# Exchange Windows Permissions

## Information

Members of this group can **grant themselves DCSync rights**.

## Exploitation

Check how to assign DCSync rights [here](https://x7331.gitbook.io/boxes/tl-dr/attacks/dcsync#assign-dcsync-rights). For an example of this process check [here](https://x7331.gitbook.io/boxes/boxes/boxes/easy/forest#sniffing-out-an-attack-path).

## Resources

{% tabs %}
{% tab title="Privilege Escalation" %}
{% embed url="<https://www.whiteoaksecurity.com/blog/account-operators-privilege-escalation/>" %}
{% endtab %}

{% tab title="Issue Description" %}
{% embed url="<https://github.com/gdedrouas/Exchange-AD-Privesc/blob/master/DomainObject/DomainObject.md>" %}
{% endtab %}
{% endtabs %}