Windows Logon Session Types: Service

Picture of Henry Zhang Henry Zhang : Published Updated

Endpoint Hardening Senteon Technical Cybersecurity Managed Endpoint Hardening System Hardening

Logon Type — Service

Used to run a service as a specified account.

Logon Type Number

5

Logon User Rights / Tokens

SeServiceLogonRight — Log on as a service

SeDenyServiceLogonRight — Deny log on as a service

Authenticators Accepted

Password (stored as LSA secret)

Reusable Credentials Stored in Destination LSA?

Yes

Examples

Windows services

Windows Logon Session Types: NetworkCleartext

Picture of Henry Zhang Henry Zhang : Dec 13, 2021, 7:30:00 AM

Logon Type — NetworkCleartext Used to logon with credentials sent in clear text (only possible for certain services). Logon Type Number 8 Logon User...

Endpoint Hardening Senteon Technical Cybersecurity Managed Endpoint Hardening System Hardening
READ MORE

Windows Logon Session Types: Unlock

Picture of Henry Zhang Henry Zhang : Dec 6, 2021, 9:45:00 AM

Logon Type — Unlock Used to unlock an Interactive Logon session. Creates a new Type 2 (Interactive) logon type. Logon Type Number 7 Logon User Rights...

Endpoint Hardening Senteon Technical Cybersecurity Managed Endpoint Hardening System Hardening
READ MORE

Windows Logon Session Types: Interactive

Picture of Henry Zhang Henry Zhang : Nov 15, 2021, 8:00:00 AM

Logon Type — Interactive Used to log on at the local console. Logon Type Number 2 Logon User Rights / Tokens SeInteractiveLogonRight — Allow log on...

Endpoint Hardening Senteon Technical Cybersecurity Managed Endpoint Hardening System Hardening
READ MORE