hello,if another company has a child domain in your forest, and they are DA of their own domani (still a child domain in your forest), what are the risks?
i know it was possible to use 'nt authority\system\ to escalate privileges and create an enterprise admin user by using gpo linking to site, but now i cant seem to get it to work as a demo to convince my boss about this bad practice.
can u tell me what are the other risks if you have a child domain in your forest where it has a separate group of DA?