Authenticating Local User Accounts When users log on to a local computer, the authentication process proceeds as
follows:
1. The user provides a user name and a password, and Windows XP
Professional forwards this information to the SAM of that local computer.
2. Windows XP Professional compares the logon information with the user
information that is in the SAM.
3. If the information matches and the user account is valid, Windows XP
Professional creates an access token for the user.
An access token is the user.s identification for that local computer, and
contains the user.s security settings. These security settings enable the user
to gain access to the appropriate resources and perform specific system
tasks.
In a workgroup, the user logs on to the local computer and is authenticated.
When the user then needs to gain access to resources on another computer in
the workgroup, that user's credentials are sent to that computer. If the SAM on
the other computer accepts the credentials, the user is authenticated, receives an
access token, and can gain access to the resources on the computer. If the SAM
does not accept the credentials, the user is prompted for valid credentials.
This workgroup authentication process requires that any change to a user
account, such as a password change, be performed on each computer to which
the user needs access.
... zobacz całą notatkę
Komentarze użytkowników (0)