Shadow Credentials for a quiet takeover
Write access to msDS-KeyCredentialLink lets you add your own key and authenticate as the object via PKINIT without touching its password.
Write access to msDS-KeyCredentialLink lets you add your own key and authenticate as the object via PKINIT without touching its password.