ADAssetReport.ps1 komutu ile çalıştırabilirsiniz. (burada ki / işareti güvenlik dolayısı ile ters olmuştur. bilgilerinize)

Domain seviyesinde ve Forest seviyesinde aşağıdaki raporları alabiliyorsunuz

Forest Level Audit Report

  • Forest Information
    • Forest Summary
      • Name/Functional Level
      • Domain/Site/DC/GC/Exchange/Lync/Pool counts
    • Forest Features
      • Tombstone Lifetime
      • Recycle Bin Enabled
      • Lync AD Container
    • Exchange Servers
      • Organization/Administrative Group/Name/Roles/Site
      • Serial/Product ID
    • Lync
      • Element (Server/Pool)
      • Type (Internal/Edge/Backend/Pool)
      • Name/FQDN
  • Site Information
    • Summary
      • Site Name/Location/Domains/DCs/Subnets
    • Details
      • Site Name/Options/ISTG/Links/Bridgeheads/Adjacencies
    • Subnets
      • Subnet/Site Name/Location
    • Site Connections
      • Enabled/Options/From/To
    • Site Links*new*
      • Name/Replication Interval/Sites
  • Domain Information
    • Domains
      • Name/NetBIOS/Functional Level/Forest Root/RIDs Issued/RIDs Remaining *new*
    • Domain Password Policies
      • Name/NetBIOS/Lockout Threshold/Pass History Length/Max Pass Age/Min Pass Age/Min Pass Length
    • Domain Controllers
      • Domain/Site/Name/OS/Time/IP/GC/FSMO Roles
    • Domain Trusts
      • Domain/Trusted Domain/Direction/Attributes/Trust Type/Created/Modified
    • Domain DFS Shares
      • Domain/Name/DN/Remote Server
    • Domain DFSR Shares *new*
      • Domain/Name/Content/Remote Servers
    • AD Integrated DNS Zones
    • Group Policy Object Information

Domain Level Audit Report

  • Account Statistics (count) 1
    • Total User Accounts
    • Enabled
    • Disabled
    • Locked
    • Password Does Not Expire
    • Password Must Change
  • Account Statistics (count) 2
    • Password Not Required
    • Dial-in Enabled
    • Control Access WithNPS
    • Unconstrained Delegation
    • Not Trusted For Delegation
    • NoPre-AuthRequired
  • Group Statistics
    • Total Groups
    • Built-in
    • Universal Security
    • Universal Distribution
    • Global Security
    • Global Distribution
    • Domain Local Security
    • Domain Local Distribution
  • Privileged Group Statistics
    • DefaultPrivGroup Name
    • Current Group Name (if itwere changed)
    • Member Count
  • Privileged Group Membership for the following groups
    • Enterprise Admins
    • Schema Admins
    • Domain Admins
    • Administrators
    • Cert Publishers
    • Account Operators
    • Server Operators
    • Backup Operators
    • Print Operators
  • Account information for thepriorsections:
    • Logon ID
    • Name
    • Password Age (Days)
    • Last Logon Date
    • Password Does Not Expire
    • PasswordReversable
    • Password Not Required

Kaynak Kod: http://gallery.technet.microsoft.com/Active-Directory-Audit-7754a877

About the Author:

Leave A Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.

This Is A Custom Widget

This Sliding Bar can be switched on or off in theme options, and can take any widget you throw at it or even fill it with your custom HTML Code. Its perfect for grabbing the attention of your viewers. Choose between 1, 2, 3 or 4 columns, set the background color, widget divider color, activate transparency, a top border or fully disable it on desktop and mobile.

This Is A Custom Widget

This Sliding Bar can be switched on or off in theme options, and can take any widget you throw at it or even fill it with your custom HTML Code. Its perfect for grabbing the attention of your viewers. Choose between 1, 2, 3 or 4 columns, set the background color, widget divider color, activate transparency, a top border or fully disable it on desktop and mobile.