How an intern becomes domain admin.
Permissions that pile up
Years of group memberships and delegated rights that nobody has reviewed.
Weak service accounts
Old accounts with old passwords and far too much access.
Hybrid identity
Links between Active Directory and Entra ID that let one compromise reach both.
How the job runs.
Map it
Every user, group, computer and permission, and the paths between them.
Find the routes
Every chain from an ordinary account to domain admin.
Prove the worst
A tester walks the most dangerous routes to show they’re real.
Break the chains
Ranked, so you fix the few links that close the most routes first.
When to call us.
- Before or after a merger or acquisition
- After a big restructure of groups or roles
- When you move to Entra ID or hybrid identity
- When nobody is sure who can do what
On its own or all year?
Scoped on its own or alongside an internal test. We agree it with you at the start.
Partners: Identity findings lead into privileged access and identity governance work for your client. Sell it under your brand.
Questions.
Do you need domain admin rights to run it?
No. We start from an ordinary account, the same place an attacker would.
Do you cover Entra ID?
Yes. Hybrid set-ups are where many of the worst routes are, so we look at both sides and the links between them.
Break the chain before someone climbs it.
Tell us about your directory and a technical account manager will scope the job with you.