Usecase
View user’s BitLocker recovery passwords, reset user’s passwords and modify security of objects and OUs
Comments
Manage -> Add Navigation Nodes -> Connect to other domains -> Connect to: ad.bitsadmin.com
Needs to be executed from a OffensiveDC with a dummy domain (e.g. a Windows Server machine with a local hacker.local domain) in a runas /netonly context