Skip to content

Commit 43e87c2

Browse files
committed
Add RPC encryption CA reg key
1 parent a073f1a commit 43e87c2

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

src/Runtime/ObjectProcessors.cs

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -767,6 +767,7 @@ await compStatusChannel.Writer.WriteAsync(new CSVComputerStatus
767767
var enrollmentAgentRestrictionsCollected = false;
768768
var isUserSpecifiesSanEnabledCollected = false;
769769
var roleSeparationEnabledCollected = false;
770+
var rPCEncryptionCollected = false;
770771
var caName = entry.GetProperty(LDAPProperties.Name);
771772
var dnsHostName = entry.GetProperty(LDAPProperties.DNSHostName);
772773
if (caName != null && dnsHostName != null) {
@@ -789,6 +790,7 @@ await compStatusChannel.Writer.WriteAsync(new CSVComputerStatus
789790
EnrollmentAgentRestrictions = await _certAbuseProcessor.ProcessEAPermissions(caName,
790791
resolvedSearchResult.Domain, dnsHostName, ret.HostingComputer),
791792
RoleSeparationEnabled = _certAbuseProcessor.RoleSeparationEnabled(dnsHostName, caName),
793+
RPCEncryptionEnforced = _certAbuseProcessor.RPCEncryptionEnforced(dnsHostName, caName),
792794

793795
// The CASecurity exist in the AD object DACL and in registry of the CA server. We prefer to use the values from registry as they are the ground truth.
794796
// If changes are made on the CA server, registry and the AD object is updated. If changes are made directly on the AD object, the CA server registry is not updated.
@@ -800,6 +802,7 @@ await compStatusChannel.Writer.WriteAsync(new CSVComputerStatus
800802
enrollmentAgentRestrictionsCollected = cARegistryData.EnrollmentAgentRestrictions.Collected;
801803
isUserSpecifiesSanEnabledCollected = cARegistryData.IsUserSpecifiesSanEnabled.Collected;
802804
roleSeparationEnabledCollected = cARegistryData.RoleSeparationEnabled.Collected;
805+
rPCEncryptionCollected = cARegistryData.RPCEncryptionEnforced.Collected;
803806
ret.CARegistryData = cARegistryData;
804807
} else {
805808
_log.LogWarning("The CA name or dnsHostname properties are null.");
@@ -809,6 +812,7 @@ await compStatusChannel.Writer.WriteAsync(new CSVComputerStatus
809812
ret.Properties.Add("enrollmentagentrestrictionscollected", enrollmentAgentRestrictionsCollected);
810813
ret.Properties.Add("isuserspecifiessanenabledcollected", isUserSpecifiesSanEnabledCollected);
811814
ret.Properties.Add("roleseparationenabledcollected", roleSeparationEnabledCollected);
815+
ret.Properties.Add("rpcencryptioncollected", rPCEncryptionCollected);
812816
}
813817

814818
return ret;

0 commit comments

Comments
 (0)