Skip to main content
Version: 2.1.1-preview

Test-MtAdComputerDelegationDetails

SYNOPSIS​

Provides detailed breakdown of delegation configuration per computer.

SYNTAX​

Test-MtAdComputerDelegationDetails [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION​

This test provides a detailed analysis of Kerberos delegation configuration across computer objects in Active Directory. It identifies:

  • Computers with unconstrained delegation (full trust)
  • Computers with constrained delegation (limited to specific services)
  • Computers with protocol transition (S4U2Proxy)

This detailed view helps security teams identify high-risk delegation configurations that may need review or remediation.

EXAMPLES​

EXAMPLE 1​

Test-MtAdComputerDelegationDetails

Returns $true if computer object data is accessible, $false otherwise. The test result includes a detailed breakdown of delegation by computer.

PARAMETERS​

-ProgressAction​

Determines how PowerShell responds to progress updates generated by a script, cmdlet, or provider, such as the progress bars generated by Write-Progress.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters​

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS​

OUTPUTS​

System.Boolean​

NOTES​

https://maester.dev/docs/commands/Test-MtAdComputerDelegationDetails