DSInternals

7.2

The DSInternals PowerShell Module exposes several internal features of Active Directory. These include FIDO2 and NGC key auditing, offline ntds.dit file manipulation, password auditing, DC recovery from IFM backups, and password hash calculation.

DISCLAIMER: Features exposed through this module are not supported by Microsoft and it is therefore not intended to be u
The DSInternals PowerShell Module exposes several internal features of Active Directory. These include FIDO2 and NGC key auditing, offline ntds.dit file manipulation, password auditing, DC recovery from IFM backups, and password hash calculation.

DISCLAIMER: Features exposed through this module are not supported by Microsoft and it is therefore not intended to be used in production environments. Improper use might cause irreversible damage to domain controllers or negatively impact domain security.
Show more

Minimum PowerShell version

5.1

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name DSInternals

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name DSInternals

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) 2015-2026 Michael Grafnetter. All rights reserved.

Package Details

Author(s)

  • Michael Grafnetter

Tags

ActiveDirectory Security SAM LSA DNS BitLocker LAPS NTDS Windows

Cmdlets

ConvertTo-NTHash ConvertTo-LMHash Set-SamAccountPasswordHash ConvertFrom-UnicodePassword ConvertTo-UnicodePassword ConvertTo-OrgIdHash ConvertFrom-GPPrefPassword ConvertTo-GPPrefPassword Set-ADDBPrimaryGroup Get-ADDBDomainController Set-ADDBDomainController Get-ADDBSchemaAttribute Remove-ADDBObject Get-ADDBAccount Get-BootKey Get-ADReplAccount Get-ADReplTrust ConvertTo-Hex ConvertTo-KerberosKey ConvertFrom-ADManagedPasswordBlob Get-ADReplKdsRootKey Get-ADDBBackupKey Get-ADReplBackupKey Save-DpapiBlob Get-DpapiNgPfxCertificate Unprotect-DpapiNgPfxCertificate Protect-DpapiNgData Unprotect-DpapiNgData Get-DpapiNgData Set-ADDBBootKey Test-PasswordQuality Get-ADDBServiceAccount Get-ADDBBitLockerRecoveryInformation Get-ADDBKdsRootKey Get-SamPasswordPolicy Get-ADSIAccount Get-ADSIServiceAccount Get-ADSIDnsServerResourceRecord Get-ADSIDnsServerZone Get-ADSIDnsServerSigningKey Export-ADSIDnsServerSigningKey Get-ADSIKdsRootKey Enable-ADDBAccount Disable-ADDBAccount Get-ADKeyCredential Set-ADDBAccountPassword Set-ADDBAccountPasswordHash Get-LsaPolicyInformation Set-LSAPolicyInformation New-ADDBRestoreFromMediaScript Get-LsaBackupKey Add-ADReplNgcKey Add-ADReplSidHistory New-DpapiNgNamedDescriptor Get-DpapiNgNamedDescriptor Remove-DpapiNgNamedDescriptor Get-DpapiNgSidKeyIdentifier Save-DpapiNgSidKey Clear-DpapiNgSidKeyCache Unlock-ADDBAccount Get-ADDBDnsServerResourceRecord Get-ADDBDnsServerZone Get-ADDBDnsServerSigningKey Export-ADDBDnsServerSigningKey Set-ADDBAccountControl Save-DnsServerResourceRecord Get-ADDBTrust

PSEditions

Desktop Core

Dependencies

This module has no dependencies.

Release Notes

- Added the Get-ADReplTrust cmdlet for reading a specific trusted-domain object from a domain controller through the MS-DRSR protocol.
- Breaking: Removed the -NamingContext parameter from the Get-ADReplAccount cmdlet, which now resolves the domain naming context automatically from the target domain controller.

FileList

Version History

Version Downloads Last updated
7.2 (current version) 617 9/11/2026
7.1 163,877 7/4/2026
7.0 109,259 5/28/2026
6.5 22,639 5/16/2026
6.4 104,319 3/28/2026
6.3 97,131 2/8/2026
6.2 154,814 12/5/2025
6.1.1 246,665 8/19/2025
6.1 4,064 8/17/2025
6.0.1 4,645 8/14/2025
6.0 99 8/14/2025
5.4.3 88,479 7/9/2025
5.3 228,561 4/11/2025
5.2 3,371 4/9/2025
5.1 54,275 3/22/2025
5.0 43,842 3/3/2025
4.16 207,802 1/5/2025
4.15.1 7,838 1/3/2025
4.15 35,220 12/23/2024
4.14 688,212 4/13/2024
4.13 296,136 12/20/2023
4.12 157,785 10/6/2023
4.11 12,934 10/1/2023
4.10 28,978 9/16/2023
4.9 535,547 2/25/2023
4.8 265,755 12/6/2022
4.7 1,197,597 10/30/2021
4.6 24,446 10/19/2021
4.5 13,480 10/13/2021
4.4.1 237,806 7/18/2020
4.4 6,448 7/3/2020
4.3 52,939 4/2/2020
4.2 3,250 3/18/2020
4.1 13,802 12/12/2019
4.0 887 12/4/2019
3.6.1 6,218 8/10/2019
3.6 2,027 6/27/2019
3.5 2,751 5/10/2019
3.4 615 4/23/2019
3.3 1,699 3/2/2019
3.2.1 1,503 1/4/2019
3.1 187 12/29/2018
3.0 2,321 9/29/2018
2.23 2,582 7/7/2018
2.22 7,284 5/1/2017
2.21.2 161 4/19/2017
2.21.1 86 4/14/2017
2.21 278 3/25/2017
2.20 2,558 11/15/2016
2.19 295 10/21/2016
2.18 243 10/2/2016
2.17 156 9/16/2016
2.16.1 2,757,836 8/8/2016
2.16 85 8/7/2016
2.15 287 6/18/2016
2.14 256 4/30/2016
2.13.1 259 2/25/2016
2.13 76 2/21/2016
2.12 95 2/7/2016
2.11.1 63 2/3/2016
2.10 130 1/14/2016
2.9 89 12/27/2015
2.8 199 10/20/2015
2.7 138 9/30/2015
2.6 87 9/21/2015
2.5 102 9/14/2015
2.4 103 9/5/2015
Show more