GITBOOK-694: No subject

pentesting-cloud/workspace-security/gws-workspace-sync-attacks-gcpw-gcds-directory-sync-with-ad-and-entraid.md

@@ -967,6 +967,10 @@ To perform a **MitM** to the **`config-manager.exe`** binary just add the follow
 Note that [**Winpeas**](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS/winPEASexe) is capable to detect **GCDS**, get information about the configuration and **even the passwords and encrypted credentials**.
 {% endhint %}
 
+Also note that GCDS won't synchronize passwords from AD to Workspace. If something it'll just generate random passwords for newly created users in Workspace as you can see in the following image:
+
+<figure><img src="../../.gitbook/assets/telegram-cloud-photo-size-4-5780773316536156543-x.jpg" alt="" width="515"><figcaption></figcaption></figure>
+
 ### GCDS - Disk Tokens & AD Credentials
 
 The binary `config-manager.exe` (the main GCDS binary with GUI) will store the configured Active Directory credentials, the refresh token and the access by default in a **xml file** in the folder **`C:\Program Files\Google Cloud Directory Sync`** in a file called **`Untitled-1.xml`** by default. Although it could also be saved in the `Documents` of the user or in **any other folder**.