Active Directory

Enum using legacy windows tools

1. Use xrdp for gui view using command: xfreerdp /u:<username> /d:<domain.com> /v:<ipaddr>
2. Once in, use net user /domain for users in domain (net user shows local users)
3. Use net group /domain to list groups in domain (net group for local groups)
4. To check for user information use this command net user <user_name> /domain (look if user is in admin group)
5. To check for users in given group use net group <group name> /domain

Enum using powershell and .net classes

1. To find PdcRoleOwner use [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain() (PdcRoleOwner is )