DnsAdmins: How DNS Admin Access Can Lead to Domain Compromise
09/04/2026
The DnsAdmins group can provide far more privilege than its name suggests. When DNS runs on a domain controller, unnecessary
Blog
Insight Recon Blog
Active Directory security,
from the attacker's perspective.
Practitioner-written deep dives into AD vulnerabilities, attack paths, and remediation — from the team that finds these issues in real environments every day.
Written by
Breach Point practitioners
LDAP Channel Binding: Prevent LDAPS Relay Attacks
08/25/2026
LDAP channel binding helps prevent NTLM authentication relay attacks against LDAPS by tying authentication to the TLS session. Learn how
Operator Groups Explained and Why to Keep them Empty
08/21/2026
Operator groups were built to delegate admin tasks without full Domain Admin rights, but leftover membership can quietly hand attackers
Kerberos Pre-Authentication: Prevent AS-REP Roasting
08/21/2026
Learn why disabling Kerberos pre-authentication exposes Active Directory accounts to AS-REP roasting, how attackers exploit this weakness, and how to
SMBv1 Enabled on Domain Controllers: Risks & Remediation
08/21/2026
SMBv1 lacks the signing and integrity protections built into SMBv2 and SMBv3, and it often stays enabled on domain controllers
DES-Enabled Accounts: A Kerberos Security Risk
08/21/2026
DES is a decades-old encryption standard still found on some Active Directory accounts. When Kerberos is restricted to DES only,
Active Directory Recycle Bin: Why One Deletion Can Break Your Domain
08/21/2026
The Active Directory Recycle Bin makes it easier to recover deleted users, groups, computers, and OUs while preserving important attributes
Password Not Required in Active Directory: A Hidden Risk in Plain View
08/19/2026
Some Active Directory accounts are quietly exempt from your domain’s password policy. Here’s what the Password Not Required setting actually
Risky AdminSDHolder Permissions and Privileged Persistence
08/14/2026
Risky AdminSDHolder permissions can create persistent privileged access across protected Active Directory accounts and groups. Learn how attackers abuse AdminSDHolder
Hybrid Identity Attack Surface: The On-Prem Entra Risk
08/09/2026
When you connect AD to Entra ID, the setup creates a small set of objects inside your domain and hands