Remote Logon

No matter where your credentials are authenticated, the process establishes your identity with just one security authority — the LSA on the computer where you are logging on. The fact that you are able to use a domain account means only that the LSA on your workstation trusts the security authority for the domain. Other Windows 2000 computers in the domain share the same trust, yet before you can browse those computers you must log on to each of them as well. It does not matter that your "passport" was stamped at the border of the last computer where you logged on. You must show it again whenever you want access to another network client that is running Windows 2000.

When you want access to a system across the network that is running Windows 2000 from the computer where you have logged on, you are not required to provide information in a dialog box as you are required to do when you log on at a keyboard. Instead, the LSA on your workstation establishes your identity with the LSA on the remote computer by using the credentials that were cached during your initial interactive logon to the network.

© 1985-2000 Microsoft Corporation. All rights reserved.