@RоryMcCune i believe so.. as there was a profile created on that machine with domain admin like an year ago. I believe hashes on a machine gets updated automatically even if admin won't log in for a long time
there must be some passive way, i heard stories about people getting access to 1 machine in LAN & easily then exploiting whole network, but what if network is watched -- tools like mimikatz won't help