Attacking Domain Controller Synchronization The DRS Direc­to­ry Repli­ca­tion Ser­vice is respon­si­ble to repli­cate a DC’s data to mul­ti­ple redun­dant DC’s. Sce­nario: You own a user who has one of the fol­low­ing rights: Nor­mal­ly, users in the fol­low­ing groups have these (could be con­fig­ured oth­er­wise, of course): You can check with the script in Basic Active Direc­to­ry…