From b582bb24b3628fc6213acf45c2b639dece880cd5 Mon Sep 17 00:00:00 2001 From: Tom Frost Date: Tue, 17 Feb 2026 13:03:34 +0100 Subject: [PATCH] Bump Test-WeakADPasswords to v1.4.1 --- CHANGELOG.md | 12 ++++++++++++ Test-WeakADPasswords.ps1 | 4 ++-- 2 files changed, 14 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 04e69db..a9b8f08 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,17 @@ # Changelog +## 2026-02-17 + +### Test-WeakADPasswords.ps1 v1.4.1 +Changed: +- Added credential pre-validation against the selected domain controller before running `Get-ADReplAccount`, including retry prompts for rejected credentials. +- Improved error diagnostics to distinguish invalid credentials from missing replication permissions (`Access is denied`). +- Added optional `-Credential` parameter to `Test-WeakADPasswords` for callers that need to provide credentials non-interactively. + +### README.md +Changed: +- Updated weak-password testing documentation to reflect credential pre-check behavior and added a short troubleshooting section for common authentication/permissions failures. + ## 2025-10-30 ### Update-KHDB.ps1 v2.0.0 diff --git a/Test-WeakADPasswords.ps1 b/Test-WeakADPasswords.ps1 index ca952e9..aab3880 100644 --- a/Test-WeakADPasswords.ps1 +++ b/Test-WeakADPasswords.ps1 @@ -8,7 +8,7 @@ ################################################## ## Project: Elysium ## ## File: Test-WeakADPasswords.ps1 ## -## Version: 1.4.0 ## +## Version: 1.4.1 ## ## Support: support@cqre.net ## ################################################## @@ -92,7 +92,7 @@ function Invoke-UsageBeacon { if ($normalizedMethod -in @('POST', 'PUT')) { $payload = [ordered]@{ script = 'Test-WeakADPasswords' - version = '1.3.3' + version = '1.4.1' ranAtUtc = (Get-Date).ToUniversalTime().ToString('o') } if (-not [string]::IsNullOrWhiteSpace($InstanceId)) {