TrimarcJake / Locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.
https://github.com/TrimarcJake/Locksmith
Other
901 stars 89 forks source link

Fix ESC8 False Negatives #155

Closed TrimarcJake closed 3 months ago

TrimarcJake commented 3 months ago

This resolves #153 by replacing attribute-based ESC8 checks with web request-based checks to validate the endpoint is online.

Also improved the Fix attribute from [TODO] to something actually meaningful.

Tested in 5 labs and 2 production environments so far. All 7 environments return the same results except @techspence 's lab :suspect: