What kind of logon is Type 10?
Logon types and descriptions
| Logon Type | Logon Title |
|---|---|
| 7 | Unlock |
| 8 | NetworkCleartext |
| 9 | NewCredentials |
| 10 | RemoteInteractive |
What are the logon types?
Logon Types
| Logon Number | Logon Type |
|---|---|
| 0 | Used only by the System account |
| 2 | Interactive: Used to log on at the local console |
| 3 | Network: Used to access a Windows resource (e.g., shared folder) from a system on the network |
| 4 | Batch Job: Used to run a scheduled task as a specified account |
What is a type 5 logon?
Logon type 5: Service. A service was started by the Service Control Manager. When Windows starts a service which is configured to log on as a user, Windows will create a new logon session for this service. This happens only if the service uses a “common” user account.
Is RDP interactive logon?
10: Remote Interactive logon—This is used for RDP-based applications like Terminal Services, Remote Desktop or Remote Assistance. Windows supports logon using cached credentials to ease the life of mobile users and users who are often disconnected.
What is CredPro?
CredPro indicates a logon initiated by User Account Control. With these, you can determine that someone is in fact trying to log on. At regular intervals, could be a script (maybe, at that lenght they are trying to make it seem like it’s another admin or something, compared to trying to log on every 30 minutes).
How do I enable authentication in Windows 10 in IIS?
Enabling Windows authentication in IIS
- Go to Control Panel -> Programs and Features -> Turn windows features on or off.
- Expand Internet Information Services -> World Wide Web Services.
- Under Security, select the Windows Authentication check box.
- Click OK to finish the configuration.
Is RDP logon Type 3?
According to my knowledge and test, the Logon Type value = 3 is expected for Terminal Service and RDP. You will get this logon type 3 when you are using NLA (Network Layer Authentication) as the authentication type since it will try and pre-authenticate you prior to giving you RDP access.
What is logon ID in Event Viewer?
Logon ID: a semi-unique (unique between reboots) number that identifies the logon session just initiated. Any events logged subsequently during this logon session will report the same Logon ID through to the logoff event 4647 or 4634.
How do I know if my account is interactive?
Open up group policy manager, and go to Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment .
What is Windows logon Type 10 and Type 11?
Windows Logon Type 10 is used for RDP-based applications like Terminal Services, Remote Desktop or Remote Assistance. Windows Logon Type 11 feature facilitates mobile users that allow caching credentials hashes of the last 10 interactive domain logons by default.
What is the logon type of Windows 10 without /netonly?
Without /netonly, windows runs the program on the local computer and on the network as the user specified in the run as command, and logs the logon event with type 2. 8: Remote Interactive logon: This is also referred to as logon type 10.
What is a type 2 logon?
A type 2 logon is logged when you attempt to log on at a Windows computer’s local keyboard and screen whether with a domain account or a local account from the computer’s local SAM.
What are OpenWindows logon type and interactive logon?
Windows Logon Type are logged in the Logon Type field of logon events. They are showing up in the windows security event log and reveal the type of logon that prompted the event. In an Interactive logon, user enters credentials into the Log On to Windows dialog box or user inserts a smart card into the smart card reader.