Skip to main content
Support

Users & Groups

Discover accounts and group memberships

Beginner~12 mincontoso.com
Users & Groups
PS C:\>
Domain
OU
User
Group

Step 1 of 8

Users & Groups in AD

In Active Directory, every person who logs on is represented by a User object. Users are organized into Organizational Units (OUs) and can belong to one or more Security Groups.

Groups control access — if you are in the "Domain Admins" group, you have full administrative rights across the domain.

Click "Continue" to start enumerating users.

Objectives

  • List All Users
  • Inspect a Specific User
  • Key User Properties
  • Enumerate All Groups
  • Inspect Domain Admins
  • Who Are the Domain Admins?
SourceSudo

Content sourced from Microsoft Documentation, MITRE ATT&CK Framework, NIST SP 800-63/171, adsecurity.org (Sean Metcalf), SpecterOps research, and SANS Reading Room. For educational purposes only.