Active Directory
Members Only
AdminSDHolder & SDProp Abuse
AdminSDHolder is an AD object that acts as a template for the ACLs of all protected accounts. SDProp runs every 60 minutes and overwrites the ACLs of every protected group member with a copy of the AdminSDHolder ACL. Backdoor AdminSDHolder once, and your ACE propagates to every DA, EA, and Schema Admin automatically — forever.
Members Only Content
This article is exclusively available to registered members of LazyHackers. Login or subscribe to read.