ADQuery

ADQuery is meant to help with enumeration of GPOs, OUs they apply to, principals within those OUs, Groups and Group Membership, and Foreign Security Principals. Single User and Computer objects can be enumerated too

Load in memory

iex(new-object net.webclient).downloadstring('https://raw.githubusercontent.com/Leo4j/ADQuery/main/ADQuery.ps1')

Enumerate for GPOs

ADQuery -GPOs

ADQuery -GPOName "Computer - LAPS"

Enumerate for OUs

ADQuery -OUs

ADQuery -OUName "AllComputers"

ADQuery -OUDistName "OU=AllComputers,DC=ferrari,DC=local"

Enumerate for Groups

ADQuery -Groups

ADQuery -GroupName "Domain Admins"

Enumerate for a User Object

ADQuery -UserName tomcat

Enumerate for a Computer Object

ADQuery -ComputerName CA01$

Enumerate for Foreign Security Principals

ADQuery -ForeignPrincipals

Convert SID to Principal

ADQuery -ConvertSID "S-1-5-21-2741628602-1183230269-2439862772-1605"