Writable Object Enumeration

Query a selected Active Directory domain controller to identify visible directory objects on which the authenticated principal has effective write-related or child-creation rights. This is a read-only ACL-discovery aid for assessing possible privilege-escalation paths; a returned right alone does not prove that a path is exploitable.