Active Directory Account Discovery from Description Attributes

Use an authenticated LDAP query to enumerate Active Directory objects matching objectClass=user that have non-empty description values. NetExec's get-desc-users module returns sAMAccountName and description text; because Active Directory computer objects subclass user, results can include computer accounts as well as user accounts. Descriptions are arbitrary text and do not establish that any apparent secret is a valid credential.