EvotecIT / Testimo

Testimo is a PowerShell module for running health checks for Active Directory against a bunch of different tests
MIT License
526 stars 58 forks source link

Add param for specifying credentials. #87

Open big-sweet opened 4 years ago

big-sweet commented 4 years ago

Working in secured environments it would be handy to run Invoke-Testimo with a different set of credentials that have more rights to the Active Directory environment. Currently working around this with some run as wizardry.

In smaller and less secure environments DA rights when running a health check may be implied, same with RDP access to the domain controllers. However this is not the case for all environments.

PrzemyslawKlys commented 4 years ago

It's planned but it's not that easy. Adding it to Testimo is easy. But all the tests would need to be modified. If you feel like you can help... you can start with ADEssentials. Each command needs to have Credentials added.

I am currently working on proper inclusion / exclusion for domains and domain controllers so that it's easier to target only some DC's. So far it was crippled because if the tests were testing Domain and it was reaching each and every DC it would not skip them even thou they were excluded. New version hopefully will be smarter.

big-sweet commented 4 years ago

I'll see how far I can progress with adding in credentials for the ADEssentials cmdlets.

Appreciate the explanation. Many thanks for the great project!

PrzemyslawKlys commented 4 years ago

No need to close. It's still valid for this project. Let's keep it open.