Search Results
6/16/2025, 2:00:52 PM
>>105609718
I think the only nitpick (slight) I have reg. this point is enabling the default Administrator account in a client system, instead of just using one that is created during the OOBE as elevated. As far as I'm aware, there won't be no UAC dialog for the built-in account by default. Would keep it as-is - just for the Safe Mode.
I have UAC slider-maxxed, myself. Didn't really bother me that much in Vista days and now. Got used to whatever the defaults were set in NT6+.
>>105591802
>I personally have no problem with MS accounts. I don't use them myself, but I can understand the hoi polloi wanting/needing/using them for SSO, settings/program sync, and BitLocker key backup.
I have an MSA myself, but I ain't and won't seriously consider completely replacing my local account with. Just using within the MS store and Xbone where really necessary, and with Applel or Goolag molochs coercing you into having an account in their services, i guess it makes the MSA redundant in some ways.
Always keen on backing up your shit locally (or at least don't include your sensitive data in the web cloud backups), and haven't gotten into Bitlockering my personal devices myself as I find it overkill for my needs. There's no better replacement for keeping an eye on your valuable shit at all times when outside, and never relaxing around blacks. But yeah - when SHTF, it's useful.
>Further, the security for MS accounts is actually considerably better than local accounts using the SAM, as it's essentially a cut-down version of the Active Directory protocol.
Yeah, though I guess the Windows Hello authentication methods ameliorate that when it comes to local accounts?
>I think where you stand on MS accounts is based on how much you trust Microsoft not to leak your BitLocker keys, LSA secrets, clipboard contents, etc., not any real or imagined technical merits or deficiencies.
True. Different strokes for different folks. Just like with the HTA/VBS or CLI process logging hardening.
(cont.)
I think the only nitpick (slight) I have reg. this point is enabling the default Administrator account in a client system, instead of just using one that is created during the OOBE as elevated. As far as I'm aware, there won't be no UAC dialog for the built-in account by default. Would keep it as-is - just for the Safe Mode.
I have UAC slider-maxxed, myself. Didn't really bother me that much in Vista days and now. Got used to whatever the defaults were set in NT6+.
>>105591802
>I personally have no problem with MS accounts. I don't use them myself, but I can understand the hoi polloi wanting/needing/using them for SSO, settings/program sync, and BitLocker key backup.
I have an MSA myself, but I ain't and won't seriously consider completely replacing my local account with. Just using within the MS store and Xbone where really necessary, and with Applel or Goolag molochs coercing you into having an account in their services, i guess it makes the MSA redundant in some ways.
Always keen on backing up your shit locally (or at least don't include your sensitive data in the web cloud backups), and haven't gotten into Bitlockering my personal devices myself as I find it overkill for my needs. There's no better replacement for keeping an eye on your valuable shit at all times when outside, and never relaxing around blacks. But yeah - when SHTF, it's useful.
>Further, the security for MS accounts is actually considerably better than local accounts using the SAM, as it's essentially a cut-down version of the Active Directory protocol.
Yeah, though I guess the Windows Hello authentication methods ameliorate that when it comes to local accounts?
>I think where you stand on MS accounts is based on how much you trust Microsoft not to leak your BitLocker keys, LSA secrets, clipboard contents, etc., not any real or imagined technical merits or deficiencies.
True. Different strokes for different folks. Just like with the HTA/VBS or CLI process logging hardening.
(cont.)
6/10/2025, 4:07:01 PM
Bump for the month of NT.
Page 1