{"repo":"jakehildreth/Locksmith","free":true,"listed":false,"github":"https://github.com/jakehildreth/Locksmith","clone":"git clone https://github.com/jakehildreth/Locksmith.git","description":"A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.","language":"PowerShell","stars":1604,"topics":["active-directory","ad-cs","adcs","pki","powershell","powershell-module","powershell-script","active-directory-certificate-services"],"license":null,"category":"cli-tools","readme_excerpt":"Locksmith A small tool built to find and fix common misconfigurations in Active Directory Certificate Services. Contents 1. Installation 2. Run Locksmith 1. Mode 0 2. Mode 1 3. Mode 2 4. Mode 3 5. Mode 4 6. Scans 3. Security and Support Installation Prerequisites 1. Locksmith must be run on a domain joined system. 2. The ActiveDirectory and ServerManager PowerShell modules must be installed before importing the Locksmith module. 3. Administrative rights may be required for some checks and for remediation. Standard Module Installation Open a PowerShell prompt and install Locksmith from the PowerShell Gallery: Alternative Installation Methods 1. Download and Use the Module Without Installing It 1. Download the latest module version. 2. Open a PowerShell prompt to the location of the extracted file and run: 2. Download the Standalone Script Without Module 1. Download the latest monolithic (all-in-one) script version. 2. Open a PowerShell prompt to the location of the downloaded file and run: Run Locksmith There are several modes you can choose from when running Invoke-Locksmith . You can also use the Scans parameter to choose which scans you want to invoke. Mode 0: Identify Issues, Output to Console (Default) Running Invoke-Locksmith.ps1 with no parameters or with -Mode 0 will scan the current Active Directory forest and output all discovered AD CS issues to the console in Table format. Example Output for Mode 0: Mode 1: Identify Issues and Fixes, Output to Console This mode sca","default_branch":null,"files":null,"tree":[],"storefront":"/r/jakehildreth","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/jakehildreth/Locksmith/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}