Windows XP Logon Method Resolution

Normally, when we use Windows XP, we always have to log in first. Windows XP logon authentication mechanism is much stricter than Windows 98, understanding and Mastering the Windows XP login authentication mechanism and principle is very important to us, can enhance to the system security understanding, and can effectively prevent, solves the hacker and the virus intrusion.

First, learn about Windows XP

Several types of logins

1. Interactive logon

Interactive login is the most common type of login we normally use, that is, the user login via the corresponding user account and password. Some netizens think "interactive login" is "local login", in fact, this is wrong. "Interactive logon" also includes "domain account login", and "local login" is limited to "local account login."

It is important to mention here that, through Terminal Services and Remote Desktop logins, the host can be viewed as an "interactive login", with the same principle of authentication.

During interactive logon, the system first verifies the user account type of the login, whether it is a local user account or a domain user account, and then a corresponding validation mechanism is used. Because of the different user account type, its processing method is also different.

◇ Local User account

Logged in with a local user account, the system is validated by the information stored in the native SAM database. So that's why Windows2000 forget the administrator password can be resolved by deleting the Sam file. But not for Windows XP, perhaps for security reasons. When you log on with a local user account, you can access only local resources with access rights. (Figure 1)

Figure 1

◇ Domain user account

Log in with a domain user account and the system is validated by data stored in the Active Directory of the domain controller. If the user account is valid, you can access resources that have access to the entire domain after you log on.

Tip: If the computer joins the domain, the logon dialog box displays the "Log on to:" Item from which you can choose to log on to the domain or log on to the local machine.