.. / gpmc.msc

Group Policy Management

Functions:	Domain
Type:	MMC
Toolsets:	GUI RSAT

Domain

Group Policy Management

gpmc.msc /domain:ad.bitsadmin.com

Usecases

Create and link a malicious group policy to systems
Force the update of group policy on all machines in an OU

Comments
For remote domains, this needs to be executed from OffensiveDC. Also use the /domain parameter in the commandline. In View -> Options -> General, uncheck the “Enable trust detection” checkbox. Next, right click the root node -> Add forest

Mitre Att&ck

T1037.003
T1484.001

Detection

Port: 389/UDP
Port: 445/TCP

Updated: 2023-07-01

Contributor: Arris Huijgen (bitsadmin)