本文详细介绍了Windows系统下不同类型的用户登录日志，包括交互式登录、网络登录、批处理登录、服务登录、解锁、网络明文登录、基于新凭据的登录、远程交互式登录和缓存交互式登录。这些登录类型在不同场景下有不同的应用，如本地键盘屏幕登录、远程文件共享、计划任务、服务启动、网络身份验证以及远程桌面等。了解这些登录类型对于日志查询、系统管理和安全审计至关重要。
•2: Interactive logon — This is used for a logon at the console of a
computer. A type 2 logon is logged when you attempt to log on at a
Windows computer’s local keyboard and screen.
•3: Network logon — This
logon occurs when you access remote file shares or printers. Also,
most logons to Internet Information Services (IIS) are classified as
network logons,other than IIS logons that use the basic
authentication protocol (those are logged as logon type 8).
•4: Batch logon — This is used for scheduled tasks. When the Windows Scheduler
service starts a scheduled task,it first creates a new logon session
for the task,so that it can run in the security context of the
account that was specified when the task was created.
•5: Service logon — This is used for services and service accounts that log > on to start a service. When a service starts,Windows
最低0.47元/天 解锁文章
扫一扫
707
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
