jakehildreth/Locksmith: A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

Source: GitHub Author: unknown URL: https://github.com/jakehildreth/Locksmith

  1. ONE SENTENCE SUMMARY: Locksmith is a PowerShell tool designed to detect and fix common Active Directory Certificate Services (AD CS) misconfigurations.

  2. MAIN POINTS:

  3. Locksmith must be run on a domain-joined system with ActiveDirectory and ServerManager PowerShell modules installed.

  4. Administrative rights may be required for some checks and remediation tasks.

  5. Locksmith can be installed via PowerShell Gallery or used as a standalone script.

  6. Mode 0 identifies and outputs AD CS issues in a console table format.

  7. Mode 1 identifies issues and fixes, outputting them in a console list format.

  8. Mode 2 outputs identified issues to a CSV file named ADCSIssues.CSV.

  9. Mode 3 outputs issues and example fixes to a CSV file named ADCSRemediation.CSV.

  10. Mode 4 identifies and offers to fix all misconfigurations, warning of potential operational impacts.

  11. The -Scans parameter allows targeted scans for specific vulnerabilities or interactive selection of scans.

  12. Example outputs for all modes and instructions are available on Locksmith’s GitHub repository.

  13. TAKEAWAYS:

  14. Locksmith simplifies AD CS misconfiguration detection and remediation for administrators.

  15. Multiple modes allow tailored outputs, from console summaries to detailed CSV reports.

  16. Mode 4 is an all-in-one solution for automatic issue identification and remediation.

  17. The -Scans parameter enhances flexibility by allowing specific or interactive vulnerability scans.

  18. Comprehensive installation and usage instructions ensure accessibility for various user preferences.