Re: What is a local logon?

From: David Sickmiller (davesickmiller_at_yahoo.com)
Date: 03/30/04 

Date: 30 Mar 2004 12:11:39 -0800

My understanding of the situation is that all Windows logons
(regardless of application) are performed using the Win32API
LogonUser() function. This function has a parameter called logonType,
and applications are usually hardcoded to use one type of logon.

The main 4 types of logons correspond to user rights:
Interactive logon: "Log on locally",
Network logon: "Access this computer from the network",
Batch logon: "Log on as a batch job",
Service logon: "Log on as a service"

I do not have specific experience with IIS logons, but by
granting/revoking those 4 rights to a test user, you can easily
determine which method is necessary. Sometimes they do not seem to
make sense. For example, to logon using FTP, you need the ability to
"log on locally" (i.e. interactive logon). That was not the behavior
I expected.

If you delve deeper, you will discover that there are more logon
types, and that they have different effects.

-David

Relevant Pages

  • Re: Help Needed in interpreting Security Audit Logs
    ... regardless of the client I don't think you could. ... The logon must be coming from a Windows XP machine or higher ... The connection between this event and the shutdown event was unclear. ... Successful Network Logon: ...
    (microsoft.public.windows.server.security)
  • Re: Help Needed in interpreting Security Audit Logs
    ... The logon must be coming from a Windows XP machine or higher ... workstation name blank in the original log entry? ... The connection between this event and the shutdown event was unclear. ... Successful Network Logon: ...
    (microsoft.public.windows.server.security)
  • Re: Help Needed in interpreting Security Audit Logs
    ... Win2K client could cause the same error to be generated. ... The logon must be coming from a Windows XP machine or higher ... The connection between this event and the shutdown event was unclear. ... Successful Network Logon: ...
    (microsoft.public.windows.server.security)
  • RE: Windows2000 Security events
    ... There are two types of successful login types with Windows 2000. ... Event ID 528 describes a successful logon. ... server once and reuse them throughout a network logon session. ... Bypass Traverse Checking is defined in each respective computer's Local ...
    (Focus-Microsoft)
  • Security Audit Log
    ... Successful Network Logon: ... And here is also the login by myself: ... 3 is a network logon. ... time of writing have not yet looked at the Event Viewer ...
    (microsoft.public.windowsxp.security_admin)