Skip to content

gpo-enum v1.10.0

Choose a tag to compare

@FlakoJohnson FlakoJohnson released this 04 Jun 15:40

Fixes

  • Flags now work in any position. Go's flag parser stopped at the first positional arg, so gpo-enum ... <DC> -proxy URL silently dropped -proxy (and any flag after the DC), causing SMB to dial direct. Args are now permuted so flags are honored before or after the positional DC.
  • -policy <GUID> no longer enumerates the whole domain. A bare-GUID -policy now does a targeted LDAP lookup for just that GPO (indexed cn= / gPLink substring) and accesses \Policies\{GUID} directly, instead of resolving every GPO name + link and listing every SYSVOL folder first. Big win over high-latency proxy pivots. Display-name / partial -policy still uses the full resolve+filter path.

Verified against the Ludus lab (both GUID and name -policy paths).