Active Directory defaults lead to no-fix PrivEsc vulnerability Researcher publishes proof-of-concept.