{"repo":"jakehildreth/BlueTuxedo","free":true,"listed":false,"github":"https://github.com/jakehildreth/BlueTuxedo","clone":"git clone https://github.com/jakehildreth/BlueTuxedo.git","description":"A tiny tool built to find and fix common misconfigurations in Active Directory-integrated DNS","language":"PowerShell","stars":155,"topics":["active-directory","dns","adi-dns","adidns","powershell","powershell-module"],"license":null,"category":"networking-infra","readme_excerpt":"BlueTuxedo A tiny tool built to find and fix common misconfigurations in Active Directory-Integrated DNS (and a little DHCP as a treat). How can BlueTuxedo help you? Read the slides from WWHF. Watch the presentation from BSidesCharm. Quick Start: Running Invoke-BlueTuxedo with no paramters will Get stuff, Test it, then offer code for how to Repair identified issues (where possible). Get Stuff - ADI Zones - Conditional Forwarder - Dangling SPNs [^1] - DHCP Dynamic Update service account configuration - DnsAdmins Membership - DnsUpdateProxy Membership - Forwarder Configuration - Global Query Block List (GQBL) - Non-ADI Zone Auditing - Query Resolution Policies - Security Descriptors - Socket Pool Configuration - Tombstoned DNS Records - Wildcard Record - WPAD Record - Zone Scopes - Zone Scope Containers Test Stuff Item Test Condition --------- --------------- ADI Zones Is Legacy Zone? ADI Zones Are Secure Updates enabled? DHCP Dynamic Update service account Exists on each DHCP server? Dangling SPNs Exist? DnsAdmins Membership Is non-zero? DnsUpdateProxy Membership Is non-zero? Forwarder Configuration Exist? Global Query Block List (GQBL) Contains wpad / isatap Non-ADI Zones Exist? Query Resolution Policies Exist? Security Descriptor (ACEs) Standard/Expected? Security Descriptor (Ownership) Standard/Expected? Socket Pool Configuration Is maximum? Tombstoned DNS Records Exist? Wildcard Record Exists & correct type? WPAD Record Exists & correct type? Zone Scopes Exist? Zone Scope ","default_branch":null,"files":null,"tree":[],"storefront":"/r/jakehildreth","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/jakehildreth/BlueTuxedo/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}