Powershell撤消证书
问题描述:
我想删除用户和他的计算机的证书。 我曾尝试:Powershell撤消证书
Import-Module PSPKI
Import-Module ActiveDirectory
$RequesterNameComputer = "A\B$";
$RequesterNameUser = "A\C";
certutil -view -out "RequestID,SerialNumber,RequesterName,RequestType,NotAfter,CommonName" csv > "$env:TEMP\tempcerts.csv";
$Csv = Import-Csv -Path "$env:TEMP\tempcerts.csv";
$csv | Select-Object "requester name" | Group-Object -Property "requester name" | Sort-Object -Property count;
$computer = $csv | Where-Object {$_."requester name" -eq $RequesterNameComputer} | ?{$_."Certificate Template" -like "*PlaygroundComputer"};
$computer
$User = $csv | Where-Object {$_."requester name" -eq $RequesterNameUser} | ?{$_."Certificate Template" -like "*User"};
$User
我知道我必须使用certutil -revoke
但不知道怎么会这样,它会删除所有证书,这表明$计算机和$用户将其调整到我的脚本。
答
Import-Module PSPKI
Import-Module ActiveDirectory
$RequesterNameComputer = "A\B";
$RequesterNameUser = "A\C";
#certutil: display information about the digital certificates that are installed on a DirectAccess client, DirectAccess server, or intranet resource.
certutil -view -out "RequestID,SerialNumber,RequesterName,RequestType,NotAfter,CommonName,Certificate Template" csv > "$env:TEMP\tempcerts.csv";
$Csv = Import-Csv -Path "$env:TEMP\tempcerts.csv";
$csv | Select-Object "requester name" | Group-Object -Property "requester name" | Sort-Object -Property count;
$computer = $csv | Where-Object {$_."requester name" -eq $RequesterNameComputer} | ?{$_."Certificate Template" -like "*PlaygroundComputer"};
$computer
ForEach ($com in $computer){
certutil -revoke $com.'Serial Number' 5;
}
# certutil -installdefaulttemplates
$User = $csv | Where-Object {$_."requester name" -eq $RequesterNameUser} | ?{$_."Certificate Template" -like "*User"};
$User
foreach ($usr in $User){
certutil -revoke $usr.'Serial Number' 5;
}
Remove-Item -Path "$env:TEMP\tempcerts.csv" -Force;
您绝对不想撤销特定用户/计算机的CA.这没有任何意义。你的意思是你想从用户的计算机上删除CA证书吗?或者你想撤销用户的(电脑?)证书吗? –
为什么删除特定的用户/计算机没有任何意义?我想在他离开公司时撤销用户和计算机的证书。 – frhling1
撤销CA没有意义。撤销用户和/或计算机证书是不一样的。 –