Local accounts may log into an IT system even if it is not connected to the corresponding domain. If the same credentials are used on several IT systems, the administrator may also log into the other IT systems. This increases the risk of an attacker finding domain credentials with higher rights on one of the IT systems and misusing these to compromise the domain.