It is the year 2026 and I am still finding the one of the fastest ways to get local admin in a Windows environment is to search out the unattended setup XML's, because the passwords are still only base64 encoded.
People don't realize and just leave the files out on open file shares so they are easy to grab.
Thanks, people!