Skip to content
Threat Feed
Subscribe

Tag

Bad-Successor

1 brief RSS
medium advisory

Creation of New DMSA Service Account Potentially Exploiting BadSuccessor Vulnerability

The creation of a new Delegated Managed Service Account (DMSA) within specific Organizational Units (OUs) using the New-ADServiceAccount cmdlet is indicative of potential BadSuccessor privilege escalation attempts in Windows Server 2025 Active Directory environments.

Windows Server +1 privilege-escalation active-directory bad-successor dmsa
2r 2t