According to a recent case, some Windows users stored the primary account user information very early, which allowed direct access to ZimaOS shared content without entering the account password. The solution is to delete such stored authentication information in the control panel. Please see if this applies to your situation.