Figure 3

Figure 3: Extending the Active Directory database allows time limits to be applied to escalated user privileges.