Hi AD Brain trust,

I’m currently working on a security assessment for our internal AD environment. One of the item in the report is – Presence of Admin accounts which do not have the flag “This account is sensitive and cannot be delegated”: 6

I’m struggling to understand the consequences of setting the flag for admin accounts. If anyone can shed some lights on the implications/recommendations to resolve this detection would be greatly appreciated !

Thank you!

​Hi AD Brain trust,  I’m currently working on a security assessment for our internal AD environment. One of the item in the report is – Presence of Admin accounts which do not have the flag “This account is sensitive and cannot be delegated”: 6 I’m struggling to understand the consequences of setting the flag for admin accounts. If anyone can shed some lights on the implications/recommendations to resolve this detection would be greatly appreciated ! Thank you!  Read More

​