This repository has been archived by the owner on Sep 2, 2022. It is now read-only.

Sharphound ignores inherited "Reset password"-access when applied via OU to "Descendant User objects" #58

Closed

bravo2day opened this issue Mar 4, 2019 · 1 comment

bravo2day commented Mar 4, 2019

Sharphound.exe: 80F8EDE906A1237FBE6DA83591A66C0A1EA75B0EF1D8CCDDCD67C3BA1498057C (latest)

This works and is written to the csv:
Access: Write all properties
Applies to: this object and all descendant objects

Access: "Reset password".
Applies to: this object only

The following permissions are ignored and not written to the csv:

Access: "Reset password"
Applies to: Descendant User objects

The same seems to apply to situations where the permissions are set to apply to "Descendant Computer objects".

Contributor

rvazarkar commented Mar 7, 2019

Fixed in BloodHoundAD/SharpHound@95e6cb4

rvazarkar closed this as completed

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.