Subnet total count should be retrievable
AD-SUB-01InfoActive DirectorySites and subnets
Part of Active Directory · Active Directory · Sites and subnets · All checks
Invoke-Maester -TestId AD-SUB-01Overview
Section titled “Overview”Subnets are the foundation of Active Directory site assignment:
- Client location: Subnets determine which site a client belongs to
- Authentication routing: Directs clients to the nearest domain controller
- Service discovery: Helps clients find local services
- Network segmentation: Reflects the physical network topology
Understanding the number and distribution of subnets helps ensure proper client site assignment across the organization.
Control Type
Section titled “Control Type”Operational
Security Recommendation
Section titled “Security Recommendation”- Maintain accurate subnet definitions that reflect the physical network
- Review subnet assignments during network changes
- Remove obsolete subnets to prevent misconfiguration
- Ensure all IP ranges in use are properly defined
How the Test Works
Section titled “How the Test Works”This test retrieves all Active Directory subnets using Get-ADReplicationSubnet and counts the total number of subnets configured.
Related Tests
Section titled “Related Tests”Test-MtAdSubnetSiteAssociationCount- Counts sites with subnet associationsTest-MtAdSubnetWithoutSiteCount- Identifies orphaned subnetsTest-MtAdSiteTotalCount- Counts total sites in the domain
Details
Section titled “Details”Every attribute of this check
| Field | Value |
|---|---|
| Test ID | AD-SUB-01 |
| Severity | Info |
| Suite | Active Directory |
| Product | Active Directory |
| Feature | Sites and subnets |
| Area | Infrastructure hardening |
| Resource type | AdSite |
| MITRE ATT&CK | None |
| PowerShell test | Test-MtAdSubnetTotalCount |
| Services | ActiveDirectory |
| Permissions | ActiveDirectory:Ldap:subnet:ReadProperty |
Source
Section titled “Source”- Test:
tests/ad/site/Test.AD-SUB-01.ps1 - Documentation:
tests/ad/site/Test.AD-SUB-01.md