Credential Manager in a Corporate Environment
Hypothetical case: employee goes for a coffee and smoke. She has no screen saver on her Win 7 PC and doesn't logout. Nosey employee who sits next to her knows she has access to more on the corporate network than he has (she has special account login names). Nips on to her machine and backs up her saved credentials to a USB stick and then restores them at his liesure to his Win 7 PC. Without entering into a discussion on sloppy internal security practices , is it that simple? I tried it and it seemed to work just fine but I may have had elevated privileges. Just wanted someone to confirm or deny it was possible. If I have missed an earlier thread apologies and please point me to it. Thanks!
October 27th, 2010 8:44am

Hi, Standard users can also open Credential Manager and backup credentials. Therefore, in your case, a work computer that is not password protected should not exist. Arthur Xie TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
October 28th, 2010 5:51am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics