Paramount Defenses Company | Leadership | Products | Solutions | Partners | Privileged Access Insight | Support | News | Careers | Blog | Contact 100%
Our Global Customers - Cyber Security Thought Leaders
Welcome | Importance | Assets | Top Risks | Mitigation | Audit | Auditing | Checklists | How-Tos | Tools | Guides | Learning | Technicals | Resources

Tokensz

Tokensz


tokensz is a helpful command-line utility that lets IT personnel calculate the size of a user's Windows access token size, and optionally dump groups.


Key Features

  • Designed to help determine if a user may be at risk of being denied logon due to token bloat issues
  • Usually requires admin access to run
  • Calc_groups flag requires running on DC
  • No agent or server installation required
  • Built in USA by Microsoft Corporation


Usage

  • /calc_groups : Calculate and list all the groups that a user is a member of
  • /compute_tokensize : Compute the maximum token size currently required to authenticate the user using Kerberos
  • /dump_groups : Extracts and displays all of the user's token groups relative to server
  • /nopac : Calculates token size without the inclusion of the PAC in the TGT
  • /use_delegation : Causes the tool to simulate the use of Kerberos delegation during token size computation
  • /purge_tickets : Causes the tool to purge all of the tickets for a user prior to starting the token size computation





More Info

  • For more info, please click here


Download

Kerberos Token Size Calculator

Kerberos Token Size Calculator Tool


Kerberos Token Size Calculator is a tool that lets IT personnel easily and instantly calculate the Kerberos token sizes of any or all user accounts in a domain.


Key Features

  • Designed to automate the calculation of Kerberos token sizes for mulitple domain user accounts in a single assessment
  • Does not require admin access to run
  • Does not need to be installed on a DC
  • No agent or server installation required
  • Built in USA by Paramount Defenses


Usage

  1. Launch Gold Finger
  2. Select tool Token-Size Calculator
  3. Select report Compute and list, for multiple domain user accounts, the size of their access tokens, when accessing resources in a specific domain
  4. Click the Get Domains button to enumerate a list of all the domains
  5. Select a domain from Domain drop-down
  6. Select a target type i.e. Member Server / Domain Controller
  7. Enter the account domain's DN in Scope field
  8. Click Gold Finger button
  9. To export the list of all user accounts and their Kerberos token sizes, click Export


More Info

  • For more info, please click here


Download



Top-10 Active Directory Audit Tools Top-10 Active Directory Audit Tools
Our Free Active Directory Audit Tool Our Free Active Directory Audit Tool


Welcome
Who We Are What We Do How We Protect You
Sitemap