The little secret of the Windows operating system landing

In general, Windows provides the following 4 ways to sign in:

(1) Interactive login

Interactive login is the most common type of login we normally use, that is, the user login via the corresponding user account and password. Some netizens think "interactive login" is "local login", in fact, this is wrong. "Interactive logon" also includes "domain account login", and "local login" is limited to "local account login." It is important to mention here that, through Terminal Services and Remote Desktop logins, the host can be viewed as an "interactive login", with the same principle of authentication.

During interactive logon, the system first verifies the user account type of the login, whether it is a local user account or a domain user account, and then a corresponding validation mechanism is used. Because of the different user account type, its processing method is also different.

Local user account: Log in with a local user account, and the system is validated by the information stored in the native SAM database. So that's why Windows2000 forget the administrator password can be resolved by deleting the Sam file. But not for Windows XP, perhaps for security reasons. When you log on with a local user account, you can access only local resources with access rights.

Domain user account: A domain user account is logged in, and the system is validated by data stored in the Active Directory of the domain controller. If the user account is valid, you can access resources that have access to the entire domain after you log on.

(2) Network login

If your computer joins a workgroup or domain, you will need to "network logon" when you want to access resources from other computers. When you want to log on to the host, you enter the host's user name and password to authenticate. It should be reminded that the user account entered must be on the other side of the host, not the user account on the host. The validity of the user account is controlled by the respondent host because of the network login.

(3) Service Login

A service login is a special way of logging in. At ordinary times, the system starts the service and the program, is the first to have some user account to log on after the operation, these user accounts can be domain user account, local user account or System account. Using a different user account to log in, its access to the system, control permissions are also different, and, with the local user account log in, only access to the local resources with access rights, not access to resources on other computers, this is similar to "Interactive logon."

The process of the system uses a different account. When the system is started, some base and Win32 services are logged on to the system to achieve access and control of the system. To run services.msc, you can set up these services. Because the system service has the pivotal position, generally all by the system account login, therefore has the absolute control authority to the systems, therefore many viruses and the Trojan Horse also contend joins this noble system. In addition to system, some services are logged in with both local service and network service accounts. And after the system initialization, all the programs that users run are logged in as the user's account. The principle is not difficult to see from the above, why a lot of computer articles to tell the general user, usually use the computer in the Users group to log in, because even if the virus, Trojan program, due to the user login account permissions limit, at most can only destroy the user's own resources, But the important information that maintains system security and stability is not destructive.

(4) Batch processing login

Batch logons are rarely used by ordinary users, and are typically used by programs that perform batch operations. When performing a batch login, the account you are using has the right to batch work, or you cannot sign in.