Skip to main content
Version: 2.1.0

Test-MtAdUserSpnSetCount

SYNOPSIS

Counts users with SPNs configured in Active Directory.

SYNTAX

Test-MtAdUserSpnSetCount [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION

This test identifies user objects with one or more Service Principal Names (SPNs) configured. User-based SPNs often represent service accounts and can be high-value targets for Kerberoasting. Tracking the volume of user accounts with SPNs helps identify service account exposure and operational patterns that require review.

EXAMPLES

EXAMPLE 1

Test-MtAdUserSpnSetCount

Returns $true if user data is accessible, $false otherwise. The test result includes the count of users with SPNs configured.

PARAMETERS

-ProgressAction

Determines how PowerShell responds to progress updates generated by a script, cmdlet, or provider, such as the progress bars generated by Write-Progress.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

System.Boolean

NOTES

https://maester.dev/docs/commands/Test-MtAdUserSpnSetCount