Test-MtAdKrbtgtLastLogon
SYNOPSIS
Checks the KRBTGT account last logon time.
SYNTAX
Test-MtAdKrbtgtLastLogon [-ProgressAction <ActionPreference>] [<CommonParameters>]
DESCRIPTION
The KRBTGT account is a service account that should never have interactive logons. This test retrieves the last logon timestamp for the KRBTGT account, which should typically show no logon activity or only system-generated authentication events.
Security Note:
- KRBTGT should not have interactive logons
- Any logon activity may indicate suspicious activity
- The account is used internally by the KDC service only
EXAMPLES
EXAMPLE 1
Test-MtAdKrbtgtLastLogon
Returns $true if KRBTGT account data is accessible.
PARAMETERS
-ProgressAction
Determines how PowerShell responds to progress updates generated by a script, cmdlet, or provider, such as the progress bars generated by Write-Progress.
Type: ActionPreference
Parameter Sets: (All)
Aliases: proga
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.