3 ms·
This allows you to write a binary to the system's memory that is then read by Windows on startup, stored on the hard drive and executed with system privileges.
by Grimeton 2y ago
This allows you to write a binary to the system's memory that is then read by Windows on startup, stored on the hard drive and executed with system privileges.
The sheer existance of the feature came to light when people began to wonder why Lenovo is able to install their install service every time after they did a clean installation. They went as far as changing the hard drive and the service still reappeared.
Asking Lenovo what was going on, Lenovo replied with the information about this and Microsoft had to come up with some documentation. Its existance was neither communicated to the public nor documented anywhere in Microsoft's documentation.
Just google the name and be surprised how you cannot find anything about it on Microsoft's pages besides this one document.
- Eisenstein 2y agoBitlocker has never been marketed as a consumer solution for privacy, it has been marketed as a way for companies to lock down their data if an employee's laptop get stolen or they get fired and don't return it. Anyone that expects that Bitlocker would keep their data private in all cases where they do not personally unlock it is naive.
- jasomill 2y agoWhile apparently undocumented, you can disable WPBT execution by adding a value to the registry: reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager" /f /t REG_DWORD /v DisableWpbtExecution /d 1
- Grimeton 2y agoYeah another reason why I don't like this. This isn't documented either I cannot verify if it's true and if it does what it's supposed to do. The whole feature shouldn't be there in the first place and while WBPT has been documented since Windows 8, similar features have existed way before that and where never documented.