Group policy embedded password | kerberoasting
HTTP Upload File Restriction | UnPatched OS
Default credentials
Careless sudo permissions