An adversary guesses or obtains (i.e. steals or purchases) legitimate Windows administrator credentials (e.g. userID/password) to access Windows Admin Shares on a local machine or within a Windows domain.
Do not reuse local administrator account credentials across systems. | Deny remote use of local admin credentials to log into domain systems. | Do not allow accounts to be a local administrator on more than one system.