Other domain groups that can lead to full domain compromise

Poc'ing Beyond Domain Admin - Part 1