[kjhioyiurewr]

Central point of control (domain), central point of infection.

As someone else said it, many networks are crunchy on the outside, chewy on the inside.

We need a new model, that makes lateral movement much harder. There's no reason to allow an infected domain controller to infect the whole network, but I don't know what the solution looks like which still allows centralized control.