Can Secondary Logon service be used by attackers if they know an acc password?

[lunarlander]

Hi,

Since your program mandates the Secondary Logon service, can it be utilized by attackers if they know a password? Then they could run a program with admin rights if they know the password to an admin account.

[fixer]

If an isolated process starts a non-isolated process, it's considered a weird behavior and blocked.