Use of Domain Admin Credentials on Workstations

Uses valid Domain Admin credentials from an internal network position to authenticate to a domain-joined workstation through remote-management services. Share enumeration is optional reconnaissance; SMB service execution and WinRM remoting are alternative execution paths, not sequential requirements. The account must be authorized for the selected service and the target must be reachable; Domain Admin membership alone does not bypass target policy. Entering a Tier 0 credential on a lower-trust workstation exposes it to that workstation.