BadSuccessor After the Patch: What Windows Server 2025 dMSA Privilege Escalation Still Gets You BadSuccessor, the delegated Managed Service Account (dMSA) privilege escalation technique in Windows Server 2025 Active Directory, is often still described... Sep 25, 2026 6 min read Active Directory
Deploying Windows LAPS with Group Policy: A Real Walkthrough (Including the Domain Controller Gotcha) Windows Server 2025 ships Windows LAPS natively, built directly into Active Directory rather than requiring the old downloadable Microsoft LAPS... Jun 27, 2025 7 min read Active Directory
