CVE-2026-50653 취약점 확인 및 조치방법

# 도메인 컨트롤러/Windows KB/복제 상태
Get-ADDomainController -Filter * | Select-Object HostName,Site,IPv4Address,OperatingSystem
Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 20 HotFixID,InstalledOn,Description
repadmin /replsummary
dcdiag /e /q

# AD CS 역할과 템플릿/CA 확인
Get-WindowsFeature AD-Certificate,ADCS-Cert-Authority,ADCS-Web-Enrollment 2>/dev/null
certutil -config - -ping 2>/dev/null
certutil -catemplates 2>/dev/null

# Entra Connect / Azure AD Connect 버전과 동기화 상태
Get-ItemProperty 'HKLM:SOFTWAREMicrosoftAzure AD Connect' 2>/dev/null | Select-Object ProductVersion
Get-Service ADSync 2>/dev/null
# Synchronization Service Manager에서 connector, last sync, export/import error를 확인합니다.

repadmin /replsummary
dcdiag /e /q
Get-EventLog -LogName Directory Service -EntryType Error,Warning -Newest 30 2>/dev/null
Get-EventLog -LogName System -EntryType Error,Warning -Newest 30 2>/dev/null

# AD CS
certutil -config - -ping 2>/dev/null
Get-Service CertSvc 2>/dev/null

# Entra Connect
Get-Service ADSync 2>/dev/null
# Synchronization Service Manager에서 최근 import/sync/export error와 last sync time 확인

# 대표 사용자의 도메인 로그온, LDAP/LDAPS, 인증서 발급, 클라우드 동기화 반영을 검증합니다.