windapsearch icon indicating copy to clipboard operation
windapsearch copied to clipboard

Missing Domain Admin from enumeration

Open Lexus89 opened this issue 6 years ago • 0 comments

When enumerating Domain Admins with the parameter --da i am missing an account with Domain Admin privileges (also according to net user /do i see "Domain Admins" as a group and also when using net group "Domain Admins" /do.

When i do a search with -m Administrators i do see the account using: DN: CN=Administrators,CN=Builtin. The account i am missing is a Service Account (OU=Service Accounts,OU=Special Accounts). However unfortunately the result of the latter also contains other group names such as "Domain Admins", "Enterprise Admins" and other things making it ugly output with even SID's in between.

Lexus89 avatar Oct 02 '18 13:10 Lexus89