AD Group Risks: Hidden Powers of Account Operators

Account Operators is an AD group that many people underestimate because it doesn’t contain the word “admins.” The problem is that it gives broad control over identities across the domain—and in Active Directory, identities are privilege. See how attackers use this group to move from “not quite privileged” to “I own you.”