New
#280
I found the issue; I had a scheduled task that used NirCmd to turn the monitor off automatically whenever the PC was locked. Somehow, it was causing the PC to lock but not turn the monitor off. Not sure, but the issue is gone since I've disabled that task.
Does anyone have thoughts on any potential security implications from using auto-login, if one also uses BitLocker? I avoided auto-login for ages, but now that I think of it, I can't see the issue. If my PC is hibernated or off, the BitLocker password is required to do anything with it. And if it's on and I'm away, it's locked behind my user password just as it was before I enabled auto-login. The only scenario I can see an issue with would be if I entered the BitLocker password and then someone accosted me, LOL.
How would it be an issue is they had physical access? I know the password is stored in the registry (although, at least if netplwiz is used, not in plaintext). But it's in HKLM. And the PC would be locked.
I know "If an attacker has physical access, all bets are off." Just wondering if I'm overlooking something specific.
I'm mainly worried about state actors anyway, and if they have physical access, I don't think having auto-login enabled will make a hoot one way or the other.