this post was submitted on 30 Apr 2025
60 points (96.9% liked)

Windows

508 readers
33 users here now

For all things Windows.

founded 4 years ago
MODERATORS
QuentinCallaghan@sopuli.xyz
60
Windows RDP lets you log in using revoked passwords. Microsoft is OK with that. (arstechnica.com)
submitted 3 days ago by neme@lemm.ee to c/windows@sopuli.xyz
7 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] Zachariah@lemmy.world 5 points 3 days ago

Microsoft said the behavior is a “a design decision to ensure that at least one user account always has the ability to log in no matter how long a system has been offline.” As such, Microsoft said the behavior doesn’t meet the definition of a security vulnerability, and company engineers have no plans to change it.