Hello friends! This week I talked about how you can clean up old Active Directory SPNs. The main page with all the links is over at our BPATTY repository, but here are the links we talked about during the livestream:
wald0’s tweet about Kerberoasting cleanup
Microsoft’s practical way to clean up dead SPNs in Active Directory
Script to cleanup dead SPNs
setspn - a tool to add/modify/delete SPNs
Enjoy, and why you’re here, why not:
Thanks,
Brian
