I am developer and curious how Windows server machines are used.
I believe that they show interactive login screen but run without any user had ever logged-in.
In context of definition of (*), under which account the booted Windows AD-ipoined-machine is identified/secured by AD DC(Domain Controller):
local machine account (Table 1 in (*))
domain machine account (Table 2 in (*))
AD-joined machine show login screen permitting 2 basic logins thereafter:
local user account
domain user account
In which context - B) or C) - runs the following after A), i.e after login screen, the further logged-in local user 1)?
I am developer and I know how identification, impersonation and delegation of processes work.
This question is about machine (Windows) booted when it shows interactive login screen with choices.
Under which machine account is it booted before any (interactive) user login?
when it shows login screen?
Well, basically I am re-writing original questions.
But, having read ( * ), I cannot understand why "Machine SID for computer DEMOSYSTEM" (Table 1 )in ( * ) is needed at all. It is not used to access other machine before joining machine to AD, even less it seems to be needed after (joining a machine to AD).
Also, it is difficult to believe that local user account of machine before joining to domain is the same as after joining. Computer is identified and channel is secured by DC even for local account of AD computer but not for workgroup one.
Subquestions forked from this question:
- workgroup Windows users (or groups) can use domain accounts? but not vice versa?
- Domain Admins vs. Administrators in Windows AD DC
- Windows workgroup LocalSystem vs. domain (AD) LocalSystem [closed]