3 ms·
TL;DR When you do an in-place upgrade it does so in the SYSTEM authority. If you hit Shift+F10 during part of this process you get a Command Prompt running as S
by satysin 10y ago
TL;DR When you do an in-place upgrade it does so in the SYSTEM authority. If you hit Shift+F10 during part of this process you get a Command Prompt running as SYSTEM. Then you can do some file system and registry changes to replace an accessibility feature exe with cmd and again run it under the SYSTEM authority pre-login and add your account to the Administrators group.
- Tepix 10y agoThat's not the bad part. The bad part is that this process suspends the disk encryption. Without disk encryption having physical access to the machine would be enough to elevate priviledges anyway.
- satysin 10y agoYes but that is documented as part of any in-place system upgrade or firmware upgrade https://technet.microsoft.com/en-us/library/jj649830.aspx https://technet.microsoft.com/en-us/library/jj649830.aspx
- 0xfeba 10y agoI knew I wasn't dreaming when my Bitlocked Win10 machine did the Anniversary Update and rebooted to the update screen without entering my Bitlocker password. Scary. But that must have been Windows PE doing the update.