Long time IT person currently working in compliance. SoD is not the issue with admin rights. It's the fact that external devices could be inserted into the environment. That means the network was not locked down correctly. The systems are old enough that the data likely isn't encrypted.

Smokescreen