joeware – never stop exploring… :)

Apologies, I found out that the AdFind.zip file I uploaded wasn’t password protected and caused some download issues.

OK… Finally, at long last, an update for AdFind and AdMod.

Sorry for that folks.

I have had my DB util from the blog get me locked out of my mysql servers several times now and it is due to some kind of scanners doing stupid shit. i went through the logs for the last 24 hours and have blocked roughly 2.5 million IP addresses from being

As I mentioned, i was close to releasing new (to you) versions of AdFind and AdMod a while back and then was told about some new functionality in Windows Server 2025+ v.Next that I have been asking for for over two decades and I wanted to get it all wrapp…

Something weird happened with one of the Security plugins and took the legs out from under the blog.

So it begins… And anyone who wants to be mad about yet another delay on the latest AdFind release, blame Narayanan Subramanian.

Is joe dead?

Testing a post with PHP 8.4 enabled.

So the same PHP upgrade that messed with downloads on the main site seems to be doing some fun on the blog as well.

Hey all, yes, still very quiet, still very busy.

This is an awesome tool, subnet consolidator.

Hey!

I love winget… Full stop.

Dear everyone out there still working with Active Directory (so most all large orgs and Security Vendors and other Software Vendors), please stop writing whenChanged or uSNChanged based AD Sync methods for your applications.

AdFind updates for 2025 (and other things) is under way.

A colleague from my HP days (neither he nor I work for HP anymore) reached out to me to ask for clarification on the joeware licensing for use WITHIN a company, specifically the company he works for now.

…Microsoft, you have become so damn annoying with Windows Defender and other things that I am looking to turn it off permanently because I, not you, gets to be the arbiter of what I want on my machine and if I say leave this on my machine, I shouldn’t have

I released V01.62.00 last night to fix a crash bug introduced in V01.61.00 from integrating some of the joe only private ldap query tool functionality because some of the core functionality was different enough to be problematic.

I just performed the final compiles and final commits for AdFind V01.61.00, AdMod V01.28.00, and joe’s private LDAP query tool because MSFT has their head up their ass in going after AdFind and I need a tool around that doesn’t just disappear when they de…

The first bit is of course wrong, AdFind cannot bypass any security in place.

My good friend, former coworker, and someone I trained for several years on the topics of Active Directory, Windows, and just troubleshooting the world at scale with basic fundamentals is now blogging the cool and fun stuff he is digging into which is usu…

I know I know, I have said this a few times, I will not be building new versions of AdFind / AdMod and releasing them, but here I am again, releasing new versions of AdFind/AdMod.

I am not entirely sure what happened but it took out the blog for a few days, looks like from 2023-04-24T155831 until just a few minutes ago as I troubleshot the operation.

Be there or be square, sign up fast!!!

Is https://support.microsoft.com/en-us/topic/kb5020276-netjoin-domain-join-hardening-changes-2b65a0f3-1f4c-42ef-ac0f-1caaf421baf8 an admission that AD Delegation for computer objects is broken?

I am getting masses of emails about people having issues downloading from the site.

So I was alerted that Chrome is blocking downloads of AdFind but then also heard it is other tools as well.

You may recall I previously ranted on twitter (https://twitter.com/joewaredotnet/status/1432548671527264258?

I have uploaded the new versions of AdFind and AdMod to www.joeware.net for download.

I was about to add some code to AdFind to export Security Descriptors in binary export/import format and found out I already had written that code.

F.U.2.

Ok not really enemy #1, but they are getting stupid about it.

I have released new versions of AdFind and AdMod.

Ok, let me pull that title back a teeny tiny bit… Do NOT Use msds-memberTransitive and msds-memberOfTransitive UNLESS you are absolutely positive that the number of values returned is guaranteed to be less than 4501 values.

I know I said I was putting them away, and I did.

My blogging ability has been hampered for a while because OpenLiveWriter wasn’t working for me and throwing 409 Conflict errors when trying to talk to my blog.

I have released AdFind V01.55.00 and AdMod V01.22.00. 🙂 AdFind There are quite a few fixes and additions since the pre-Pandemic release.

Hi, I just wanted to touch base on the upcoming releases.

https://docs.microsoft.com/en-us/security/compass/esae-retirement ”We have found that ESAE projects are often detrimental to overall security posture as they are high cost, difficult to use and support, and provide a limited set of security (only Active D…

For a short time only I have the latest daily build Beta versions of AdFind V01.53.00 and AdMod V01.21.00 out on the joeware website at https://www.joeware.net/downloads/beta/20201231_expire/ As the folder name implies, these versions will expire on Decem…

So say you hate Account Operators group as much as I do and want to just strip the AO ACEs off of objects… Then this output below is something you will like… Less than 30 seconds to strip all AO access off of 20 objects remotely from a non-domain joined PC

Look no further, check out the custom ornament my niece put together just for 2020. https://www.etsy.com/shop/CustomDesignByBrooke ENJOY!

https://thedfirreport.com/2020/10/08/ryuks-return/ This isn’t the first I have read about AdFind being used by bad actors, it won’t be the last.

Thoughts?

Another common thing that people want to do from the command line with AdFind | AdMod is to clear the “Protect object from accidental deletion” setting that is implemented with a deny delete ACE on the object, specifically [DACL] DENY;;[DEL TREE][DEL];;;E…