Forest

Type your comment> @awarkozak said:

@idevilkz said:
I am stuck same as you are @101001101029A
mimikatz won’t work unless you are an administrator afaik.

PM me so we can work on this together as I am failing to get dsacls to work for me to enumerate my newly created user.

Any progress from you? I am stuck here as well. Not sure what to do…

@awarkozak after much head bashing, I had assistance from couple of members and got through.

I was doing most of it right, and was only struggling elevating my privileges but I found out I was using syntax wrong.

For all new user like me, who are stuck for the root part.

+++ You need to make your new user have some special privileges within the domain
+++ for those special privileges you need to have understanding of how Active Directory stores its permissions related data in a context (hint).