---
id: 5792
title: "Group Policy Preferences Abuse Explained"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/group-policy-preferences-abuse-explained/"
published_at: "2025-05-13T20:23:33Z"
tags: ["active-directory", "vulnerability", "credential-exposure", "group-policy-preferences", "cpassword", "sysvol"]
phying_url: "https://phying.com/item/5792"
lang: en
---

# Group Policy Preferences Abuse Explained

## Summary

Group Policy Preferences once stored local-account passwords in SYSVOL with trivially reversible cpassword encryption. The post covers this abuse and how DSP detects exposed credentials.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2025-05-13T20:23:33Z
- **Original:** https://www.semperis.com/blog/group-policy-preferences-abuse-explained/
- **Phying News:** https://phying.com/item/5792