• Group Policy provides the ability to manage configuration and changes easily and centrally in AD.
• Allows configuration of – • Security settings • Registry-based policy settings • Group policy preferences like startup/shutdown/log-on/logoff scripts settings • Software installation
• GPO can be abused for various attacks like privesc, backdoors, persistence etc.

Get list of GPO in current domain.

Get-DomainGPO

Get GPO(s) which use Restricted Groups or groups.xml for interesting users

Get-DomainGPOLocalGroup

Get users which are in a local group of a machine using GPO

Get-DomainGPOComputerLocalGroupMapping -ComputerIdentity dcorp-student148

Get machines where the given user is member of a specific group

Get-DomainGPOUserLocalGroupMapping -Identity student148 -Verbose