Hello
There is a local administrator in the system and it has a password.
However, Standard domain users can enter Refresh PC and System Restore options in the Windwows Re menu without any password.
Auto login is disabled in policies.
What is the reason of this?
Welcome to TenForums.
That is expected behavior.
A normal part of security has to take into account physical security. If someone has physical access to a system, then they can boot into and run WinRE. They can also do things like physically remove a HDD, plug it into another computer, and access the data. But this is where tools like EFS (Encrypting File System) and BitLocker drive encryption come into play.
Actually, the following password screen should come up, but it doesn't. If I do Shift + restart, it asks for a password on that screen and keeps asking.
But it won't ask for password at all if you don't
Since you are using the Built-in Admin account, all bets are off. Its behaviour is not documented and has been known to change over time.
"If I do Shift + restart, it asks for a password on that screen and keeps asking."
"But it won't ask for password at all if you don't"
So when is it not asking for a password? When you boot from the installation disk?
Why did you say "domain"?
Denis
Since computers are in domain structure, they are distributed to end users.
These people can access this screen and do not ask for an admin password in any way.
But if I manually shift + restart once, it keeps asking for a password now.
But it does not ask for a password on the first installation.
Before installation & later on, when booting from an installation disk, Windows is not running and there are no user accounts in the temporary OS established by the installation disk.
"Shift-Restart" asks for a password because Windows is still running.
I still do not know what "this screen" is because you have not said how you get there.
Denis
Hello
Windows is installed. The PC is taken to the domain. Administrator account is available. In the meantime, if the device drops to the repair screen, it will not ask for a password in the restore.
But if I shif + restart after the device is set up and take it to the domain and windows goes to the repair screen, it asks for the Administrator password.
Hi,
If you want a tempering proof system. We completely disable the environment... and re-enable it on "need to" basis.
How to Disable / Enable Windows Recovery Environment on Windows 10? - Appuals.com
My problem was fixed when I deleted the Reagent.xml file and created it on its own.
Quote