Active Directory Priv Esc using GenericAll on a GPO
When a GPO is configured with the GenericAll permission, it allows a user to modify the GPO and add a malicious script that will be executed on all computers that apply the GPO. This can be used to...