---
id: 3161
title: "The Admin you forgot about"
source_domain: abdulmhsblog.com
source_url: "http://abdulmhsblog.com/posts/dsrmadmin/"
published_at: "2025-07-13 00:00"
tags: ["active-directory", "lateral-movement", "mimikatz", "dsrm", "domain-controller", "rid-500"]
phying_url: "https://phying.com/item/3161"
lang: en
---

# The Admin you forgot about

## Summary

Explains the DSRM Administrator on domain controllers: unlike the RID 500 admin on member servers it exists solely for disaster recovery, which matters for hash dumping and lateral movement.

## Intelligence Metadata

- **Sources:** abdulmhsblog.com
- **Published:** 2025-07-13 00:00
- **Original:** http://abdulmhsblog.com/posts/dsrmadmin/
- **Phying News:** https://phying.com/item/3161