Enumeration of administrator accounts when elevating can provide part of the logon information to an unauthorized user