Windows logon process

  • Thread starter Thread starter Robert Bollinger
  • Start date Start date
R

Robert Bollinger

Hello All -

I have soem questions about the windows logon process for both the domain
and the local system (no domain).

I understand this:

1. User Preses Ctrl+Alt+Del and then the Winlogon Services is used and
MSGINA is called
2. User submits password and username to the MSGINA
3. MSGINA Passes the Username and Password to the LSA
4. LSA Passes the Username and password to the SSPI
5. The SSPI Does a simple test to see if the KDC is there but sending the
credentials to the Kerberos SSP
6. THat fails then the LSA Passes the data back to the top ?
7. THe same process happens again except the LSA Uses the NTLM_SSP_Service
8. If that failes user gets "acess denied".

Is the above correct? Em i completely off here ?

Please explain this and where I am going wrong as i have more microsoft
papers than i can count.

Thanks You,

Robert Bollinger, MCP.
 
Back
Top