Deploy PAM & LAPS

Hi Guss, ensure you have LAPS and PAM deployed. If you have the same local Admin Account & password on all clients, it makes lateral movement a breeze.

PAM:

https://learn.microsoft.com/en-us/microsoft-identity-manager/pam/privileged-identity-management-for-active-directory-domain-services

LAPS:

https://www.microsoft.com/en-us/download/details.aspx?id=46899

MS updated key concepts in Windows LAPS

Microsoft changed the key concept for LAPS. 

New Policies, LAPS for Windows, LAPS in Azure AD etc.

Check out the following Link:

https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-concepts