Documentation Index
Fetch the complete documentation index at: https://mintlify.com/the-useless-one/pywerview/llms.txt
Use this file to discover all available pages before exploring further.
find-gpocomputeradmin answers the question: given a specific computer or an Organizational Unit, which users and groups have been granted administrative access to those machines through Group Policy? The command works by locating the OUs that the target computer (or all computers within the target OU) belongs to, finding all GPOs linked to those OUs, and then inspecting each GPO’s Restricted Group and Groups.xml settings for local admin membership grants. The result is a consolidated list of principals that GPO policy pushes into a local privileged group on the target machine — exactly what you need during a privilege-escalation assessment to find non-obvious admin paths. Use --recurse to expand any returned domain groups into their individual members for a fully flattened view.
Flags
IP address of the domain controller to target.
Name of the domain to authenticate with (e.g.
contoso.com).Username used to connect to the domain controller.
Password associated with the specified username.
NTLM hashes for pass-the-hash authentication. Format:
[LMHASH:]NTHASH.Use Kerberos authentication. Reads credentials from the ccache file pointed to by
KRB5CCNAME. Requires pywerview[kerberos].Force a TLS (LDAPS) connection to the domain controller.
Logging verbosity sent to stderr. Choices:
CRITICAL (default), WARNING, DEBUG, ULTRA.Print results as JSON instead of the default human-readable format.
The name of the computer to check GPO-based admin access for. Specify either
--computername or --ouname — not both.OU name to check. Returns the GPO-based admin grants that apply to every computer object within that OU. Specify either
--ouname or --computername — not both.Domain to query. Defaults to the domain inferred from the target DC or credentials.
If a returned member is a domain group, recurse into that group and return all of its individual members. Useful for fully flattening nested group memberships.