Explain your process for locking down Active Directory to prevent privilege escalation attacks in a hybrid environment.
