AdsiPS is a PowerShell module to interact with Active Directory using the .NET Framework (ADSI, System.DirectoryServices namespace,...)
Note: This module currently only works on Windows Operating Systems.
- Contributing
- Installation
- Download from PowerShell Gallery
- Download from GitHub repository
- Use Cases
- More Information
- Notes
Contributions are welcome via pull requests and issues. Please see our contributing guide for more details
Only from PowerShell version 5
Install-Module -name ADSIPS
- Download the repository
- Unblock the zip file
- Extract the folder to a module path (e.g. $home\Documents\WindowsPowerShell\Modules)
- Run
build.ps1
(exists in project root).- NOTE: If you get an error after running
build.ps1
- please usebuild.ps1 -InstallDependencies
- NOTE: If you get an error after running
build.ps1
creates a folder called~\buildoutput\AdsiPs
in the directory whichAdsiPs
was saved to- Inside of
\buildoutput\AdsiPs
there is a file calledAdsiPs.psm1
- Run
Import-Module -Path "C:\Path\To\buildoutput\AdsiPs\AdsiPs.psm1"
to import theAdsiPs
module
- Learning Active Directory: We can't see the code behind the Microsoft ActiveDirectory Module and Quest ActiveDirectory Snapin. This module is a great way to explore and learn on how Active Directory is working,
- Delegation: Active Directory queries need to be performed by a tool (GUI for example) and you don't want it to load AD module. Additionally you don't know who will use the tool and if they have/can/know how to install the module,
- Performance: ADSI is faster,
- Restricted environment: Sometime ActiveDirectory Module is not available/ or can't install it on a machine.
- MSDN is a great resource if you want to find more information on the NET classes to use. See System.DirectoryServices
- Thanks to our Contributors!!
- @LazyWinAdmin
- @MickyBalladelli
- @christophekumor
- @omiossec
- @oze4
- @andrewtchilds
- @NicolasBn
- @gerane
- @GaffaOverflow
- @Skoetting
Interesting projects using different approaches to reach out to Active Directory in PowerShell/c#
- ADAudit by @darkoperator
- ADSI on powershell.com by @TobiasPSP by Tobias Weltner
- ADRecon from @sense-of-security
- PowerView from @PowerShellMafia team
- Invoke-Kerberoast from @EmpireProject team
- PSAD by @zloeber
- Test-ActiveDirectory by @markwragg
- AdEnumerator(LDAP) by @chango77747
- Grant-ADPermission by @edemilliere
- ADSec by @FriedrichWeinmann