An attacker used Mimikatz's 'sekurlsa::logonpasswords' module on a target host. What Windows feature, when enabled, significantly reduces the effectiveness of this technique?

Remaining questions and full explanations are VIP-exclusive.