Skip to content

Commit 2b83865

Browse files
Update ensure-privileged-accounts-with-sensitive-flag.md
removed references to sensitive computer accounts
1 parent c576fc0 commit 2b83865

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

ATPDocs/ensure-privileged-accounts-with-sensitive-flag.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -34,15 +34,16 @@ For device accounts, setting them to "not delegated" is important to prevent it
3434
The safest approach is to use a PowerShell script to configure the device to prevent it from being used in any delegation scenario, ensuring that credentials on this machine can't be forwarded to access other services.
3535

3636
```
37-
$name = "ComputerA"
38-
Get-ADComputer -Identity $name |
37+
$name = "UserA"
38+
Get-ADUser -Identity $name |
3939
Set-ADAccountControl -AccountNotDelegated:$true
4040
```
4141
Another option is to set the `UserAccountControl` attribute to `NOT_DELEGATED = 0x100000` under the Attribute Editor tab for the exposed device.
4242

4343
For example:
4444

45-
![Screenshot of device profile.](media/ensure-privileged-accounts-with-sensitive-flag/device-profile.png)
45+
![image](https://github.com/user-attachments/assets/48a76abc-19dc-4c98-8740-72e9f2ac95d8)
46+
4647

4748
## Next steps
4849

0 commit comments

Comments
 (0)