Insider Threat Matrix™Insider Threat Matrix™
  • ID: PR042.002
  • Created: 06th July 2026
  • Updated: 06th July 2026
  • MITRE ATT&CK®: T1136.002T1136
  • Contributor: The ITM Team

Domain User Account Creation

A subject creates a user account within a centralized directory service, such as Active Directory, Lightweight Directory Access Protocol (LDAP), or another enterprise identity directory. Domain accounts may provide access across multiple systems, applications, file shares, administrative services, and enterprise workflows.

 

Domain user accounts may be created through directory administration tools, identity management platforms, service desk workflows, scripts, or administrative command-line utilities. The account’s access is shaped by group membership, organizational unit placement, directory attributes, access policies, and assigned permissions.