(1) Run `icacls c:\windows\system32\config\SAM`
(2) If you see `BUILTIN\Users:(I)(RX)` in the results, you're affected