Active Directory Kerberos kapalı kullanıcıları listeleyen Query

Kerberos

There are two simple ways you can find these accounts in Active Directory.  The first method involves creating a custom LDAP query in Active Directory Users & Computers (see Reference below) and using the LDAP query string below:
(&(objectCategory=person)(userAccountControl:1.2.840.113556.1.4.803:=4194304))
The second method is to use PowerShell to query Active Directory.  Two examples are shown below:
get-aduser  -LDAP "(&(objectCategory=person)(userAccountControl:1.2.840.113556.1.4.803:=4194304))" -properties DoesNotRequirePreAuth
get-aduser -filter * -properties DoesNotRequirePreAuth |where {$_.DoesNotRequirePreAuth -eq "TRUE"}