# GPO and OU Enum

## GPO and OU Enum

A Group Policy Object (GPO) is a virtual collection of policy settings. A GPO has a unique name, such as a GUID.

Get-DomainGPO Get-DomainGPO | Select displayname Get-DomainGPO -ComputerName student.pentesting.local

**#Get machines where the given user is member of a specific group** Get-DomainGPOUserLocalGroupMapping -UserName student1 -Verbose

**#Domain** Get-domain

\#**enumerate all gobal catalogs in the forest**

Get-ForestGlobalCatalog

**#Get OUs in a domain** Get-DomainOU

**#Get GPO for specific name** Get-DomainGPO Get-DomainGPO -Name "{AB306569-220D-43FF-B03B83E8F4EF8081}"