DSInternals

5.0

The DSInternals PowerShell Module exposes several internal features of Active Directory and Azure Active Directory. These include FIDO2 and NGC key auditing, offline ntds.dit file manipulation, password auditing, DC recovery from IFM backups and password hash calculation.

DISCLAIMER: Features exposed through this module are not supported by Microsoft and it is ther
The DSInternals PowerShell Module exposes several internal features of Active Directory and Azure Active Directory. These include FIDO2 and NGC key auditing, offline ntds.dit file manipulation, password auditing, DC recovery from IFM backups and password hash calculation.

DISCLAIMER: Features exposed through this module are not supported by Microsoft and it is therefore not intended to be used in production environments. Improper use might cause irreversible damage to domain controllers or negatively impact domain security.
Show more

Minimum PowerShell version

3.0

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name DSInternals

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name DSInternals

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) 2015-2025 Michael Grafnetter. All rights reserved.

Package Details

Author(s)

  • Michael Grafnetter

Tags

ActiveDirectory AzureAD Security SAM LSA DNS BitLocker LAPS Windows FIDO NTDS

Cmdlets

ConvertTo-NTHash ConvertTo-LMHash Set-SamAccountPasswordHash ConvertFrom-UnicodePassword ConvertTo-UnicodePassword ConvertTo-OrgIdHash ConvertFrom-GPPrefPassword ConvertTo-GPPrefPassword Set-ADDBPrimaryGroup Get-ADDBDomainController Set-ADDBDomainController Get-ADDBSchemaAttribute Remove-ADDBObject Get-ADDBAccount Get-BootKey Get-ADReplAccount ConvertTo-Hex ConvertTo-KerberosKey ConvertFrom-ADManagedPasswordBlob Get-ADDBBackupKey Get-ADReplBackupKey Save-DPAPIBlob Set-ADDBBootKey Test-PasswordQuality Get-ADDBServiceAccount Get-ADDBBitLockerRecoveryInformation Get-ADDBKdsRootKey Get-SamPasswordPolicy Get-ADSIAccount Enable-ADDBAccount Disable-ADDBAccount Get-ADKeyCredential Set-ADDBAccountPassword Set-ADDBAccountPasswordHash Get-LsaPolicyInformation Set-LSAPolicyInformation New-ADDBRestoreFromMediaScript Get-LsaBackupKey Add-ADReplNgcKey Get-AzureADUserEx Set-AzureADUserEx Unlock-ADDBAccount Get-ADDBDnsResourceRecord

Dependencies

This module has no dependencies.

Release Notes

- Added the Get-ADDBBitLockerRecoveryInformation cmdlet for retrieving BitLocker recovery keys from ntds.dit files.
- Added the Get-ADDBDnsResourceRecord cmdlet for retrieving DNS resource records from ntds.dit files.
- The Get-ADDBAccount, Get-ADReplAccount, and Get-ADSIAccount cmdlets have a new parameter called -Properties for specifying the properties to be fetched, which greatly increases the performance.
- The Get-ADDBAccount and Get-ADReplAccount cmdlets have a new parameter called -ExportFormat, which replaces the Format-Custom cmdlet when exporting data to hashcat, pwdump, and other formats.
- Legacy LAPS and Windows LAPS cleartext passwords can now be extracted from ntds.dit files using the Get-ADDBAccount cmdlet.
- More user and computer attributes can optionally be retrieved by the Get-ADDBAccount, Get-ADReplAccount, and Get-ADSIAccount cmdlets, including email addresses, phone numbers, managers, and OS versions.

FileList

Version History

Version Downloads Last updated
5.0 (current version) 2,951 3/3/2025
4.16 207,178 1/5/2025
4.15.1 7,832 1/3/2025
4.15 35,187 12/23/2024
4.14 687,968 4/13/2024
4.13 296,100 12/20/2023
4.12 157,763 10/6/2023
4.11 12,914 10/1/2023
4.10 28,945 9/16/2023
4.9 535,458 2/25/2023
4.8 265,720 12/6/2022
4.7 1,194,167 10/30/2021
4.6 24,390 10/19/2021
4.5 13,459 10/13/2021
4.4.1 237,260 7/18/2020
4.4 6,430 7/3/2020
4.3 52,917 4/2/2020
4.2 3,231 3/18/2020
4.1 13,757 12/12/2019
4.0 755 12/4/2019
3.6.1 6,187 8/10/2019
3.6 2,001 6/27/2019
3.5 2,714 5/10/2019
3.4 604 4/23/2019
3.3 1,684 3/2/2019
3.2.1 1,490 1/4/2019
3.1 168 12/29/2018
3.0 2,229 9/29/2018
2.23 2,317 7/7/2018
2.22 7,171 5/1/2017
2.21.2 141 4/19/2017
2.21.1 77 4/14/2017
2.21 262 3/25/2017
2.20 2,453 11/15/2016
2.19 285 10/21/2016
2.18 229 10/2/2016
2.17 148 9/16/2016
2.16.1 236,613 8/8/2016
2.16 73 8/7/2016
2.15 276 6/18/2016
2.14 246 4/30/2016
2.13.1 252 2/25/2016
2.13 66 2/21/2016
2.12 84 2/7/2016
2.11.1 55 2/3/2016
2.10 117 1/14/2016
2.9 76 12/27/2015
2.8 188 10/20/2015
2.7 129 9/30/2015
2.6 68 9/21/2015
2.5 91 9/14/2015
2.4 82 9/5/2015
Show more