*******************************************************
Even so, someone logging on locally as an account with local admin rights on *any* other machine in the domain, instantly gives them away to anybody else with local admin rights as soon as they log on.
*******************************************************

What does this mean, exactly??