14. Logging on
Network Administration is carried out using the following tools:
- Administrative Wizards.
- Server Manager - manages domains and computers.
- User Manager for Domains - manages security for domains, servers and workstations.
or:
- User Manager - manages security for workstations.
- Backup.
- Event Viewer - provides information on errors and warnings.
- Windows NT diagnostics - information about drives, memory and services.
The Windows NT logon to a computer consists of the following steps:
- The user name and password are sent to the Local Security Authority (LSA).
- The LSA queries the Security Accounts Manager (SAM).
- The SAM checks the username and password in the directory database.
- On approval, the LSA creates an access token with the appropriate rights.
- WinLogon calls a new process such as Explorer and attaches the access token to it.
The Windows NT logon to a domain consists of the following steps:
- The user name and password are sent to the Local Security Authority (LSA).
- The security system passes the request to the client's Net Logon Service
- The client's Net Logon Service passes the request to the Net Logon Service on the Domain Controller
- The domain controller's Net Logon Service passes the request to the Domain Controller's SAM.
- The SAM checks the username and password in the directory database.
- The result is passed to the domain controller's Net Logon Service.
- The domain controller's Net Logon Service passes the result to the client's Net Logon Service.
- The client's Net Logon Service passes the result to the LSA.
- On approval, the LSA creates an access token with the appropriate rights.
- WinLogon calls a new process such as Explorer and attaches the access token to it.
You can log on to a computer (Local User Account) or a domain (Domain User Account).
If you log on to the domain then an account must
have been created on a domain controller. The name (not case-sensitive), a password (case-sensitive)
and a domain name must be entered.
The option exists to log on over a RAS connection if RAS has been enabled on the server. If you
log on to a computer, then the user name must reside in the local computer's directory database.
The NT security dialog box is invoked by Ctrl+Alt+Del. The options are to lock the workstation,
change the password, log off, shut down and the task manager that lists the current applications that are
running. This is one way of finding out who you are! If you do nothing, the dialog box disappears again after
a minute or two.
|
