Check-RC4SPNs.ps1

# Import the Active Directory module
Import-Module ActiveDirectory

# Enumerate all user accounts with SPNs
$usersWithSPN = Get-ADUser -Filter {ServicePrincipalName -ne "$null"} -Properties ServicePrincipalName, msDS-SupportedEncryptionTypes

# Iterate through each user and check for RC4 encryption
foreach ($user in $usersWithSPN) {
    $userName = $user.SamAccountName
    $spns = $user.ServicePrincipalName
    $encryptionTypes = $user."msDS-SupportedEncryptionTypes"
    
    # Check if RC4 is enabled (bit flag 0x4)
    $isRC4Enabled = $encryptionTypes -band 0x4

    # Output the results
    if ($isRC4Enabled) {
        Write-Host "User: $userName has RC4 enabled. SPNs: $spns"
    } else {
        Write-Host "User: $userName does not have RC4 enabled. SPNs: $spns"
    }
}