Skip to main content
Version: 3.0.0-preview

AD-GPOS-08 - GPO owner distinct count should be investigated

Michael Soule
Contributed by Michael SouleAll contributors →

Overview​

Test-MtAdGpoOwnerDistinctCount​

Counts the number of distinct GPO owners.

Why This Test Matters​

  • Operational control: assesses diversity of GPO owners which can highlight unusual configurations or omissions.

Control Type​

Operational

Security Recommendation​

  • If many owners are identical or blank, review GPO creation practices to ensure proper ownership.

How the Test Works​

  • Retrieves GPO state, extracts Owner fields, computes distinct non-empty owners, and reports the count.
  • Test-MtAdGpoOwnerDetails - summarizes owners per GPOs.

Test Metadata​

FieldValue
Test IDAD-GPOS-08
SeverityInfo
SuiteActive Directory
ProductActive Directory
FeatureGroup Policy
AreaAccess control
Resource typeGroupPolicy
MITRE ATT&CKNone
PowerShell testTest-MtAdGpoOwnerDistinctCount
ServicesActiveDirectory

Source​