Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add AddAllowedToAct logic based on User Account Restrictions property set #34

Merged
merged 2 commits into from
Aug 2, 2022

Conversation

dirkjanm
Copy link
Contributor

This property set contains the msDS-AllowedToActOnBehalfOfOtherIdentity property so if you have write privs on this set you can configure RBCD.

Will add a link to a blog soon with more context.

@dirkjanm
Copy link
Contributor Author

@rvazarkar
Copy link
Contributor

So after discussing this internally, this is some really cool stuff, but we'd like to extract this into a new edge. This is mainly because its hard to remediate without additional details that are related to what's actually happening on the backend. Feel free to propose a new edge name, but we love the work.

Microsoft docs being wrong again is always fun

@rvazarkar rvazarkar merged commit a2cc6c1 into BloodHoundAD:master Aug 2, 2022
@rvazarkar
Copy link
Contributor

Thanks!

@ddlees
Copy link
Contributor

ddlees commented Sep 2, 2022

recheck

@github-actions
Copy link

github-actions bot commented Sep 2, 2022

CLA Assistant Lite bot:
Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.


I have read the CLA Document and I hereby sign the CLA


You can retrigger this bot by commenting recheck in this Pull Request

@ddlees
Copy link
Contributor

ddlees commented Sep 2, 2022

@dirkjanm In an attempt to accept contributions the "right" way and be the best stewards we can be to the FOSS community we have recently published a Contributor License Agreement. Would you please consider reading and signing the CLA linked in the comment above? Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants