RID-500 is AD's best break-glass account... and you should disable it!🙃
Jorge de Almeida Pinto shared counterintuitive wisdom at #TROOPERS26
- All-powerful and cannot get locked out.
- Disabled = more secure.
- Disabled bypassed when booting in Safe Mode With Networking.
Sources in🧵