[{ "attributes": { "cn": [ "Shared Support Accounts" ], "dSCorePropagationData": [ "1601-01-01 00:00:00+00:00" ], "distinguishedName": [ "CN=Shared Support Accounts,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483646 ], "instanceType": [ 4 ], "member": [ "CN=support,CN=Users,DC=support,DC=htb" ], "name": [ "Shared Support Accounts" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{a6e65275-b8d8-4609-abc6-0059d0665017}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-1103" ], "sAMAccountName": [ "Shared Support Accounts" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 12635 ], "uSNCreated": [ 12599 ], "whenChanged": [ "2022-05-28 11:12:04+00:00" ], "whenCreated": [ "2022-05-28 11:11:32+00:00" ] }, "dn": "CN=Shared Support Accounts,CN=Users,DC=support,DC=htb" },{ "attributes": { "cn": [ "DnsUpdateProxy" ], "dSCorePropagationData": [ "1601-01-01 00:00:00+00:00" ], "description": [ "DNS clients who are permitted to perform dynamic updates on behalf of some other clients (such as DHCP servers)." ], "distinguishedName": [ "CN=DnsUpdateProxy,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483646 ], "instanceType": [ 4 ], "name": [ "DnsUpdateProxy" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{c6a0cf35-7598-4656-a0d1-349bdbb7072f}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-1102" ], "sAMAccountName": [ "DnsUpdateProxy" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 12492 ], "uSNCreated": [ 12492 ], "whenChanged": [ "2022-05-28 11:05:17+00:00" ], "whenCreated": [ "2022-05-28 11:05:17+00:00" ] }, "dn": "CN=DnsUpdateProxy,CN=Users,DC=support,DC=htb" },{ "attributes": { "cn": [ "DnsAdmins" ], "dSCorePropagationData": [ "1601-01-01 00:00:00+00:00" ], "description": [ "DNS Administrators Group" ], "distinguishedName": [ "CN=DnsAdmins,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483644 ], "instanceType": [ 4 ], "name": [ "DnsAdmins" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{756aaeda-6583-46f0-ae22-0871e56fc790}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-1101" ], "sAMAccountName": [ "DnsAdmins" ], "sAMAccountType": [ 536870912 ], "uSNChanged": [ 12489 ], "uSNCreated": [ 12487 ], "whenChanged": [ "2022-05-28 11:05:17+00:00" ], "whenCreated": [ "2022-05-28 11:05:17+00:00" ] }, "dn": "CN=DnsAdmins,CN=Users,DC=support,DC=htb" },{ "attributes": { "adminCount": [ 1 ], "cn": [ "Enterprise Key Admins" ], "dSCorePropagationData": [ "2022-05-28 11:19:47+00:00", "2022-05-28 11:03:44+00:00", "1601-01-01 00:04:16+00:00" ], "description": [ "Members of this group can perform administrative actions on key objects within the forest." ], "distinguishedName": [ "CN=Enterprise Key Admins,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483640 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Enterprise Key Admins" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{96c375f9-3eb9-4692-aa27-3b693ba39495}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-527" ], "sAMAccountName": [ "Enterprise Key Admins" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 13075 ], "uSNCreated": [ 12453 ], "whenChanged": [ "2022-05-28 11:19:47+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Enterprise Key Admins,CN=Users,DC=support,DC=htb" },{ "attributes": { "adminCount": [ 1 ], "cn": [ "Key Admins" ], "dSCorePropagationData": [ "2022-05-28 11:19:47+00:00", "2022-05-28 11:03:44+00:00", "1601-01-01 00:04:16+00:00" ], "description": [ "Members of this group can perform administrative actions on key objects within the domain." ], "distinguishedName": [ "CN=Key Admins,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483646 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Key Admins" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{ae49ef96-4279-4ad0-ac24-eec26bfd58ca}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-526" ], "sAMAccountName": [ "Key Admins" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 13072 ], "uSNCreated": [ 12450 ], "whenChanged": [ "2022-05-28 11:19:47+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Key Admins,CN=Users,DC=support,DC=htb" },{ "attributes": { "cn": [ "Protected Users" ], "dSCorePropagationData": [ "2022-05-28 11:03:44+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group are afforded additional protections against authentication security threats. See http://go.microsoft.com/fwlink/?LinkId=298939 for more information." ], "distinguishedName": [ "CN=Protected Users,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483646 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Protected Users" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{ccba6359-4618-4d71-81be-cb85b2e8a30d}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-525" ], "sAMAccountName": [ "Protected Users" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 12447 ], "uSNCreated": [ 12445 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Protected Users,CN=Users,DC=support,DC=htb" },{ "attributes": { "cn": [ "Cloneable Domain Controllers" ], "dSCorePropagationData": [ "2022-05-28 11:03:44+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group that are domain controllers may be cloned." ], "distinguishedName": [ "CN=Cloneable Domain Controllers,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483646 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Cloneable Domain Controllers" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{b9db8fea-424a-4556-84d6-1b18849d02ec}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-522" ], "sAMAccountName": [ "Cloneable Domain Controllers" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 12442 ], "uSNCreated": [ 12440 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Cloneable Domain Controllers,CN=Users,DC=support,DC=htb" },{ "attributes": { "cn": [ "Enterprise Read-only Domain Controllers" ], "dSCorePropagationData": [ "2022-05-28 11:03:44+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group are Read-Only Domain Controllers in the enterprise" ], "distinguishedName": [ "CN=Enterprise Read-only Domain Controllers,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483640 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Enterprise Read-only Domain Controllers" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{4712ff52-f03e-40bd-ad4f-77a470fb3537}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-498" ], "sAMAccountName": [ "Enterprise Read-only Domain Controllers" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 12431 ], "uSNCreated": [ 12429 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Enterprise Read-only Domain Controllers,CN=Users,DC=support,DC=htb" },{ "attributes": { "adminCount": [ 1 ], "cn": [ "Read-only Domain Controllers" ], "dSCorePropagationData": [ "2022-05-28 11:19:47+00:00", "2022-05-28 11:03:44+00:00", "1601-01-01 00:04:16+00:00" ], "description": [ "Members of this group are Read-Only Domain Controllers in the domain" ], "distinguishedName": [ "CN=Read-only Domain Controllers,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483646 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "memberOf": [ "CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb" ], "name": [ "Read-only Domain Controllers" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{60b921a3-973d-4ea8-a1c2-7a800cbdc960}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-521" ], "sAMAccountName": [ "Read-only Domain Controllers" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 13089 ], "uSNCreated": [ 12419 ], "whenChanged": [ "2022-05-28 11:19:47+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Read-only Domain Controllers,CN=Users,DC=support,DC=htb" },{ "attributes": { "cn": [ "Denied RODC Password Replication Group" ], "dSCorePropagationData": [ "2022-05-28 11:03:44+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members in this group cannot have their passwords replicated to any read-only domain controllers in the domain" ], "distinguishedName": [ "CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483644 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "member": [ "CN=Read-only Domain Controllers,CN=Users,DC=support,DC=htb", "CN=Group Policy Creator Owners,CN=Users,DC=support,DC=htb", "CN=Domain Admins,CN=Users,DC=support,DC=htb", "CN=Cert Publishers,CN=Users,DC=support,DC=htb", "CN=Enterprise Admins,CN=Users,DC=support,DC=htb", "CN=Schema Admins,CN=Users,DC=support,DC=htb", "CN=Domain Controllers,CN=Users,DC=support,DC=htb", "CN=krbtgt,CN=Users,DC=support,DC=htb" ], "name": [ "Denied RODC Password Replication Group" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{ab817e25-ea74-4304-b9df-a0259904d719}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-572" ], "sAMAccountName": [ "Denied RODC Password Replication Group" ], "sAMAccountType": [ 536870912 ], "uSNChanged": [ 12433 ], "uSNCreated": [ 12405 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb" },{ "attributes": { "cn": [ "Allowed RODC Password Replication Group" ], "dSCorePropagationData": [ "2022-05-28 11:03:44+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members in this group can have their passwords replicated to all read-only domain controllers in the domain" ], "distinguishedName": [ "CN=Allowed RODC Password Replication Group,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483644 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Allowed RODC Password Replication Group" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{45a9d873-2408-4fd5-bb90-e0fdafde6aaf}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-571" ], "sAMAccountName": [ "Allowed RODC Password Replication Group" ], "sAMAccountType": [ 536870912 ], "uSNChanged": [ 12404 ], "uSNCreated": [ 12402 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Allowed RODC Password Replication Group,CN=Users,DC=support,DC=htb" },{ "attributes": { "cn": [ "Terminal Server License Servers" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group can update user accounts in Active Directory with information about license issuance, for the purpose of tracking and reporting TS Per User CAL usage" ], "distinguishedName": [ "CN=Terminal Server License Servers,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Terminal Server License Servers" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{54ac77f0-d469-4c1b-b8c9-806b35d0bfc4}" ], "objectSid": [ "S-1-5-32-561" ], "sAMAccountName": [ "Terminal Server License Servers" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 12377 ], "uSNCreated": [ 12375 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Terminal Server License Servers,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Windows Authorization Access Group" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group have access to the computed tokenGroupsGlobalAndUniversal attribute on User objects" ], "distinguishedName": [ "CN=Windows Authorization Access Group,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "member": [ "CN=S-1-5-9,CN=ForeignSecurityPrincipals,DC=support,DC=htb" ], "name": [ "Windows Authorization Access Group" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{5487a661-0e1c-4101-84f7-5479095d3165}" ], "objectSid": [ "S-1-5-32-560" ], "sAMAccountName": [ "Windows Authorization Access Group" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 12396 ], "uSNCreated": [ 12372 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Windows Authorization Access Group,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Incoming Forest Trust Builders" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group can create incoming, one-way trusts to this forest" ], "distinguishedName": [ "CN=Incoming Forest Trust Builders,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Incoming Forest Trust Builders" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{c61828b5-11ad-4030-8762-22da7e66ef05}" ], "objectSid": [ "S-1-5-32-557" ], "sAMAccountName": [ "Incoming Forest Trust Builders" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 12371 ], "uSNCreated": [ 12369 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Incoming Forest Trust Builders,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Pre-Windows 2000 Compatible Access" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "A backward compatibility group which allows read access on all users and groups in the domain" ], "distinguishedName": [ "CN=Pre-Windows 2000 Compatible Access,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "member": [ "CN=S-1-5-11,CN=ForeignSecurityPrincipals,DC=support,DC=htb" ], "name": [ "Pre-Windows 2000 Compatible Access" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{5b505648-8271-43a5-90ef-4060ed68c739}" ], "objectSid": [ "S-1-5-32-554" ], "sAMAccountName": [ "Pre-Windows 2000 Compatible Access" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 12393 ], "uSNCreated": [ 12366 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Pre-Windows 2000 Compatible Access,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "adminCount": [ 1 ], "cn": [ "Account Operators" ], "dSCorePropagationData": [ "2022-05-28 11:19:47+00:00", "2022-05-28 11:03:43+00:00", "1601-01-01 00:04:16+00:00" ], "description": [ "Members can administer domain user and group accounts" ], "distinguishedName": [ "CN=Account Operators,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Account Operators" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{4642e074-f318-4afd-af18-184070c149c7}" ], "objectSid": [ "S-1-5-32-548" ], "sAMAccountName": [ "Account Operators" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 13083 ], "uSNCreated": [ 12363 ], "whenChanged": [ "2022-05-28 11:19:47+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Account Operators,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "adminCount": [ 1 ], "cn": [ "Server Operators" ], "dSCorePropagationData": [ "2022-05-28 11:19:47+00:00", "2022-05-28 11:03:43+00:00", "1601-01-01 00:04:16+00:00" ], "description": [ "Members can administer domain servers" ], "distinguishedName": [ "CN=Server Operators,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Server Operators" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{d1186a0c-1a06-4928-8696-c59c33b4f37a}" ], "objectSid": [ "S-1-5-32-549" ], "sAMAccountName": [ "Server Operators" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 13078 ], "uSNCreated": [ 12360 ], "whenChanged": [ "2022-05-28 11:19:47+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Server Operators,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "RAS and IAS Servers" ], "dSCorePropagationData": [ "2022-05-28 11:03:44+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Servers in this group can access remote access properties of users" ], "distinguishedName": [ "CN=RAS and IAS Servers,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483644 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "RAS and IAS Servers" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{ad87386b-bd1b-4783-9307-e0659bebe5ce}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-553" ], "sAMAccountName": [ "RAS and IAS Servers" ], "sAMAccountType": [ 536870912 ], "uSNChanged": [ 12359 ], "uSNCreated": [ 12357 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=RAS and IAS Servers,CN=Users,DC=support,DC=htb" },{ "attributes": { "cn": [ "Group Policy Creator Owners" ], "dSCorePropagationData": [ "2022-05-28 11:03:44+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members in this group can modify group policy for the domain" ], "distinguishedName": [ "CN=Group Policy Creator Owners,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483646 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "member": [ "CN=Administrator,CN=Users,DC=support,DC=htb" ], "memberOf": [ "CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb" ], "name": [ "Group Policy Creator Owners" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{6e67f957-2c8a-4274-9163-489793879786}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-520" ], "sAMAccountName": [ "Group Policy Creator Owners" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 12391 ], "uSNCreated": [ 12354 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Group Policy Creator Owners,CN=Users,DC=support,DC=htb" },{ "attributes": { "cn": [ "Domain Guests" ], "dSCorePropagationData": [ "2022-05-28 11:03:44+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "All domain guests" ], "distinguishedName": [ "CN=Domain Guests,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483646 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "memberOf": [ "CN=Guests,CN=Builtin,DC=support,DC=htb" ], "name": [ "Domain Guests" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{8d4e8816-2dd6-4ef3-99f0-e26685df13f2}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-514" ], "sAMAccountName": [ "Domain Guests" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 12353 ], "uSNCreated": [ 12351 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Domain Guests,CN=Users,DC=support,DC=htb" },{ "attributes": { "cn": [ "Domain Users" ], "dSCorePropagationData": [ "2022-05-28 11:03:44+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "All domain users" ], "distinguishedName": [ "CN=Domain Users,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483646 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "memberOf": [ "CN=Users,CN=Builtin,DC=support,DC=htb" ], "name": [ "Domain Users" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{ee3f8fd2-61df-4360-868a-a237fdaf6a3f}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-513" ], "sAMAccountName": [ "Domain Users" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 12350 ], "uSNCreated": [ 12348 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Domain Users,CN=Users,DC=support,DC=htb" },{ "attributes": { "adminCount": [ 1 ], "cn": [ "Domain Admins" ], "dSCorePropagationData": [ "2022-05-28 11:19:47+00:00", "2022-05-28 11:03:44+00:00", "1601-01-01 00:04:16+00:00" ], "description": [ "Designated administrators of the domain" ], "distinguishedName": [ "CN=Domain Admins,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483646 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "member": [ "CN=Administrator,CN=Users,DC=support,DC=htb" ], "memberOf": [ "CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb", "CN=Administrators,CN=Builtin,DC=support,DC=htb" ], "name": [ "Domain Admins" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{3aeb0b4f-cc91-4c2d-805b-4ab844745e7d}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-512" ], "sAMAccountName": [ "Domain Admins" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 13069 ], "uSNCreated": [ 12345 ], "whenChanged": [ "2022-05-28 11:19:47+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Domain Admins,CN=Users,DC=support,DC=htb" },{ "attributes": { "cn": [ "Cert Publishers" ], "dSCorePropagationData": [ "2022-05-28 11:03:44+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group are permitted to publish certificates to the directory" ], "distinguishedName": [ "CN=Cert Publishers,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483644 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "memberOf": [ "CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb" ], "name": [ "Cert Publishers" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{b8d00c3c-e1ef-4a03-b31f-1ca260e7388f}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-517" ], "sAMAccountName": [ "Cert Publishers" ], "sAMAccountType": [ 536870912 ], "uSNChanged": [ 12344 ], "uSNCreated": [ 12342 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Cert Publishers,CN=Users,DC=support,DC=htb" },{ "attributes": { "adminCount": [ 1 ], "cn": [ "Enterprise Admins" ], "dSCorePropagationData": [ "2022-05-28 11:19:47+00:00", "2022-05-28 11:03:44+00:00", "1601-01-01 00:04:16+00:00" ], "description": [ "Designated administrators of the enterprise" ], "distinguishedName": [ "CN=Enterprise Admins,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483640 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "member": [ "CN=Administrator,CN=Users,DC=support,DC=htb" ], "memberOf": [ "CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb", "CN=Administrators,CN=Builtin,DC=support,DC=htb" ], "name": [ "Enterprise Admins" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{685a77ab-0815-46c8-87e7-5f6e9f400ed4}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-519" ], "sAMAccountName": [ "Enterprise Admins" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 13073 ], "uSNCreated": [ 12339 ], "whenChanged": [ "2022-05-28 11:19:47+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Enterprise Admins,CN=Users,DC=support,DC=htb" },{ "attributes": { "adminCount": [ 1 ], "cn": [ "Schema Admins" ], "dSCorePropagationData": [ "2022-05-28 11:19:47+00:00", "2022-05-28 11:03:44+00:00", "1601-01-01 00:04:16+00:00" ], "description": [ "Designated administrators of the schema" ], "distinguishedName": [ "CN=Schema Admins,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483640 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "member": [ "CN=Administrator,CN=Users,DC=support,DC=htb" ], "memberOf": [ "CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb" ], "name": [ "Schema Admins" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{715589b7-0bd9-4f31-9781-b4a27940716d}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-518" ], "sAMAccountName": [ "Schema Admins" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 13074 ], "uSNCreated": [ 12336 ], "whenChanged": [ "2022-05-28 11:19:47+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Schema Admins,CN=Users,DC=support,DC=htb" },{ "attributes": { "adminCount": [ 1 ], "cn": [ "Domain Controllers" ], "dSCorePropagationData": [ "2022-05-28 11:19:47+00:00", "2022-05-28 11:03:44+00:00", "1601-01-01 00:04:16+00:00" ], "description": [ "All domain controllers in the domain" ], "distinguishedName": [ "CN=Domain Controllers,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483646 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "memberOf": [ "CN=Denied RODC Password Replication Group,CN=Users,DC=support,DC=htb" ], "name": [ "Domain Controllers" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{e88bde74-7080-40f6-b090-214563aad25a}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-516" ], "sAMAccountName": [ "Domain Controllers" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 13088 ], "uSNCreated": [ 12333 ], "whenChanged": [ "2022-05-28 11:19:47+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Domain Controllers,CN=Users,DC=support,DC=htb" },{ "attributes": { "cn": [ "Domain Computers" ], "dSCorePropagationData": [ "2022-05-28 11:03:44+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "All workstations and servers joined to the domain" ], "distinguishedName": [ "CN=Domain Computers,CN=Users,DC=support,DC=htb" ], "groupType": [ -2147483646 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Domain Computers" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{89d68a14-ca6e-41af-85bb-67620b444f7b}" ], "objectSid": [ "S-1-5-21-1677581083-3380853377-188903654-515" ], "sAMAccountName": [ "Domain Computers" ], "sAMAccountType": [ 268435456 ], "uSNChanged": [ 12332 ], "uSNCreated": [ 12330 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:03:43+00:00" ] }, "dn": "CN=Domain Computers,CN=Users,DC=support,DC=htb" },{ "attributes": { "cn": [ "Storage Replica Administrators" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group have complete and unrestricted access to all features of Storage Replica." ], "distinguishedName": [ "CN=Storage Replica Administrators,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Storage Replica Administrators" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{12763118-603d-48f2-a5b6-e36c89bd02ac}" ], "objectSid": [ "S-1-5-32-582" ], "sAMAccountName": [ "Storage Replica Administrators" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8232 ], "uSNCreated": [ 8232 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Storage Replica Administrators,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Remote Management Users" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group can access WMI resources over management protocols (such as WS-Management via the Windows Remote Management service). This applies only to WMI namespaces that grant access to the user." ], "distinguishedName": [ "CN=Remote Management Users,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "member": [ "CN=support,CN=Users,DC=support,DC=htb" ], "name": [ "Remote Management Users" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{0b441c6c-db20-4956-be7f-b98c28bf12a2}" ], "objectSid": [ "S-1-5-32-580" ], "sAMAccountName": [ "Remote Management Users" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 12632 ], "uSNCreated": [ 8231 ], "whenChanged": [ "2022-05-28 11:12:04+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Remote Management Users,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Access Control Assistance Operators" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group can remotely query authorization attributes and permissions for resources on this computer." ], "distinguishedName": [ "CN=Access Control Assistance Operators,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Access Control Assistance Operators" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{645c8c48-dfe8-47ed-90d5-b91a83f3fac6}" ], "objectSid": [ "S-1-5-32-579" ], "sAMAccountName": [ "Access Control Assistance Operators" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8230 ], "uSNCreated": [ 8230 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Access Control Assistance Operators,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Hyper-V Administrators" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group have complete and unrestricted access to all features of Hyper-V." ], "distinguishedName": [ "CN=Hyper-V Administrators,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Hyper-V Administrators" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{49e8340c-1673-4887-a82f-2752ee68bee0}" ], "objectSid": [ "S-1-5-32-578" ], "sAMAccountName": [ "Hyper-V Administrators" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8229 ], "uSNCreated": [ 8229 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Hyper-V Administrators,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "RDS Management Servers" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Servers in this group can perform routine administrative actions on servers running Remote Desktop Services. This group needs to be populated on all servers in a Remote Desktop Services deployment. The servers running the RDS Central Management service must be included in this group." ], "distinguishedName": [ "CN=RDS Management Servers,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "RDS Management Servers" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{f978f2c5-f3f7-48d7-917d-10b79b042851}" ], "objectSid": [ "S-1-5-32-577" ], "sAMAccountName": [ "RDS Management Servers" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8228 ], "uSNCreated": [ 8228 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=RDS Management Servers,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "RDS Endpoint Servers" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Servers in this group run virtual machines and host sessions where users RemoteApp programs and personal virtual desktops run. This group needs to be populated on servers running RD Connection Broker. RD Session Host servers and RD Virtualization Host servers used in the deployment need to be in this group." ], "distinguishedName": [ "CN=RDS Endpoint Servers,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "RDS Endpoint Servers" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{9dd523af-5b44-4201-b02f-07838d96c8f6}" ], "objectSid": [ "S-1-5-32-576" ], "sAMAccountName": [ "RDS Endpoint Servers" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8227 ], "uSNCreated": [ 8227 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=RDS Endpoint Servers,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "RDS Remote Access Servers" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Servers in this group enable users of RemoteApp programs and personal virtual desktops access to these resources. In Internet-facing deployments, these servers are typically deployed in an edge network. This group needs to be populated on servers running RD Connection Broker. RD Gateway servers and RD Web Access servers used in the deployment need to be in this group." ], "distinguishedName": [ "CN=RDS Remote Access Servers,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "RDS Remote Access Servers" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{6f5b5ede-dd9c-4e85-b640-b0fe3c810bfc}" ], "objectSid": [ "S-1-5-32-575" ], "sAMAccountName": [ "RDS Remote Access Servers" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8226 ], "uSNCreated": [ 8226 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=RDS Remote Access Servers,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Certificate Service DCOM Access" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group are allowed to connect to Certification Authorities in the enterprise" ], "distinguishedName": [ "CN=Certificate Service DCOM Access,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Certificate Service DCOM Access" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{38793501-74e5-44a3-a70d-d7adfd8e4027}" ], "objectSid": [ "S-1-5-32-574" ], "sAMAccountName": [ "Certificate Service DCOM Access" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8225 ], "uSNCreated": [ 8225 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Certificate Service DCOM Access,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Event Log Readers" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group can read event logs from local machine" ], "distinguishedName": [ "CN=Event Log Readers,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Event Log Readers" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{4a4ea108-e60e-4d0b-b619-ec2fcb50a999}" ], "objectSid": [ "S-1-5-32-573" ], "sAMAccountName": [ "Event Log Readers" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8224 ], "uSNCreated": [ 8224 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Event Log Readers,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Cryptographic Operators" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members are authorized to perform cryptographic operations." ], "distinguishedName": [ "CN=Cryptographic Operators,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Cryptographic Operators" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{6187c3fb-08cc-4f26-a44d-25c7f7d66437}" ], "objectSid": [ "S-1-5-32-569" ], "sAMAccountName": [ "Cryptographic Operators" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8223 ], "uSNCreated": [ 8223 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Cryptographic Operators,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "IIS_IUSRS" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Built-in group used by Internet Information Services." ], "distinguishedName": [ "CN=IIS_IUSRS,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "member": [ "CN=S-1-5-17,CN=ForeignSecurityPrincipals,DC=support,DC=htb" ], "name": [ "IIS_IUSRS" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{f8649a4f-7ea1-4afe-b46b-adc980900e86}" ], "objectSid": [ "S-1-5-32-568" ], "sAMAccountName": [ "IIS_IUSRS" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8222 ], "uSNCreated": [ 8219 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=IIS_IUSRS,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Distributed COM Users" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members are allowed to launch, activate and use Distributed COM objects on this machine." ], "distinguishedName": [ "CN=Distributed COM Users,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Distributed COM Users" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{e1cb42ca-370a-41db-94d4-1d9ec98b3170}" ], "objectSid": [ "S-1-5-32-562" ], "sAMAccountName": [ "Distributed COM Users" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8218 ], "uSNCreated": [ 8218 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Distributed COM Users,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Performance Log Users" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group may schedule logging of performance counters, enable trace providers, and collect event traces both locally and via remote access to this computer" ], "distinguishedName": [ "CN=Performance Log Users,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Performance Log Users" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{08a4fb3a-b86f-43f0-a776-f4170e25cc9a}" ], "objectSid": [ "S-1-5-32-559" ], "sAMAccountName": [ "Performance Log Users" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8217 ], "uSNCreated": [ 8217 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Performance Log Users,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Performance Monitor Users" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members of this group can access performance counter data locally and remotely" ], "distinguishedName": [ "CN=Performance Monitor Users,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Performance Monitor Users" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{ad86ea99-403f-422c-a8cc-1df3a2280f1d}" ], "objectSid": [ "S-1-5-32-558" ], "sAMAccountName": [ "Performance Monitor Users" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8216 ], "uSNCreated": [ 8216 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Performance Monitor Users,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Network Configuration Operators" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members in this group can have some administrative privileges to manage configuration of networking features" ], "distinguishedName": [ "CN=Network Configuration Operators,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Network Configuration Operators" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{f88f6076-cf69-41b2-b187-3f306184a93e}" ], "objectSid": [ "S-1-5-32-556" ], "sAMAccountName": [ "Network Configuration Operators" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8215 ], "uSNCreated": [ 8215 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Network Configuration Operators,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Remote Desktop Users" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Members in this group are granted the right to logon remotely" ], "distinguishedName": [ "CN=Remote Desktop Users,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Remote Desktop Users" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{68505421-ea8e-4f5d-8316-bc1c66f9bb95}" ], "objectSid": [ "S-1-5-32-555" ], "sAMAccountName": [ "Remote Desktop Users" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 8214 ], "uSNCreated": [ 8214 ], "whenChanged": [ "2022-05-28 11:01:56+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Remote Desktop Users,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "adminCount": [ 1 ], "cn": [ "Replicator" ], "dSCorePropagationData": [ "2022-05-28 11:19:47+00:00", "2022-05-28 11:03:43+00:00", "1601-01-01 00:04:16+00:00" ], "description": [ "Supports file replication in a domain" ], "distinguishedName": [ "CN=Replicator,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Replicator" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{a43fb4dd-d1a4-42c4-b62b-90a8cd946929}" ], "objectSid": [ "S-1-5-32-552" ], "sAMAccountName": [ "Replicator" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 13085 ], "uSNCreated": [ 8213 ], "whenChanged": [ "2022-05-28 11:19:47+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Replicator,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "adminCount": [ 1 ], "cn": [ "Backup Operators" ], "dSCorePropagationData": [ "2022-05-28 11:19:47+00:00", "2022-05-28 11:03:43+00:00", "1601-01-01 00:04:16+00:00" ], "description": [ "Backup Operators can override security restrictions for the sole purpose of backing up or restoring files" ], "distinguishedName": [ "CN=Backup Operators,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Backup Operators" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{08394847-67d8-46b6-a20e-7f5568733a05}" ], "objectSid": [ "S-1-5-32-551" ], "sAMAccountName": [ "Backup Operators" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 13082 ], "uSNCreated": [ 8212 ], "whenChanged": [ "2022-05-28 11:19:47+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Backup Operators,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "adminCount": [ 1 ], "cn": [ "Print Operators" ], "dSCorePropagationData": [ "2022-05-28 11:19:47+00:00", "2022-05-28 11:03:43+00:00", "1601-01-01 00:04:16+00:00" ], "description": [ "Members can administer printers installed on domain controllers" ], "distinguishedName": [ "CN=Print Operators,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "name": [ "Print Operators" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{1ae25623-2d0c-41ba-8849-1a5af8d1c8b6}" ], "objectSid": [ "S-1-5-32-550" ], "sAMAccountName": [ "Print Operators" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 13080 ], "uSNCreated": [ 8211 ], "whenChanged": [ "2022-05-28 11:19:47+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Print Operators,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Guests" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted" ], "distinguishedName": [ "CN=Guests,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "member": [ "CN=Domain Guests,CN=Users,DC=support,DC=htb", "CN=Guest,CN=Users,DC=support,DC=htb" ], "name": [ "Guests" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{4d18e3c5-48ec-4fbb-ad0e-41c5e5684942}" ], "objectSid": [ "S-1-5-32-546" ], "sAMAccountName": [ "Guests" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 12383 ], "uSNCreated": [ 8208 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Guests,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "cn": [ "Users" ], "dSCorePropagationData": [ "2022-05-28 11:03:43+00:00", "1601-01-01 00:00:01+00:00" ], "description": [ "Users are prevented from making accidental or intentional system-wide changes and can run most applications" ], "distinguishedName": [ "CN=Users,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "member": [ "CN=Domain Users,CN=Users,DC=support,DC=htb", "CN=S-1-5-11,CN=ForeignSecurityPrincipals,DC=support,DC=htb", "CN=S-1-5-4,CN=ForeignSecurityPrincipals,DC=support,DC=htb" ], "name": [ "Users" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{0d98d3da-a992-49b4-a6a3-5b1fb60c89af}" ], "objectSid": [ "S-1-5-32-545" ], "sAMAccountName": [ "Users" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 12381 ], "uSNCreated": [ 8202 ], "whenChanged": [ "2022-05-28 11:03:43+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Users,CN=Builtin,DC=support,DC=htb" },{ "attributes": { "adminCount": [ 1 ], "cn": [ "Administrators" ], "dSCorePropagationData": [ "2022-05-28 11:19:47+00:00", "2022-05-28 11:03:43+00:00", "1601-01-01 00:04:16+00:00" ], "description": [ "Administrators have complete and unrestricted access to the computer/domain" ], "distinguishedName": [ "CN=Administrators,CN=Builtin,DC=support,DC=htb" ], "groupType": [ -2147483643 ], "instanceType": [ 4 ], "isCriticalSystemObject": [ true ], "member": [ "CN=Domain Admins,CN=Users,DC=support,DC=htb", "CN=Enterprise Admins,CN=Users,DC=support,DC=htb", "CN=Administrator,CN=Users,DC=support,DC=htb" ], "name": [ "Administrators" ], "objectCategory": [ "CN=Group,CN=Schema,CN=Configuration,DC=support,DC=htb" ], "objectClass": [ "top", "group" ], "objectGUID": [ "{878a5a09-0d69-4bf6-b975-3bc4ae43dc78}" ], "objectSid": [ "S-1-5-32-544" ], "sAMAccountName": [ "Administrators" ], "sAMAccountType": [ 536870912 ], "systemFlags": [ -1946157056 ], "uSNChanged": [ 13077 ], "uSNCreated": [ 8199 ], "whenChanged": [ "2022-05-28 11:19:47+00:00" ], "whenCreated": [ "2022-05-28 11:01:56+00:00" ] }, "dn": "CN=Administrators,CN=Builtin,DC=support,DC=htb" }]