Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

4
  • 2
    Wow I honestly wasn't expecting it to be thus easy. So the windows account doesn't really provide much security.
    – mouse_s
    Commented Feb 11, 2019 at 23:38
  • 2
    @mouse_s Short of full drive encryption, there is no expectation a drive is secure if you have physical access to it. Commented Feb 11, 2019 at 23:50
  • 2
    @mouse_s - Sure it does; However, if it were encrypted (EFS) the situation would be different, additionally it’s only possible to take ownership of your an Administrator. Since that is the case you can take ownership of the files. This is true on any OS by the way. It’s even easier on OS X and Linux.
    – Ramhound
    Commented Feb 11, 2019 at 23:51
  • To add to this, I would recommend OP to immediately image the drive (using dd for example on a live Linux install) if the drive is faulty in any way - you don't want to gamble on a faulty drive, but once you've made a 1-to-1 image, you can read from it indefinitely and take what you want. The same principle applies to forensics but for a different reason.
    – QuickishFM
    Commented Feb 12, 2019 at 9:33