News, tips, advice, support for Windows, Office, PCs & more
Home icon Home icon Home icon Email icon RSS icon

We're community supported and proud of it!

  • Windows 10: Security broken after Upgrade – SAM accessible by users

    Home Forums AskWoody support Windows Windows 10 Windows 10: Security broken after Upgrade – SAM accessible by users

    • Author
      Posts
      • gborn
        AskWoody_MVP

        The newest nightmare in security. If you run Windows 10 from 1809 and above, it’s likely, that the SAM database is accessible after an upgrade to a higher Windows 10 version. Every user has a read access right and may dump the password base of Windows users. Windows 11 is also affected. I have compiled first details at:

        Windows 10 upgrade breaks SAM access rights from 1809 upward, user access possible

        Ex Microsoft Windows (Insider) MVP, Microsoft Answers Community Moderator, Blogger, Book author

        https://www.borncity.com/win/

        6 users thanked author for this post.
      • #2378990
        Susan Bradley
        Manager

        I think this is more of a oh #$@% for businesses not consumers but it’s still extremely concerning that this stuff is missed.

        Susan Bradley Patch Lady

      • #2379208
        doriel
        AskWoody Lounger

        I have no RX flag for my SAM database. Does it mean we are safe? 🙂

        noRX

        By the way, I wouldn’t panic, it is what it is. Applying workarounds to change ACLs yourself can break things, and it’s very likely that it’s been that way for years anyway. Eventually, MS will patch this.

        Im OK, no panic here 😉

        Were on build 17763 (1809) and 19042 (20H2), mix of those two bilds.

        Dell Latitude E6530, Intel Core i5 @ 2.6 GHz, 4GB RAM, W10 20H2 Enterprise

        HAL3000, AMD Athlon 200GE @ 3,4 GHz, 8GB RAM, Fedora 29

        PRUSA i3 MK3S+

        • This reply was modified 2 weeks ago by doriel.
        • This reply was modified 2 weeks ago by doriel. Reason: WINVER
    Viewing 2 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, no politics or religion.

    Reply To: Windows 10: Security broken after Upgrade – SAM accessible by users

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.