DSRM Account Persistence

Abuse of a Domain Controller's built-in local Directory Services Restore Mode (DSRM) Administrator credential to maintain an alternate access path outside ordinary domain-account authentication. The procedure is limited to Domain Controllers and requires pre-existing privileged access sufficient to obtain or reset that DC's DSRM credential; network use additionally depends on the DC's DSRM logon behavior and available authentication services. It does not itself establish access without those prerequisites.