Maybe you should've stuck with NetWare: Hijackers can bypass Active Directory controls

'DCShadow' attack lets attackers add their own controllers, do some wrecking

Two infosec bods have demonstrated an attack on Microsoft's Active Directory software that let them insert their own domain controller into an existing enterprise setup."