'logon'에 해당되는 글 4건
- 2018.10.05 Hiding user accounts on the windows logon screen
- 2018.01.03 Winlogon Automatic Restart Sign-On (ARSO)
- 2014.01.09 Get Logon Session (AuthenticationId)
- 2013.09.25 Windows Security Collection
Hiding user accounts on the windows logon screen
Hiding Unused User Accounts on the Windows 7 Logon Screen
Possible values in the UserList registry(HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList key)
- 0: Hide the user account on the Windows logon screen.
- 1: Show the user account on the Windows logon screen.
- 65536(0x10000): Hide the user account on the Windows logon screen and control panel.
Winlogon Automatic Restart Sign-On (ARSO)
- What is ARSO?
- It makes a device will automatically sign-in the last interactive user after Windows Update restarts the system.
- We can decide to use this function or not by GPO or other options.
- link
- But after Win 10 RS3 1709 build 16251, this function has been extended to regular reboots and shutdowns.
Get Logon Session (AuthenticationId)
Process Explorer를 보면 Logon Session 이란 항목이 존재한다.
하나의 Session 내의 다수의 Logon 계정이 동시 존재할 수 있으며, 그 때마다 다른 Logon Session을 부여 받는다.
RunAs 인 경우가 대표적인 경우이다.
해당 값을 구하는 코드는 다음과 같다.
TOKEN_STATISTICS 구조체의 AuthenticationId member에 해당 값이 존재한다.
PTOKEN_STATISTICS pStatic
if(!::GetTokenInformation(hToken, TokenStatistics, pStatic, buf.size(), &dwLength))
LUID luid = pStatic->AuthenticationId;
Windows Security Collection
http://technet.microsoft.com/en-us/library/cc784886(v=ws.10).aspx
- Logon and Authentication Technologies
- Authorization and Access Control Technologies
- Data Security Technologies
- PKI Technologies
- Trust Technologies