Windows Logon Session Types: Network

Logon Type — Network

Used to access a Windows resource (e.g. shared folder) from a system on the network.

Logon Type Number

3

Logon User Rights / Tokens

SeNetworkLogonRight — Access this computer from the network

SeDenyNetworkLogonRight — Deny access to this computer from the network

Authenticators Accepted

Password, NT Hash, Kerberos ticket

Reusable Credentials Stored in Destination LSA?

No (except if delegation is enabled, then Kerberos tickets are stored)

Examples

• NET USE
• RPC calls
• PowerShell / WinRM / PsExec
• Remote Registry
• IIS integrated Windows authentication
• SQL Windows authentication
• Vulnerability Scanners