Skip to content
← LibraryTechnique entry
AD-GPOPrivilege Escalation

GPO Abuse

Modify a linked GPO (or its files in SYSVOL) to add a local admin / scheduled task on targeted OUs.

§ Where this technique fits

AD-GPO is catalogued under the Privilege Escalation tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.