| UserName | Name | Enabled | Must Change Password at Logon | Cannot Change Password | Password Never Expires | Reversible Password Encryption | Smartcard Logon Required | Delegation Permitted | Kerberos DES Only | Kerberos RC4 | Kerberos AES-128bit | Kerberos AES-256bit | Does Not Require Pre Auth | Never Logged in | Logon Age (days) | Password Age (days) | Dormant (> 90 days) | Password Age (> 42 days) | Account Locked Out | Password Expired | Password Not Required | Delegation Type | Delegation Protocol | Delegation Services | Logon Workstations | AdminCount | Primary GroupID | SID | SIDHistory | Description | Last Logon Date | Password LastSet | Account Expiration Date | Account Expiration (days) | Email | HomeDirectory | ProfilePath | ScriptPath | whenCreated | whenChanged | DistinguishedName | CanonicalName |
| Administrator | Administrator | True | False | False | True | False | False | True | False | False | False | True | False | False | 0 | 12 | False | False | False | False | False | | | | | 1 | 513 | S-1-5-21-2872888145-3513486857-3924934394-500 | | Built-in account for administering the computer/domain | 28/08/2018 10:34:37 PM | 16/08/2018 3:27:57 AM | | | administrator@sos.labs | C:\Users\Administrator | \\DC1\Users\Administrators | logon.bat | 16/03/2018 5:21:13 PM | 28/08/2018 10:34:37 PM | CN=Administrator,CN=Users,DC=sos,DC=labs | sos.labs/Users/Administrator |
| Guest | Guest | False | False | False | True | False | False | True | False | | | | False | True | | | False | False | False | False | True | | | | | | 514 | S-1-5-21-2872888145-3513486857-3924934394-501 | | Built-in account for guest access to the computer/domain | | | | | | | | | 16/03/2018 5:21:13 PM | 16/03/2018 5:21:13 PM | CN=Guest,CN=Users,DC=sos,DC=labs | sos.labs/Users/Guest |
| DefaultAccount | DefaultAccount | False | False | False | True | False | False | True | False | | | | False | True | | | False | False | False | False | True | | | | | | 513 | S-1-5-21-2872888145-3513486857-3924934394-503 | | A user account managed by the system. | | | | | | | | | 16/03/2018 5:21:13 PM | 16/03/2018 5:21:13 PM | CN=DefaultAccount,CN=Users,DC=sos,DC=labs | sos.labs/Users/DefaultAccount |
| krbtgt | krbtgt | False | False | False | False | False | False | True | False | | | | False | True | | 165 | False | True | False | True | False | | | | | 1 | 513 | S-1-5-21-2872888145-3513486857-3924934394-502 | | Key Distribution Center Service Account | | 16/03/2018 5:22:29 PM | | | | | | | 16/03/2018 5:22:29 PM | 16/03/2018 5:37:40 PM | CN=krbtgt,CN=Users,DC=sos,DC=labs | sos.labs/Users/krbtgt |
| dcadmin | DC Admin | True | False | False | True | False | False | True | False | False | True | False | False | True | | 165 | False | True | False | False | False | | | | | 1 | 513 | S-1-5-21-2872888145-3513486857-3924934394-1103 | | AES128 | | 16/03/2018 5:31:38 PM | | | | | | | 16/03/2018 5:31:38 PM | 8/08/2018 7:00:59 PM | CN=DC Admin,OU=Priv Accounts,DC=sos,DC=labs | sos.labs/Priv Accounts/DC Admin |
| da | D A | True | False | False | True | False | False | False | False | | | | False | False | 20 | 165 | False | True | False | False | False | | | | | 1 | 512 | S-1-5-21-2872888145-3513486857-3924934394-1104 | | | 8/08/2018 5:52:54 PM | 16/03/2018 5:32:30 PM | | | | | | | 16/03/2018 5:32:30 PM | 8/08/2018 7:01:20 PM | CN=D A,OU=Priv Accounts,DC=sos,DC=labs | sos.labs/Priv Accounts/D A |
| ea | E A | True | False | False | True | False | False | True | False | False | False | True | False | True | | 165 | False | True | False | False | False | | | | | 1 | 519 | S-1-5-21-2872888145-3513486857-3924934394-1105 | | Enterprise Admin, AES256 | | 16/03/2018 6:04:36 PM | | | | | | | 16/03/2018 6:04:36 PM | 8/08/2018 7:00:39 PM | CN=E A,OU=Priv Accounts,DC=sos,DC=labs | sos.labs/Priv Accounts/E A |
| user1 | User 1 | True | False | False | True | False | False | True | False | | | | False | False | 26 | 88 | False | True | False | False | False | | | | | | 513 | S-1-5-21-2872888145-3513486857-3924934394-1108 | | Password Never Expires | 2/08/2018 4:29:59 PM | 31/05/2018 10:46:06 PM | | | user1@sos.labs | | | | 18/03/2018 5:19:47 PM | 8/08/2018 7:03:19 PM | CN=User 1,OU=Lab Users,DC=sos,DC=labs | sos.labs/Lab Users/User 1 |
| user2 | User 2 | True | False | True | False | False | False | True | False | | | | False | False | 24 | 47 | False | True | False | True | False | | | | | | 513 | S-1-5-21-2872888145-3513486857-3924934394-1109 | | Cannot Change Password | 4/08/2018 4:10:04 AM | 12/07/2018 4:49:55 PM | | | user2@sos.labs | | | | 18/03/2018 5:20:21 PM | 8/08/2018 7:03:30 PM | CN=User 2,OU=Lab Users,DC=sos,DC=labs | sos.labs/Lab Users/User 2 |
| user3 | User 3 | True | True | False | False | False | False | True | False | | | | False | True | | | False | False | False | True | False | | | | | | 513 | S-1-5-21-2872888145-3513486857-3924934394-1110 | | Must Change Password at Next Logon | | | | | | | | | 18/03/2018 5:21:24 PM | 18/03/2018 5:21:39 PM | CN=User 3,OU=Lab Users,DC=sos,DC=labs | sos.labs/Lab Users/User 3 |
| user4 | User 4 | False | False | False | False | False | False | True | False | | | | False | True | | 163 | False | True | False | True | False | | | | | | 513 | S-1-5-21-2872888145-3513486857-3924934394-1111 | | Disabled | | 18/03/2018 5:22:05 PM | | | | | | | 18/03/2018 5:22:05 PM | 18/03/2018 5:22:11 PM | CN=User 4,OU=Lab Users,DC=sos,DC=labs | sos.labs/Lab Users/User 4 |
| user5 | User 5 | True | False | False | False | True | False | True | False | | | | False | True | | 163 | False | True | False | True | False | | | | | | 513 | S-1-5-21-2872888145-3513486857-3924934394-1112 | | Store password using Reversible Encryption | | 18/03/2018 5:22:32 PM | | | | | | | 18/03/2018 5:22:32 PM | 18/03/2018 5:22:59 PM | CN=User 5,OU=Lab Users,DC=sos,DC=labs | sos.labs/Lab Users/User 5 |
| user6 | User 6 | True | False | False | False | False | False | True | False | | | | True | True | | 163 | False | True | False | True | False | | | | | | 513 | S-1-5-21-2872888145-3513486857-3924934394-1113 | | Do not require Kerberos PreAuth | | 18/03/2018 5:23:18 PM | 16/05/2018 12:00:00 AM | -104 | | | | | 18/03/2018 5:23:18 PM | 17/05/2018 6:41:40 PM | CN=User 6,OU=Lab Users,DC=sos,DC=labs | sos.labs/Lab Users/User 6 |
| user | User | True | False | False | True | False | False | True | False | | | | False | True | | 89 | False | True | False | False | False | Unconstrained | Kerberos | Any | WIN7X86 | 1 | 513 | S-1-5-21-2872888145-3513486857-3924934394-1115 | | Member of Administrators | | 31/05/2018 12:53:57 PM | | | user@sos.labs | | | | 18/03/2018 5:24:26 PM | 8/08/2018 7:03:11 PM | CN=User,OU=Lab Users,DC=sos,DC=labs | sos.labs/Lab Users/User |
| bo | B O | True | False | False | True | False | False | True | False | | | | False | True | | 160 | False | True | False | False | False | | | | | 1 | 513 | S-1-5-21-2872888145-3513486857-3924934394-1120 | | | | 21/03/2018 4:43:23 PM | 17/06/2018 12:00:00 AM | -72 | | | | | 21/03/2018 4:43:23 PM | 17/05/2018 7:25:30 PM | CN=B O,OU=Priv Accounts,DC=sos,DC=labs | sos.labs/Priv Accounts/B O |
| cp | C P | True | False | True | True | False | True | True | True | | | | False | True | | 160 | False | True | False | False | False | | | | | | 513 | S-1-5-21-2872888145-3513486857-3924934394-1121 | | | | 21/03/2018 4:44:16 PM | | | | | | | 21/03/2018 4:44:16 PM | 8/08/2018 7:01:44 PM | CN=C P,OU=Priv Accounts,DC=sos,DC=labs | sos.labs/Priv Accounts/C P |
| co | C O | True | False | True | True | False | False | True | False | | | | False | True | | 160 | False | True | False | False | False | | | | DC1 | | 513 | S-1-5-21-2872888145-3513486857-3924934394-1122 | | Log On To configured | | 21/03/2018 4:45:13 PM | | | | | | | 21/03/2018 4:45:13 PM | 8/08/2018 7:02:49 PM | CN=C O,OU=Priv Accounts,DC=sos,DC=labs | sos.labs/Priv Accounts/C O |
| backdoor | Back Door | True | False | False | True | False | False | True | False | | | | False | True | | 160 | False | True | False | False | False | | | | | 1 | 512 | S-1-5-21-2872888145-3513486857-3924934394-1123 | S-1-5-21-2872888145-3513486857-3924934394-512 | Administrator password is P@ssw0rd! | | 21/03/2018 4:45:55 PM | 13/08/2018 12:00:00 AM | -15 | backdoor@sos.labs | | | | 21/03/2018 4:45:55 PM | 8/08/2018 6:59:50 PM | CN=Back Door,OU=Priv Accounts,DC=sos,DC=labs | sos.labs/Priv Accounts/Back Door |
| sshd | sshd | True | False | False | True | False | False | True | False | | | | False | True | | 160 | False | True | False | False | False | | | | | | 513 | S-1-5-21-2872888145-3513486857-3924934394-1124 | | | | 21/03/2018 5:48:25 PM | | | | | | | 21/03/2018 5:48:25 PM | 21/03/2018 5:48:25 PM | CN=sshd,CN=Users,DC=sos,DC=labs | sos.labs/Users/sshd |