In many big cyber break-ins, attackers who got into Active Directory data were able to control the whole system in days. Provided that you're responsible for systems or simply care about staying safe online, you need to know about this risk, and to be able to handle it. In cases where you