GPOAppliesTo
The GPOAppliesTo relationship connects a Group Policy Object (GPO) to an AD account (user or computer) that the GPO settings affect.
This relationship is created when the GPO is linked to the domain or an organizational unit (OU) containing the account. Click on the Composition accordion item to see where the GPO is linked.
BloodHound will not generate this edge if GPO inheritance is blocked and prevents the GPO from applying. However, it does not consider WMI or security filtering, since an attacker with control over the GPO can modify those filters to apply the policy.
Abuse Info
Control over the GPO can be abused to compromise the AD account by modifying the GPO policy settings.
Refer to the inbound edges on the GPO node for more details.
Opsec Considerations
There is no opsec information for this edge.