AD April ’26 Check0r is a read-only PowerShell tool to assess on-prem AD for the April 2026 Kerberos RC4→AES change. It inventories SPN accounts, flags risky msDS-SupportedEncryptionTypes/KDC overrides, and collects DC System readiness events (201–209) to predict breakage and guide fixes.
aes powershell active-directory rc4 cybersecurity kerberos security-hardening it-security kdc read-only blue-team windows-security security-assessment microsoft-security ad-security kerberos-hardening
-
Updated
Mar 19, 2026 - PowerShell