The Administrator Issue

[Junpaku]

My OS is Windows 10. My bitlocker is on, I disabled regedit, cmd, access to control panel and removable access storage. My account is the only Administrator of the computer. The other account is a local guest account. How is this guest able to make that account an administrator? I really have no idea.

[GalacticRuler]

Did they get access to the admin account?

[Junpaku]

I don't think so. It's disabled. I wouldn't know how the user would be able to enable that without Admin access. Also, I've changed the password to my account several times. 

[Dossium]

Not going to specify, but the guest account has a loophole that some virtual desktop programs are able to switch accounts instead of desktops accidently.

[Arty]

You do know thier is a hidden admin account right?

Administrator

and it has no password. 

[Arty]

Not going to specify, but the guest account has a loophole that some virtual desktop programs are able to switch accounts instead of desktops accidently.

you can also loop hole via command prompt.

[Dossium]

you can also loop hole via command prompt.

 

Yes, but you don't need the admin permissions for the program's loophole. Unless the program installation is blocked, where maybe via usb a portable program could do it.

[Arty]

Yes, but you don't need the admin permissions for the program's loophole. Unless the program installation is blocked, where maybe via usb a portable program could do it.

idk if it is just my school, i neeed to test at my house

but i can boot the pc into comand propmt and create a new admin account no problem that way

[Dossium]

idk if it is just my school, i neeed to test at my house

but i can boot the pc into comand propmt and create a new admin account no problem that way

 

 

 

or just use the hidden admin account

 

Or if you just need to use a computer, not a specific account, linux live USB ftw.

[Junpaku]

So would this user be using something like vmware or something? How would I be able to prevent that? I disabled removable access storage, and cmd.

Yes I know there's an disabled Admin Account.

[Junpaku]

Question, when editing Local Group Policy Editor, does that only apply to the account it was done in? (It doesn't affect other users?)

[Shiwoon]

Linux on a usb, edit files. To stop this, set a bios admin password. Then edit the boot option to disable cd/dvd boot and usb boot.

[Junpaku]

Linux on a usb, edit files. To stop this, set a bios admin password. Then edit the boot option to disable cd/dvd boot and usb boot.

 

Thanks for this. However, I don't think this is the way he does it. I purposely leave my account locked with browsers open, so when I get home and my account is still logged in with the same browsers/pages open, I can verify whether or not he rebooted the system and tried starting with linux or something off a USB. I'm guessing the user might be using something like a virtual desktop software?