So in this video, we'll be seeing how to write the Shihab Culpa ahead of ourselves to the admin, as
you heard.
So I did this admin as do.
So it's a container.
So there are some Microsoft documentation you can see here.
It provide solutions for the content groups in their domain.
So whatever you write EC2 so.
You can see the C in admin is dura system.
And this is your domain name technician.
And so what this does is this actually tries to replicate all of these access control entries in this
administrative order for 60 minutes.
So if we add ourself the full control over this admin is do holder object so on that will be replicated
for every 60 minutes by default.
We can also manually trigger this propagation.
So we'll be doing that after reading this call.
We can also do with the poverty view by using this add objectives here.
So here you can see we are adding the is here to this object that is the holder and the Saramago name
is page one and the right side.
And so we are giving the generic our permissions to this based on an account on this jihad.
So we were doing that in the future because sometimes partial, the same as, say, our country language
more in the case.
We cannot exclude our import PowerShell so it will be easier do.
So let's start with that.
Train through the years equals two new train drills.
So here we'll be giving this distinguished name and ed.
And is equal to.
Edwin.
Do hold out and see an easy Kirsten system.
And then what we're going to do is.
We are going to say Deeks equals to take 69 and these use equals to rocker.
So you can also configure this to receive the command line arguments and divide that according to this
command, Reynolds.
So you can do that as well.
And we're using better trees to be as equals to new researcher.
So this the first large search root is equal to the.
So it should start from the root of this object.
So far each.
So we'll be using the start finder to find all the objects.
Of course, we'll be getting only one object from this because we are not giving any filters and rewinding
to this one.
Search results show the return type is the search result and SA in B is not find out so D is not find.
I use the search result collection.
So in this part we're going to do is if we found any object that is matching to this administrative
order, we want to see a Saadat get buried three and three.
So we are searching the entry object for this one.
So we're going to treat and treat.
Florida.
So we got this whole project now to add the ad to the three actors roles.
We you to get the add to the security object from this material into it.
So it's very simple arbitrary order dot object security.
So this will return the activity to security.
As you can see gets done.
Object.
So act to.
Directory security.
So we can say year to year, is it going to hurt a lot of the security?
So we got this radius.
So radius not we can see our access route.
So we can add the access road radius.
Before that, we need to create an axis so we can see, we can say, I do not attract this rule.
It is equals to.
New accurate.
So we need to pass some.
Parameters.
Fashion is a reference identity that is you can pass as an entire order by the seed.
So here we'll be passing the seed.
So we need to find the seed of how to user.
So let's, uh.
User principal will be using this user principal.
So this is a similar way how we found that you've or the recursive groups user builds per user is equals
to new user principal.
So for context.
So we need to create a principal context object.
X equals to buddies for a context of context time domain.
So we sent in the whole domain and we can pass specie comma Saramago name so the Saramago never gets
said best one.
And we need to pass this user.
Dodd said.
So you've got to have this property to return to normal.
So the simplicity you can outsource and be a piece of paper.
The domains trash the username, so you can also pass that as well as identity reference.
And the next one is actually rights.
So we can say I.
Three rates dark.
So now we need to generate.
Are.
An access control tape?
Not a lot.
So we are allowing our services for the full control.
Now we can say he has not had access.
Love.
Yeah, this one.
Okay.
This one.
So we need to find our user.
Right?
So.
So user consultant fined by an entity of Queen's for a conviction.
So sorry for this.
I just got confused.
So I got this.
And here.
So this will return this user object and so users not.
Successfully positioned for this function.
So after adding these actors, you need to commit changes for this entry so you can do this using harder.
Commit changes.
Otherwise you won't see the changes.
No, the general.
So.
So let's go.
And there's this on our network.
Okay.
Let's test this on.
Throwback from pre acme.
And we have a user access that is played here for their net user.
Related domain.
Now you can see we are only part of doing this, not domain.
It sort of go and add ourselves.
Domain admins.
Crew, Sir Bernard Bien, Brigadier.
Air crash domain.
So we are attempting to add ourselves to the development group.
Now we can see we've got the Axis DNA sort of copy or binary.
And before that we need to change some settings.
That is the domain name you throw back, Dr. Rocker, and also the user account name is related to.
And it's better.
This one.
And you can also
put into these ideas that get access for us.
So this will give this other broad collection.
Let's say our equals two.
We are getting the access rules now if we go and for each of our obligations here in our I'm going to
just say I put into this identity friends.
So this identity to friends not to string.
So deciding differences which object has the access control entry on that particular object.
So it's going better.
This one.
And it's down to our desktop.
Let's say this says ad is here not be.
Let me verify the file name.
Here it is.
Here.
Okay.
We got this.
Now we need to we need to have the administrative procedures to arrange this.
So that's certain as.
I already have this administrator access.
So this is administrator password.
I'm willing to open the door.
We need to add that domain name as well.
Okay.
And now we got this, uh, administrator from.
Now.
Let's go and run this one.
Also that open this door administrator user.
And here you can see all the identity references.
On the windows.
Do hold up object.
No.
We need to change the timing of 60 Minutes.
And what we're going to do is we are going to change the registry to let's a one off.
So copy this one.
And based here.
So long for everyone in our community.
The genius replication takes place, but still we we'll be getting some errors.
So.
Let's try to add ourselves to that the management group and still we are getting this accident.
So bu immediately, uh.
We make this changes to get affected immediately, we need to open it up at sea so that we will be binding
to this our domain and we'll be
modifying this fixed up inheritance.
So let's copy this one.
Also you can go to the server manager.
So we'll be connecting to our.
Ruckelshaus.
So we will be binding as it currently is at Google, Nokia.
Now you can see I don't get it as my research.
So you can go to the windows and computers.
And here in the system.
So click on view and click on advanced features.
Here in the system we can see it as a folder or you and click on properties.
And now here you can see security.
We have this manager, we have the full access.
So we're going to see the tick marks on the yellow.
Also when you go to the run, which is our actual users.
And go to this blade.
Here we are not I mean, now, if you go back to the letter and here you can see there is no I don't
know what we are going to lose.
You are going to make this changes.
So click on Modify.
And click on value and precious.
So press this.
Enter now run this one.
Now here you can see the output.
So we tried to perform this operation.
Okay.
So.
I think.
Randy says administrator.
Ah, that's.
I think we should currently throw a bear.
Do you see July one dot throwback dot rocker.
In order to go and modify.
And now we can see there is a modification.
No, let's go and grill this one.
Now let's go and try to add ourselves.
Now we can see the command successfully executed.
Now let's group domain admins.
Well, I'm sorry.
I don't know.
We can see ourselves here as the winner.
So this is a position technique.
So if you go to this red John Blair.
And go there to read and here.
So this should have been council acting.
Refresh.
So when you do so, there should be one.
So I don't know why.
It's not truly.
And you can see all the access.
Okay.
So that's going to promote this one.
Remove the blade here can apply and knock it.
So we are still.
That means we can also.
Net grou domain admins.
Now three more answers from the government's.
And we can see we are not the government.
So let's try to add ourselves again.
And here you can see we can shoot at ourselves to this moment at once because this passes across this
time frame.
And so that we found out that the blade is in that measured room, he simply removes that.
But still we will have this admin count is equal to one.
I don't know.
It's not showing here.
So it will be showing that in control.
So even the admin should promote ourselves from they're doing admin so we can still add on ourselves
to the admin.