Having administrators use standard user rights for their regular work is now common practice. Administrators must work with more extensive rights at certain points, however, which gives an attacker the opportunity to interfere and take control of such privileges. The misuse of rights by legitimate administrators is also a relevant damage scenario. Since these roles are often very powerful, the effects are typically significant, particularly in cases involving domain administrators. Even without guessing or breaking passwords, attackers can use pass-the-hash methods, for example, to read out and misuse appropriate credentials as a means of moving laterally within a network.