3 ms·
You don't need to be an admin, just have physical access and plug the drive into another computer. Which is why the early W10 versions used to require enabled f
by icebraining 7y ago
You don't need to be an admin, just have physical access and plug the drive into another computer. Which is why the early W10 versions used to require enabled full-disk encryption before allowing this feature.
- lostmsu 7y agoI am not sure what you mean. If the drive is not encrypted, then anybody can read any data. <- OK, that is incorrect. DPAPI is supposed to protect from this by deriving encryption key from your password. If the drive is encrypted you'd have to know the drive encryption key, which likely (if not necessary) means you are the administrator.
- icebraining 7y ago> OK, that is incorrect. DPAPI is supposed to protect from this by deriving encryption key from your password. That's the point: DPAPI is (deliberately) bypassed by TBAL, by storing the necessary info from the user's password to decrypt the DPAPI key after reboot.