Shulou(Shulou.com)06/02 Report--

Verifying user names and passwords is usually scanned periodically internally to prevent the use of weak passwords.

Of course, when scanning, we should be careful not to exceed the maximum number of errors, so as not to cause locking.

There are two methods of password authentication here, one is domain users, the other is local users.

Authentication method for domain users:

$Try = New-Object System.DirectoryServices.DirectoryEntry ("LDAP://DC=Contoso,DC=Com", "$UserName", "$Password")

When $Try.Name is empty, the password is incorrect. When $Try.Name is not empty, the password is verified successfully. It is a weak password account.

Authentication method for local users:

Add-Type-assemblyname system.DirectoryServices.accountmanagement

$DS = New-Object System.DirectoryServices.AccountManagement.PrincipalContext ([System.DirectoryServices.AccountManagement.ContextType]:: Machine, "localhost")

$DS.ValidateCredentials ("admin", "P@ssw0rd")

The verification here will directly return True or False, that is, whether it passes the verification.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.