SharpGPO-RemoteAccessPolicies

A C# tool for enumerating remote access policies through group policy.

Compile Instructions

SharpGPO-RemoteAccessPolicies has been built against .NET 3.5 and is compatible with Visual Studio 2015/2017. Simply open the solution file and build the project.

CommandLineParser has been used in order to parse the command line arguments. This will create the CommandLine.dll file, along with the executable. You can simple merge the .exe and the .dll into one executable file:

ILMerge.exe /out:C:\SharpGPO-RemoteAccessPolicies.exe C:\Release\SharpGPO-RemoteAccessPolicies.exe C:\Release\CommandLine.dll

Usage

--Domain

Specifies an Active Directory server (domain controller) to bind to

--DomainController

Specifies an Active Directory server (domain controller) to bind to

--SearchScope

Specifies the scope to search under, Base/OneLevel/Subtree (default of Subtree)

--SearchBase

The LDAP source to search through, e.g. SharpGPO-RemoteAccessPolicies --searchBase /OU=Workstations,DC=domain,DC=local. Useful for OU queries.

--Verbose

Print more information about GPOs

Example

C:\Users\IEUser\Desktop>SharpGPO-RemoteAccessPolicies.exe

[-] Domain Controller is: DC1.skipper.loc
[-] Domain is: skipper.loc


[+] EnableLUA:                          WIN10.skipper.loc
[+] FilterAdministratorToken:           WIN10.skipper.loc
[+] LocalAccountTokenFilterPolicy:      WIN10.skipper.loc
[+] SeDenyNetworkLogonRight:            WIN7.skipper.loc
[+] SeDenyRemoteInteractiveLogonRight:  WIN7.skipper.loc

License

The tool is released under a 3-clause BSD License and maintained by MWR Info-Security. See the LICENSE file for details.

Contact

Please submit any bugs on the Github project page or give me a shout on twitter @den_n1s