Type your comment> @awarkozak said:
@idevilkz said:
+++ You need to make your new user have some special privileges within the domain
+++ for those special privileges you need to have understanding of how Active Directory stores its permissions related data in a context (hint).This is exactly what I’m having trouble with
read up on DCSync rights.You are nearly there