PowerShellMafia / PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework
Other
11.68k stars 4.59k forks source link

Powerview: reintroduce New-GPOImmediateTask #325

Open WilliamBruneau opened 5 years ago

WilliamBruneau commented 5 years ago

New-GPOImmediateTask was removed by commit 7c32bf6. The reason of deletion was : 'inconsistent and better done manually'.

This blog post explains some GPO internals that may explain the 'inconsistent' of this cmdlet.

This new New-GPOImmediateTask is a merge between the old implementation and the SharpGPOAbuse implementation (credit to @pkb1s). I think this implementation solves the inconsistent issues and could be reintroduce in Powerview.