What are the different Windows logon types?
Logon Types
| Logon Number | Logon Type |
|---|---|
| 0 | Used only by the System account |
| 2 | Interactive: Used to log on at the local console |
| 3 | Network: Used to access a Windows resource (e.g., shared folder) from a system on the network |
| 4 | Batch Job: Used to run a scheduled task as a specified account |
What is the difference between login and special logon?
What makes a logon ‘special’? Special logons relate to administrator-level sessions, see the Technet explanation here: A special logon is used. A special logon is a logon that has administrator-equivalent privileges and can be used to elevate a process to a higher level.
Where do I find the different logon types?
Logon Types are logged in the Logon Type field of logon events for every successful and failed logons). These events appear in the Windows event log and helps in analysing the various logon types. The following logon types are supported in the Windows environment which are a total of nine different types of logons.
How does a Windows logon type 2 work?
In an Interactive logon, user enters credentials into the Log On to Windows dialog box or user inserts a smart card into the smart card reader. User’s authentication is then checked against the security database on the user’s local computer or to an Active Directory domain. Windows Logon Type 2 is used for a logon at the console of a computer.
Can a Windows logon be used on a remote computer?
Whether credentials are exposed to potential theft on the target (remote) computer depends primarily on the windows logon type used by the connection method. This table includes guidance for the most common administrative tools and connection methods:
When do I use a batch logon type?
Batch logon type is used by batch servers, where processes may be executing on behalf of a userId without their direct intervention. A service was started by the Service Control Manager ( SCM ). This workstation was unlocked.