Autologon Executable

Question

Autologon Executable

Neon2002uk 1

Hi,

Are you able to advise if the auto logon executable provided by sysinternals on the Microsoft website, works in the same way as netplwiz.cpl or control userpasswords2 commands readily usable in Windows? Utilising the same process of saving the passwords to LSA secrets.

0 comments

1 answer

Your answer

Answer 1

Anonymous

You can follow along here.
https://support.microsoft.com/en-us/help/324737/how-to-turn-on-automatic-logon-in-windows
the password is stored in clear text in registry.

the sysinternals forums are over here on TechNet
https://social.technet.microsoft.com/Forums/en-US/home?category=sysinternals

They're also actively answering question in dedicated security forums here.
https://social.technet.microsoft.com/Forums/en-US/home?forum=win10itprosecurity
https://answers.microsoft.com/en-us/windows/forum/windows_10-security

--please don't forget to Accept as answer if the reply is helpful--

Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows Server] Datacenter Management

Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

Neon2002uk 1 Reputation point

2020-07-13T14:50:14.78+00:00

This only tells me the options for auto logon which I knew. Why do Microsoft publish these as both methods pose massive security risks. As one stores the password in plaintext format In the registry and the other a LSA Secret. Both have which attackers know about.
Anonymous

2020-07-13T14:53:32.477+00:00

Windows security is not supported here on QnA. I'd suggest reaching out to subject matter experts over here in dedicated security forums.
https://social.technet.microsoft.com/Forums/en-US/home?forum=win10itprosecurity
https://answers.microsoft.com/en-us/windows/forum/windows_10-security

--please don't forget to Accept as answer if the reply is helpful--