Skip to main content
Version: 2.3.1-preview

Test-MtAdSupportedSaslMechanismDetails

SYNOPSIS​

Retrieves detailed information about supported SASL mechanisms.

SYNTAX​

Test-MtAdSupportedSaslMechanismDetails [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION​

Simple Authentication and Security Layer (SASL) mechanisms define how clients authenticate to Active Directory. This test provides detailed information about each supported mechanism and its security implications.

Key SASL Mechanisms:

  • GSSAPI: Generic Security Services API (Kerberos) - Most secure
  • GSS-SPNEGO: SPNEGO negotiation for Kerberos/NTLM
  • EXTERNAL: Authentication via external means (TLS client certs)
  • DIGEST-MD5: Digest authentication (less secure, often disabled)

Security Best Practice:

  • Prefer Kerberos (GSSAPI) for authentication
  • Minimize use of less secure mechanisms
  • Disable DIGEST-MD5 if not required

EXAMPLES​

EXAMPLE 1​

Test-MtAdSupportedSaslMechanismDetails

Returns $true if Root DSE data is accessible.

PARAMETERS​

-ProgressAction​

Determines how PowerShell responds to progress updates generated by a script, cmdlet, or provider, such as the progress bars generated by Write-Progress.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters​

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS​

OUTPUTS​

System.Boolean​

NOTES​

https://maester.dev/docs/commands/Test-MtAdSupportedSaslMechanismDetails