Windows Logon Session Types: Service

Picture of Henry Zhang Henry Zhang : Nov 29, 2021 9:15:00 AM

Endpoint Hardening Senteon Technical Cybersecurity Managed Endpoint Hardening System hardening

Logon Type — Service

Used to run a service as a specified account.

Logon Type Number

5

Logon User Rights / Tokens

SeServiceLogonRight — Log on as a service

SeDenyServiceLogonRight — Deny log on as a service

Authenticators Accepted

Password (stored as LSA secret)

Reusable Credentials Stored in Destination LSA?

Yes

Examples

Windows services

Windows Logon Session Types: NetworkCleartext

Picture of Henry Zhang Henry Zhang : Dec 13, 2021 7:30:00 AM

Logon Type — NetworkCleartext Used to logon with credentials sent in clear text (only possible for certain services).

Endpoint Hardening Senteon Technical Cybersecurity Managed Endpoint Hardening System hardening
READ MORE

Windows Logon Session Types: Unlock

Picture of Henry Zhang Henry Zhang : Dec 6, 2021 9:45:00 AM

Logon Type — Unlock Used to unlock an Interactive Logon session. Creates a new Type 2 (Interactive) logon type.

Endpoint Hardening Senteon Technical Cybersecurity Managed Endpoint Hardening System hardening
READ MORE

Windows Logon Session Types: Interactive

Picture of Henry Zhang Henry Zhang : Nov 15, 2021 8:00:00 AM

Logon Type — Interactive Used to log on at the local console.

Endpoint Hardening Senteon Technical Cybersecurity Managed Endpoint Hardening System hardening
READ MORE