Why a readable domain controller backup hands over your whole domain, and how to check yours in three questions.