Account Operators can modify most non-protected users/groups and can also of users who are not protected by AdminSDHolder.

The mode for Kerberos 5 AS-REP is 18200 .

This returns a list of users in the domain htb.local :