Adds allow ACEs for a chosen trustee to the remote-registry control key and selected SYSTEM, SECURITY, and SAM registry keys used by DAMP's separate retrieval routines. Those routines can retrieve machine-account hashes, local-account hashes, and cached domain credentials; this function only changes access-control lists. It uses WMI StdRegProv and attempts to start RemoteRegistry if the service is stopped. DAMP says changing these descriptors on stock systems normally requires local Administrators membership on the target.
PowerShell
RESTRICTED_ACCESS_BLUR_MARKER