I rooted it, but I paid for it. That was my first domain controller, so I learned a ton in the process. There are a lot of great tips in the thread.
The only comment I have, and perhaps this was only my experience, but I noticed when running my windows enumeration script (Win****) that the output was not always the same. So, the first time I completely missed what I needed. I ran it a few more times to test and got different results with each attempt. May just be me, but perhaps some other soul will be spared the 2 hours of hair pulling.
Feel free to dm for nudge!