Deploy PAM & LAPS

Hi Guss, ensure you have LAPS and PAM deployed. If you have the same local Admin Account & password on all clients, it makes lateral movement a breeze.

PAM:

https://learn.microsoft.com/en-us/microsoft-identity-manager/pam/privileged-identity-management-for-active-directory-domain-services

LAPS:

https://www.microsoft.com/en-us/download/details.aspx?id=46899