Windows XP Authentication Process

Windows XP Professional Authentication Process

To gain access to a computer running Windows XP Professional or to any resource on

that computer (whether the computer is configured to use the Welcome screen or the

Log On To Windows dialog box), you must provide a user name and possibly a pass-

word.

The way Windows XP Professional authenticates a user depends on whether the user

is logging on to a domain or logging on locally to a computer (see Figure)

Figure :  Windows XP Professional grants an access token based on user credentials during the authentication process.

The steps in the authentication process are as follows:

1.      The user logs on by providing logon credentials—typically user name and pass-

word—and Windows XP Professional forwards this information to the security

subsystem of that local computer.

2.      Windows XP Professional compares the logon credentials with the user informa-

tion in the local security database, which resides in the security subsystem of the

local computer.

3.      If the credentials are valid, Windows XP Professional creates an access token

for the user, which is the user’s identification for that local computer. The access token contains the user’s security settings, which allow the user to gain access tothe appropriate resources on that computer and to perform specific system tasks.