Domain Admin

Definitions

1. A highly privileged account or group in Microsoft Active Directory with broad control over domain-level resources, policies, and identities. Because domain admin rights can effectively dominate an enterprise Windows environment, they are prime attacker targets.

   In plain English: A very powerful Windows domain administrator account.

   Example: "Once the red team obtained domain admin, the rest of the exercise was about how quickly they could spread."

Related Terms

• Bastion Host
• Group Policy
• Mobile Device Management
• Administrative Privilege
• Cross-Forest Attack
• Domain Controller
• Domain Trust
• Dual-Use Tool