Find the domain head object in the BloodHound GUI, click the number next to "First Degree Controllers". See whether an Exchange security group is present:
![](https://pbs.twimg.com/media/DyQ3GvXVsAE4wNS.jpg)
![](https://pbs.twimg.com/media/DyQ766eVsAAyOEN.jpg)
Get BloodHound: github.com/BloodHoundAD/B…
Join the BloodHound Slack: bloodhoundgang.herokuapp.com