Would you like to learn how to list all users with Kerberos Preauth disabled in the domain? In this tutorial, we will show you how to list all Active Directory accounts with the Kerberos Preauthentication disabled using Powershell.

• Windows 2012 R2
• Windows 2016
• Windows 2019
• Windows 2022
• Windows 10
• Windows 11

Equipment list

Here you can find the list of equipment used to create this tutorial.

This link will also show the software list used to create this tutorial.

Related tutorial – PowerShell

On this page, we offer quick access to a list of tutorials related to PowerShell.

Tutorial Powershell – List accounts with Kerberos Preauth disabled

Start a Powershell command-line.

Start Powershell

Create a domain user account.

Copy to Clipboard

Disable the Kerberos pre-authentication.

Copy to Clipboard

List all accounts with Kerberos Preauth disabled.

Copy to Clipboard

Here is the command output.

Copy to Clipboard

You must have RSAT installed or have a copy of its DLL loaded.

Copy to Clipboard

Congratulations! You are able to list all user accounts with Kerberos pre-authentication disabled in the domain using Powershell.

Powershell Script – List users with Kerberos Preauth disabled

Start a Powershell command-line.

Start Powershell

List all user accounts with Kerberos Preauth disabled.

Copy to Clipboard

Here is the command output.

POWERSHELL - LIST KERBEROS PREAUTH DISABLED

Congratulations! You are able to list all user accounts with Kerberos pre-authentication disabled in the domain using Powershell scripts.