Assertion: password | /r/CapableOf | use group policy preferences
Facets:
Source sentences:
text: This means that any user with access to the Sysvol folder (which is everyone in AD) can pull any GPOs that contain CPasswords, reverse the encryption, and learn passwords for local accounts (including Administrator accounts) that are modified using Group Policy Preferences.