SCCM Policy and Distribution Point Credential Discovery

Retrieve credential-bearing secret policies and Distribution Point content from Microsoft Configuration Manager (formerly SCCM). Depending on the authorized access path and site configuration, results can include Network Access Account credentials, task-sequence or other policy secrets, collection variables, and package files such as scripts or configuration files. Access may use an authorized machine account or existing approved client identity; unauthenticated policy retrieval depends on automatic device approval, and unauthenticated Distribution Point retrieval depends on anonymous access. This procedure does not extract credentials from PXE boot media.