search

PowerShellMafia / PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework
Other
11.77k stars 4.59k forks source link

Different behaviours between win7 and win10 for PowerView Get-NetLocalGroupMember #306

Open rajiv2790 opened 5 years ago

rajiv2790 commented 5 years ago

Hi, I tried using Get-NetLocalGroupMember in my test environment.

Here is a brief description of my test environment: I have a win2016 Domain controller, a win7 box and a win10 box. I tried to enumerate the Admins of win10 box from win7 box (logged in as local admin on win7) but it failed. However, if I do the reverse - enumerate the Admins of win7 box from win10 box (logged in as local admin on win10), it was successful. Could someone please explain how/why?