The ServerIs relationship is created from a SiteServer to the Computer object referenced by its serverReference attribute. In Active Directory Domain Services, this identifies the computer object for the domain controller represented by the site server.
Abuse Info
ServerIs does not grant a principal control of the referenced computer on its own. It makes the impact of control over a Site traversable: if a malicious GPO is linked to the site, it can apply to the site server’s referenced domain controller. Review the site’s inbound control and GPLink relationships to identify the preceding privilege.Opsec Considerations
This relationship is collected directory metadata. Abuse occurs through the preceding site-control or GPO-control relationship, not by using ServerIs directly.Edge Schema
Source: SiteServerDestination: Computer
Traversable: ✅