Defending Against Ransomware Attacks: How to Prevent Privilege Escalation within Active Directory