Windows10Debloater icon indicating copy to clipboard operation
Windows10Debloater copied to clipboard

Admin account

Open StroppyPhil opened this issue 3 years ago • 1 comments

I ran this last night, and none of the time-consuming yellow deployment came up, so nothing was deleted (maybe the blocklist didn't save for some reason), although the telemetry claimed success.

What REALLY concerns me is that now every time I reboot and log in to my user account ("Phil)", I go to Task Manager and see that my Administrator account (named "Mini PC") has automatically been logged in as an interactive session. I only noticed this after I log in to my user account, try to shut down, and am told "another user is logged on".

This scared me, so I did a system restore and it has gone again. Why is something logging the administrator in, and where did it get the password from??

Forgot to mention I'm running 21H2/19044.1706

(deployment image taken from the YouTube tutorial - mine didn't do this) image

Admin logged on interatively not by me! image

StroppyPhil avatar Jun 04 '22 09:06 StroppyPhil

If you read the code, there is nothing there that would create an Admin account or would use your Administrator account for anything. There’s a multitude of reasons that could happen, though. Malware, some other programs you’ve installed, or anything else you’ve done to your machine could have access to it if you’ve granted permissions to them.

Sent from my iPhone

On Jun 4, 2022, at 5:22 AM, StroppyPhil @.***> wrote:

 I ran this last night, and none of the time-consuming yellow deployment came up, so nothing was deleted (maybe the blocklist didn't save for some reason), although the telemetry claimed success.

What REALLY concerns me is that now every time I reboot and log in to my user account, I go to Task Manager and see that my Administrator account (named "Mini PC") has automatically been logged in as an interactive session. I only noticed this after I log in to my user account, try to shut down, and am told "another user is logged on".

This scared me, so I did a system restore and it has gone again. Why is something logging the administrator in, and where did it get the password from??

— Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you are subscribed to this thread.

Sycnex avatar Jun 04 '22 19:06 Sycnex