I'm a junior penetration tester, working in a place that does not give much guidance and I kind of just had to dive in. I'm pretty good, in that I can normally still obtain domain admin on networks I audit, as well as numerous other vulnerabilities. There is still a lot I don't know, that I am trying to learn to be a better tester.
One thing in particular is, what good are user credentials if I can't log on to other machines via remote desktop?
I had thought logging on to other machines to try and get local admin to access hashes and other such stuff is a big part of the process. But if remote desktop is not enabled or logins restricted to certain users, how can you use user credentials to still do this?