Forest

Any nudge for the privesc would be appreciated!! I worked through the PayloadsAllTheThings/Active Directory Attack.md at master · swisskyrepo/PayloadsAllTheThings · GitHub
but I keep getting access denied everywhere. Obviously I am missing something subtle.