Active DirectoryActive Directory cheatsheetAD GmsapasswordGenericAll permission on a domain computerSerestoreprivilege