Hey friends, it's another fun tale of pentest pwnage today! This one talks about cool things you can do when you have full rights over an OU in Active Directory. Important links to review:

BloodHound edges DACL Trouble: Generic All on OUs AD prep bug in Windows Server 2016