Forest

Type your comment> @MichiS97 said:

Type your comment> @7h3B4dg3r said:

(Quote)
I guess my new user would have to belong to the See A*** group. No idea how to add the user to that group though. I tried it with Add-DomainGroupMember but I get an error saying Access Denied.

You need for another group. Check the “DA” path, check s**-a*******’s indirect rights and you will find the proper group.