---
id: 5892
title: "AD Security 101: Non-Default Security Principals with DCSync Rights"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/ad-security-101-dcsync-rights/"
published_at: "2023-05-25T02:48:52Z"
tags: ["active-directory", "credential-theft", "privilege-escalation", "hardening", "dcsync", "replication"]
phying_url: "https://phying.com/item/5892"
lang: en
---

# AD Security 101: Non-Default Security Principals with DCSync Rights

## Summary

Non-default principals with DCSync rights can impersonate a domain controller via the DRS protocol and pull password hashes. Explains why misapplied replication rights are risky and how to find them.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2023-05-25T02:48:52Z
- **Original:** https://www.semperis.com/blog/ad-security-101-dcsync-rights/
- **Phying News:** https://phying.com/item/5892