Red Team Codex
  • Welcome to Red Team Codex (RTC)
  • Posts
    • Red Teaming
      • Initial Foothold Reconnaissance
  • Active Directory Enumeration
    • Overview
    • Domain Enumeration
      • Domain Name
      • Domain Forest Trusts
      • Password Policy
    • Computer Enumeration
      • Domain Controllers
    • User Enumeration
    • Group Enumeration
    • AppLocker Enumeration
  • Payload Development
    • VBA Macros and the Windows API
      • Windows Defender
  • AV / EDR
    • Windows Advanced Threat Protection (ATP)
  • Remote Process Injection
    • CreateRemoteThread()
    • QueueUserAPC()
    • QueueUserAPC() + NtTestAlert()
    • SetWindowsHookEx()
    • SetThreadContext()
    • Process Hollowing
  • My Config Files
    • Windows Terminal
    • Tmux Configuration
    • .bashrc and PS1 Environment
Powered by GitBook
On this page

Was this helpful?

  1. Active Directory Enumeration
  2. Domain Enumeration

Password Policy

Retrieve the domain password policy

The following retrieves all policy information including password complexity, however when the /domain switch is used, it does not return the password complexity requirements.

C:\> net accounts
C:\> net accounts /domain
$p=Get-DomainPolicy; $p.SystemAccess
Get-ADDefaultDomainPasswordPolicy -Current LoggedOnUser
PreviousDomain Forest TrustsNextComputer Enumeration

Last updated 4 years ago

Was this helpful?