GetChangesInFilteredSet

This article applies to BHCE and BHE

The principal is allowed to synchronize (DCSync) the Filtered Attribute Set (FAS), which are the attributes not replicated to RODCs.

Abuse Info

This edge is not abuseable by itself. When combined with GetChanges, BloodHound will create the abuseable edge SyncLAPSPassword.

Opsec considerations

This edge has no opsec considerations.

References

Updated