search

PowerShellMafia / PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework
Other
11.68k stars 4.59k forks source link

Constrained Delegation #357

Open joeminicucci opened 4 years ago

joeminicucci commented 4 years ago

It seems that the -TrustedToAuth flag no longer applies to Get-NetUser or Get-NetComputer.

Does there still exist a streamlined way to discover constrained delegation computers/users in powerview? It looks like the best way now is to manually check the msds-allowedtodelegate and TRUSTED_TO_AUTH_FOR_DELEGATION manually for the Get-NetUser / Get-NetComputer outputs.

Thanks!