---
id: 5783
title: "Golden dMSA: What Is dMSA Authentication Bypass?"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/golden-dmsa-what-is-dmsa-authentication-bypass/"
published_at: "2025-07-16T09:30:00Z"
tags: ["active-directory", "authentication-bypass", "privilege-escalation", "identity-security", "dmsa", "windows-server-2025", "golden-dmsa"]
phying_url: "https://phying.com/item/5783"
lang: en
---

# Golden dMSA: What Is dMSA Authentication Bypass?

## Summary

A design flaw in Windows Server 2025 dMSAs enables the Golden dMSA attack: attackers with a KDS root key can generate passwords for all managed service accounts offline, bypassing authentication.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2025-07-16T09:30:00Z
- **Original:** https://www.semperis.com/blog/golden-dmsa-what-is-dmsa-authentication-bypass/
- **Phying News:** https://phying.com/item/5783