https://seguridadpy.info/2018/05/denyevery1-defending-active-directory-against-the-hunt-for-privileged-users/
DenyEvery1: Defending Active Directory against the hunt for privileged users