---
id: 5999
title: "DnsAdmins Revisited"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/dnsadmins-revisited/"
published_at: "2021-03-15T14:05:09Z"
tags: ["active-directory", "privilege-escalation", "backdoor", "detection", "research", "dnsadmins"]
phying_url: "https://phying.com/item/5999"
lang: en
---

# DnsAdmins Revisited

## Summary

Semperis research revisits the DnsAdmins feature: members can make a domain controller's DNS service load an arbitrary DLL, escalating to SYSTEM-level control—a viable, hard-to-detect backdoor, with detection and hardening guidance.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2021-03-15T14:05:09Z
- **Original:** https://www.semperis.com/blog/dnsadmins-revisited/
- **Phying News:** https://phying.com/item/5999