When scanning a device in live mode –

If the user account that launches start.bat from the Collection Key is an administrator account then it will be able to scan and access all the data belonging to other user accounts (administrator and standard even when password protected) – see the example below

If the user account that launches start.bat from the Collection Key is NOT an administrator account then it will need to provide administrator credentials in order to run start.bat