Also: prevent privilege escalation. That's the big issue every admin of Active Directory struggles with. I work as a pentester and we get domain admin rights wi

Also: prevent privilege escalation. That's the big issue every admin of Active Directory struggles with. I work as a pentester and we get domain admin rights within days (sometimes minutes) in about 95% of all engagements.