this post was submitted on 30 Apr 2025
63 points (97.0% liked)

Windows

574 readers
1 users here now

For all things Windows.

founded 4 years ago
MODERATORS
QuentinCallaghan@sopuli.xyz
63
Windows RDP lets you log in using revoked passwords. Microsoft is OK with that. (arstechnica.com)
submitted 2 months ago by neme@lemm.ee to c/windows@sopuli.xyz
6 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] Zachariah@lemmy.world 5 points 2 months ago

Microsoft said the behavior is a “a design decision to ensure that at least one user account always has the ability to log in no matter how long a system has been offline.” As such, Microsoft said the behavior doesn’t meet the definition of a security vulnerability, and company engineers have no plans to change it.