How to Avoid Privilege Abuse in Active Directory