5 ms·

What? An admin to do what? Also, this doesn't apply to only users with autologin enabled.

• lostmsu 7y ago
  To read the credential file from other user's profile. As somebody shown below, that could be done by anyone with physical access, but only if full-disk encryption is off.
  • kabwj 7y ago
    I’d argue FDE is off for 99.9% of users of windows
    • anieberry 7y ago
      Not anymore, most store bought laptops will have bitlocker enabled and all enterprise laptops will probably be using bitlocker too.
      • tracker1 7y ago
        Bitlocker isn't even an option for Home versions of Windows... Which most store-bought laptops use.
  • shawnz 7y ago
    Right, but without this feature, you could NOT perform that attack even with physical access and no FDE. Now that this feature exists, DPAPI is essentially bypassed and must be supplanted with FDE.
    • deleted 7y ago
      [deleted]