While browsing I stumbled upon a nice video explaining the trick the get a command prompt during the loginscreen of a user.. and that command prompt is in the system security context. They say physical access is full access and without bitlocker they are right.. take a look at the short video below.. http://www.offensive-security.com/movies/vistahack/vistahack.html