To check:

(1) Run `icacls c:\windows\system32\config\SAM`

(2) If you see `BUILTIN\Users:(I)(RX)` in the results, you're affected