sAMAccountName spoofing (noPac) to impersonate a DC

Renaming a machine account to match a DC and requesting a ticket after reset yields a service ticket as domain admin.