![Active Directory Security Risk #101: Kerberos Unconstrained Delegation (or How Compromise of a Single Server Can Compromise the Domain)](https://static.wixstatic.com/media/27c3eb_46b086be9f5246c9bc91ff1bc1e13bf3~mv2.png/v1/fill/w_277,h_156,fp_0.50_0.50,q_95,enc_auto/27c3eb_46b086be9f5246c9bc91ff1bc1e13bf3~mv2.png)
Active Directory Security Risk #101: Kerberos Unconstrained Delegation (or How Compromise of a Single Server Can Compromise the Domain)
Editor's Note: Nearly a decade ago, Sean Metcalf made this post on ADSecurity.org and we're reposting it here in its original form because,
![Demystifying Privileged Identity Management - Part 1](https://static.wixstatic.com/media/27c3eb_c0b61013c53b4970a378366bb73ff495~mv2.png/v1/fill/w_277,h_156,fp_0.50_0.50,q_95,enc_auto/27c3eb_c0b61013c53b4970a378366bb73ff495~mv2.png)
Demystifying Privileged Identity Management - Part 1
This article series attempts to dissect the terms we throw around when talking about PIM.
![Nesting Is For The Birds: The Problem with Nested Groups](https://static.wixstatic.com/media/27c3eb_6bf2298cded94ab8bf23e0715fee951c~mv2.png/v1/fill/w_277,h_156,fp_0.50_0.50,q_95,enc_auto/27c3eb_6bf2298cded94ab8bf23e0715fee951c~mv2.png)
Nesting Is For The Birds: The Problem with Nested Groups
Discussing a common High Priority issue: excessive membership in AD Admin groups due to Nested Groups.