fix: create WriteAccountRestrictions edges from DA (#112)

SpecterOps · Mar 26, 2024 · 21553ad · 21553ad
1 parent 5c9845b
commit 21553ad
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/CommonLib/Processors/ACLProcessor.cs b/src/CommonLib/Processors/ACLProcessor.cs
@@ -410,7 +410,7 @@ or Label.NTAuthStore
                             IsInherited = inherited,
                             RightName = EdgeNames.AddAllowedToAct
                         };
-                    else if (objectType == Label.Computer && aceType == ACEGuids.UserAccountRestrictions && !resolvedPrincipal.ObjectIdentifier.EndsWith("-512"))
+                    else if (objectType == Label.Computer && aceType == ACEGuids.UserAccountRestrictions)
                         yield return new ACE
                         {
                             PrincipalType = resolvedPrincipal.ObjectType,