In Active Directory, overly broad read permissions can expose passwords stored by legacy Microsoft LAPS. Absence of LAPS removes this password-management control and can leave weak or reused local passwords as a separate risk, but absence alone does not provide a password to retrieve. Windows LAPS uses different attributes and can encrypt stored passwords.
Variant:
Describe EC2 Instances
powershell
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER