# Need help on Red-teaming Active Directory Lab #3 (ELS.CORP) (Attack Path 1)

**URL:** <https://legacy-community.ine.com/t/need-help-on-red-teaming-active-directory-lab-3-els-corp-attack-path-1/1404>\
**Category:** Advanced Penetration Testing\
**Tags:** red, security, lab, cybersec\
**Created:** [December 4, 2021, 1:01pm UTC](https://legacy-community.ine.com/t/need-help-on-red-teaming-active-directory-lab-3-els-corp-attack-path-1/1404 "2021-12-04T13:01:18Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![PDX](https://avatars.discourse-cdn.com/v4/letter/p/cdc98d/32.png) [@PDX](https://legacy-community.ine.com/u/PDX)\
**Post date:** [December 4, 2021, 1:01pm UTC](https://legacy-community.ine.com/t/need-help-on-red-teaming-active-directory-lab-3-els-corp-attack-path-1/1404/1 "2021-12-04T13:01:18Z")

</div>

According to the hints, the first machine (DEV-SYS Server) .

After adding dev-user to the Administrators group, I couldn’t list the Administrator token via incognito.

I would like to get some advice. I’m not sure if there are any extra steps besides the hints.

Thank you