forked from MichaelGrafnetter/DSInternals
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathChangelog.txt
177 lines (143 loc) · 6.87 KB
/
Changelog.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
Version 2.22
- [Framework] Added the Enable-ADDBAccount and Disable-ADDBAccount cmdlets.
- [Module] Added the ability to enable or disable accounts in offline databases.
Version 2.21.2
- [Framework] Fixed a bug in roamed credentials processing.
- [Module] Fixed a bug in hexadecimal parameter parsing.
Version 2.21.1
- Fixed a bug in linked value replication.
Version 2.21
- [Module] The replication cmdlets now use Kerberos authentication by default.
- [Module] Added support for roamed credentials.
- [Module] Cmdlets now accept hashes in both byte array and hexadecimal string forms.
- [Framework] Added support for linked value retrieval.
- [Framework] Updated referenced packages.
- [Framework] Added the SamEnumerateDomainsInSamServer call.
Version 2.20
- Added the Get-ADPasswordPolicy cmdlet.
Version 2.19
- Added support for the ServicePrincipalName attribute.
Version 2.18
- [Module] Added the Get-ADDBKdsRootKey cmdlet to aid DPAPI-NG decryption, e.g. SID-protected PFX files.
- [Module] The Get-ADReplAccount cmdlet now correctly reports the access denied error.
- [Module] Fixed a bug in progress reporting of the Get-ADReplAccount cmdlet.
- [Framework] Added support for KDS Root Key retrieval.
- [Framework] Replication errors are now reported using more suitable exception types.
Version 2.17
- [Module] The Get-ADReplAccount -All command now reports replication progress.
- [Framework] Added the ability to retrieve the replication cursor.
- [Framework] The ReplicationCookie class is now immutable and replication progress is reported using a delegate.
- [Framework] Win32 exceptions are now translated to more specific .NET exceptions by the Validator class.
Version 2.16.1
- [Module] Added the -ShowPlainTextPasswords parameter to the Test-PasswordQuality cmdlet.
Cracked and cleartext passwords now do not get displayed by default.
Version 2.16
- [Module] Added the Test-PasswordQuality and ConvertTo-NTHashSet cmdlets.
- [Module] Added support for the the UserAccountControl attribute of user accounts.
- [Framework] Added the ability to replicate user accounts by specifying their UPN.
- [Framework] Added the ability to calculate a NT hash from both String and SecureString.
- [Framework] Added the HashEqualityComparer, which allows the hashes to be stored
in the built-in generic collections.
Version 2.15
- Removed dependency on ADSI.
- Added support for the PAM optional feature.
- Added the PWDump custom view.
- Added the HashNT custom view.
- Added the HashLM custom view.
Version 2.14
- Added support for Windows Server 2016 ntds.dit encryption.
- Added support for replication with renamed domains.
- Added support for reading security descriptors (ACLs) from both ntds.dit files and DRS-R.
- Added support for the AdminCount attribute.
- Updated the forked ManagedEsent source codes to version 1.9.3.3.
Version 2.13.1
- Fixed a bug regarding incorrect OS version detection.
Version 2.13
- Fixed a rare bug which caused the database cmdlets to hang while loading indices.
- Meaningful error messages are now displayed when a dirty or downlevel ntds.dit file is encountered.
- The DSInternals.Replication library now supports incremental replication (not exposed through PowerShell).
Version 2.12
- Commandlets for ntds.dit manipulation now work on Windows 7 / Windows Server 2008 R2.
- The module now requires .NET Framework 4.5.1 instead of 4.5.
- Both Visual Studio 2013 and 2015 are now supported platforms.
Version 2.11
- Added support for Windows Server 2003 R2.
- The replication now works on x86, again.
- Fixed a bug in temporary index loading.
Version 2.10
- Added support for the NTLM-Strong-NTOWF package in Supplemental Credentials (new in Windows Server 2016 TP4)
- Added support for initial databases
- Added partial support for ADAM/LDS databases
- The Get-ADDBSchemaAttribute now shows attribute OIDs
- Fixed a bug in Exchange schema loading
Version 2.9
- The Get-BootKey cmdlet now supports online boot key retrieval
- The PBKDF2.NET library has been replaced by CryptSharp
- The Get-ADDBDomainController cmdlet now extracts some more data from the DB
- The project has been open-sourced
Version 2.8
- Added the ConvertFrom-ADManagedPasswordBlob cmdlet
- Added the Get-ADDBBackupKey cmdlet
- Added the Get-ADReplBackupKey cmdlet
- Added the Save-DPAPIBlob cmdlet
- Added the HashcatLM view
Version 2.7
- Added the about_DSInternals help page (work in progress)
- Fixed a bug in the Set-ADDBPrimaryGroup cmdlet
Version 2.6
- Implemented CRC checks in the Get-ADReplAccount cmdlet
- The Get-ADReplAccount cmdlet now displays meaningful error messages on 64-bit systems
- The -Server parameter of the Get-ADReplAccount is now compulsory instead of localhost being default
- The Get-ADReplAccount and Set-SamAccountPasswordHash cmdlets now display a warning in case they are supplied with a DNS domain name instead of a NetBIOS one.
- Fixed a bug in SupplementalCredentials parsing
Version 2.5
- Both x86 and x64 platforms are now supported.
- A few parameters have been changed and new aliases added.
- Fixed a bug in the Add-ADDBSidHistory cmdlet.
Version 2.4
- Fixed a bug regarding distinguished name parsing in the Get-ADDBAccount cmdlet
- Removed a big memory leak in the Get-ADReplAccount cmdlet
- Added the Get-ADReplicationAccount alias for Get-ADReplAccount
- Updated AutoMapper to the latest version
- Switched to the official build of Microsoft's Managed Esent libraries
- The module has been published in PowerShell Gallery.
Version 2.3
- Parameter SystemHiveFilePath of the Get-BootKey cmdlet is now positional
- Added the Readme.txt file with system requirements
- Fixed a bug in distinguished name parsing that caused the Get-ADReplAccount cmdlet to fail under some circumstances
Version 2.2
- Added a few parameter validations
- Fixed a bug in SupplementalCredentials parsing
Version 2.1
- The Get-ADReplAccount cmdlet can now retrieve all accounts from AD or just a sigle one
- Added Microsoft Visual C++ 2013 Runtime libraries to the distribution
- The module is now 64-bit only
- Minor bug fixes
Version 2.0
- Added the Get-ADDBAccount cmdlet
- Added the Get-BootKey cmdlet
- Added the Get-ADReplAccount cmdlet
- Added the Remove-ADDBObject cmdlet
- Added the Format-Hex cmdlet
- Merged the DSInternals.Cryptography assembly into DSInternals.Common
- Minor bug fixes
Version 1.6
- Added the Set-ADDBDomainController cmdlet
- Added the Get-ADDBSchemaAttribute cmdlet
Version 1.5
- Added the Get-ADDBDomainController cmdlet
Version 1.4
- Added the Set-ADDBPrimaryGroup cmdlet
- The Add-ADDBSidHistory cmdlet now supports relative file paths
Version 1.3.1
- Fixed a bug in the Microsoft.Isam.Esent.Interop library,
that prevented the Add-ADDBSidHistory cmdlet to run on Windows Server 2008 R2
Version 1.3
- Added the Add-ADDBSidHistory cmdlet
Version 1.2
- Added the ConvertTo-GPPrefPassword cmdlet
Version 1.1
- Added the ConvertTo-OrgIdHash cmdlet
- Added the ConvertFrom-GPPrefPassword cmdlet
Version 1.0
- Initial release