3 ms·
Still really easy to trigger even by accident. All you need is to check a box to enable RDP while logged on with a local account with no password (though I hasn
by yuhong 11y ago
Still really easy to trigger even by accident. All you need is to check a box to enable RDP while logged on with a local account with no password (though I hasn't tested, you may also need to uncheck another checkbox restricting logon to NLA).
- Someone1234 11y agoI disagree. It falls in a sweet spot where consumers won't be impacted (because they're utilising Microsoft Accounts/don't enable RDC), and enterprises won't be impacted (because they don't set up accounts with no password). And then on top of that you need RDC on a Windows 10 box to be exposed to the internet or a LAN with malicious users on it. It is a legitimate bug that should be patched. But a miniscule subset of users will be impacted, because the pre-conditions are so niche.