Re: Kerberos ticket needed for accessing local resource?

From: Eric Perlin [MS] (ericperl_at_online.microsoft.com)
Date: 09/23/04

  • Next message: Eric Perlin [MS]: "Re: replacement gina and Win XP terminal service" 
    Date: Wed, 22 Sep 2004 15:17:15 -0700

    The token obtained in the process of logging on is all you need to access
    local resources.
    When the DC is not available, you get a token if a "cached" logon succeeds
    (it requires that you have recently logged on to the machine). 

    -- 
Eric Perlin [MS]
This posting is provided "AS IS" with no warranties, and confers no rights.
---
"hyu" <hyu@discussions.microsoft.com> wrote in message
news:6B2C0EED-F60A-4B82-ACF5-DE0A487B9082@microsoft.com...
> Hi,
>
> Is Kerberos ticket needed for accessing local resource? I know that
logging
> onto a domain is followed by an issuance of Kerberos ticket (if DC is
> accessible). But, is this ticket necessary for accessing local resource? I
> don't think it is, but I just want to confirm. If it is, then what happens
> when you login to your computer as a domain user when DC is not accessible
> (i.e. computer disconnected from Network)?
>
> Regards,
>
> - Han
  • Next message: Eric Perlin [MS]: "Re: replacement gina and Win XP terminal service"