On this page I will post great Security Nuggets that can be easily related to VDI deployments.

AD-AdminSDHolder & SDProp

Microsoft Active Directory Documentation Script Update Version 2.16

Sneaky Active Directory Persistence #15: Leverage AdminSDHolder & SDProp to (Re)Gain Domain Admin Rights

https://blog.stealthbits.com/persistence-using-adminsdholder-and-sdprop/