Locksmith
Detect and fix common misconfigurations in Active Directory Certificate Services.
Mode 0: Identify Issues, Output to Console
This mode scans the current forest and outputs all discovered AD CS issues and possible fixes to the console in List format.
Mode 1: Identify Issues and Fixes, Output to Console
This mode scans the current forest and outputs all discovered AD CS issues and possible fixes to the console in List format.
Mode 2: Identify Issues, Output to CSV
Locksmith Mode 2 scans the current forest and outputs all discovered AD CS issues to ADCSIssues.CSV in the present working directory.
Mode 3: Identify Issues and Fixes, Output to CSV
In Mode 3, Locksmith scans the current forest and outputs all discovered AD CS issues and example fixes to ADCSRemediation.CSV in the present working directory.
Mode 4: Fix All Issues
Mode 4 is the "easy button". Running Locksmith in Mode 4 will identify all misconfigurations and offer to fix each issue. If there is any possible operational impact, Locksmith will warn you.