Lsass handles Authentication (Auth) Packages and in the Windows logon process it calls the Negotiate Auth Package. The Windows Local Security Authority process The Local security authority exposes a function called LsalogonUser to winlogon over LPC (a remote procedure call protocol for processes running on the same machine). Lsass drives the entire security of your computer as you access resources. The Windows Logon Application handles the logon process, with LogonUI.exe displaying the correct logon box onscreen, relevant to the authentication providers that are available (for example, on this device can you choose a password, Windows Hello, a PIN number or a FIDO key?).Įnter your password into the logon user interface, and winlogon.exe passes it off to the local security authority subsystem service (lsass.exe). Step 1 of the Windows logon process with winlogon.exe, logonUI.exe and lsass.exe Sounds simple? Let's look at the complexity. So the Windows logon process needs to take your credentials, pass them to another service to validate them, then load your desktop, in as short a time as possible. Then, you might want access to resources on your local network, like a file share or printer. But we also need to validate that you've entered a correct username and password to prove you are allowed to use that device. When you sit down at your computer, your aim is to get to your desktop as fast as possible, so you can start working. This article explains the process to just log on to Windows with an on-premises Active Directory Domain, including the fact that your password isn't sent through to the Active Directory Domain Controller server! At our ITOps Talk: All things hybrid event, senior developer Steve Syfuhs took us through the details, including access to cloud resources. Logging on to your computer is certainly faster than it used to be, yet there are a bunch of technical steps that happen in the background.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |