Monitoring Hardened Domain Controllers Without Admin Rights: The Five Permission Layers Nobody Documents
Everything works when the service account is a Domain Admin. Nothing works when you remove it. Here is the complete map of what sits in between — le…