Re: What is a local logon?

From: Herb Martin (news_at_LearnQuick.com)
Date: 03/26/04


Date: Fri, 26 Mar 2004 15:14:38 -0600

Usually this means logging onto with an account defined
on the workstation where you are sitting rather than
by authenticating against a Domain account, but read on....

"Roger Haxby" <roger.haxxxby_rem2x@ntlworld.com> wrote in message
news:e3GDT71EEHA.2176@tk2msftngp13.phx.gbl...
> We are having users log onto a server through a browser. All users will
be
> in a specific user group. It appears that this counts as a local login -
if
> we do not allow local logons in the group policy for that user group, they
> cannot log on via the browser.

> The browser authentication method does not
> seem to make a difference (basic, integrated windows authentication, we
have
> not tried digest)

NOT if you are logging onto a SERVER account (not a domain account.)
If you logon to a domain account with an "integrated" method then it
will count as "network access."

> Is this expected behaviour?

Yes.

> If that is expected behaviour, what is a Network Logon - is that file
shares
> only?

No, it's when you authenticate with the domain, then use those
credentials to access ANY supported resource -- like SMB
shares but including web resources using the integrated methods.

-- 
Herb Martin


Relevant Pages

  • Re: Win2K: just cannot get it right
    ... If you're logging in with a local account at home and a domain account at ... > The RPC server is unavailable. ... > Attempt to update DNS Host Name of the computer object in Active Directory ...
    (microsoft.public.win2000.general)
  • Re: Problem with group security
    ... that gives him the choice of logging onto the local computer or the domain. ... He is choosing to log onto his local computer rather than the domain. ... A local account is not the same thing as a domain account. ... to the DC to authenticate him to the domain. ...
    (microsoft.public.win2000.security)
  • Re: after joining domain c: is not accessible access is denied
    ... Are they logging on with a local or domain account? ... via Group Policy computer configuration that would probably be configured at the ... > before joining the domain. ...
    (microsoft.public.win2000.security)
  • Re: Resetting passwords
    ... Is it possible to reset a local machine password, ... and without logging off and on a domain account? ... domain account, but uses a machine in a workgroup, and cannot reset his ...
    (Security-Basics)
  • Re: Resetting passwords
    ... domain account, and without logging off and on a domain account? ... Also is it possible to reset a domain password without loggin onto the ... If the local account does not have admin privileges I don't think he'll ... be able to change the password without logging in. ...
    (Security-Basics)