When enumerating Domain Admins with the parameter --da i am missing an account with Domain Admin privileges (also according to net user /do i see "Domain Admins" as a group and also when using net group "Domain Admins" /do.
When i do a search with -m Administrators i do see the account using: DN: CN=Administrators,CN=Builtin. The account i am missing is a Service Account (OU=Service Accounts,OU=Special Accounts). However unfortunately the result of the latter also contains other group names such as "Domain Admins", "Enterprise Admins" and other things making it ugly output with even SID's in between.
When enumerating Domain Admins with the parameter
--dai am missing an account with Domain Admin privileges (also according tonet user /doi see "Domain Admins" as a group and also when usingnet group "Domain Admins" /do.When i do a search with
-m Administratorsi do see the account using:DN: CN=Administrators,CN=Builtin. The account i am missing is a Service Account (OU=Service Accounts,OU=Special Accounts). However unfortunately the result of the latter also contains other group names such as "Domain Admins", "Enterprise Admins" and other things making it ugly output with even SID's in between.