Microsoft Windows SMB Registry : Autologon Enabled not Working

Question

There a vulnerability posted but the remediation doesnt work.. The autologin sysinterntal tool is broken (https://learn.microsoft.com/en-us/troubleshoot/windows-server/user-profiles-and-logon/turn-on-automatic-logon). When the tool is used, passwords are encrypted for the autologin machines. however, once those machines are rebooted, pw are in cleartext and not encrypted anymore! Windows 10 :2022H2 machines #microsoft.

https://www.tenable.com/plugins/nessus/10412
SMB/name, SMB/login, SMB/password, SMB/registry_access, SMB/transport

Answer 1

Hello there,

Try this registry

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

In the right pane of the above-mentioned registry location, you need to make sure that the following data exists. If something is missing, you can add it:

AutoAdminLogon – Registry String (REG_SZ) – Value data is 1.

DefaultPassword – Registry String (REG_SZ) – Value data is your user account password.

DefaultUserName – Registry String (REG_SZ) – Value data is your user account name.

Hence add the missing information, if any, and once you’re done, close Registry Editor and reboot.

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer–