Previous

GPO and OU Enum

A Group Policy Object (GPO) is a virtual collection of policy settings. A GPO has a unique name, such as a GUID.

Get-DomainGPO
Get-DomainGPO | Select displayname
Get-DomainGPO -ComputerName student.pentesting.local

#Get machines where the given user is member of a specific group
Get-DomainGPOUserLocalGroupMapping -UserName student1 -Verbose

#Domain
Get-domain

#enumerate all gobal catalogs in the forest

Get-ForestGlobalCatalog

#Get OUs in a domain
Get-DomainOU

#Get GPO for specific name
Get-DomainGPO
Get-DomainGPO -Name "{AB306569-220D-43FF-B03B83E8F4EF8081}"