Privileged accounts and groups
A privileged account is an account that has more rights and privileges than a normal account and therefore needs to be cared especially for their security.
Built-in privileged accounts also exist in AD, such as the administrator account, the Guest account, the HelpAssistant account, and the krbtgt account (which is responsible for Kerberos operations).
If you want to read more about AD built-in accounts, please refer to the official documentation: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-default-user-accounts.
Built-in privileged groups in AD
In AD, there are some predefined roles such as the Enterprise or Domain Administrator roles, but those are not the only ones.
Those predefined roles reside in the Builtin container of your domain. To query it you can use the Get-ADGroup cmdlet and specify the Distinguished Name (DN) of your domain-specific Builtin container as -Searchbase; using this parameter...
