Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What is windows "interactive user"?

share|improve this question
one that can login to graphical terminal? not only be used as owner of service? – Hubert Kario Oct 6 '10 at 12:54
up vote 7 down vote accepted

I will build a little bit on Rajat's answer.

Each logon session to a Windows (NT-based versions, that is) machine has a "security token"-- a data structure that describes, amongst other things, the groups that the user represented by the token is a member of.

The "Interactive" identity isn't a group that you can manually place members into, but rather is added by the operating system, automatically, when a security token is constructed for a user who has logged-on via the Windows Graphical User Interface. This is similiar to the "Network" identity, which is added automatically to tokens created for users who are accessing the machine via the network.

These automatically-generated group memberships allow you to construct permissions that might allow or deny access to resources based on how the user is accessing the machine. This supplements the permission system's default behavior of arbitrating access based on who is accessing the resource.

share|improve this answer

just have look following link

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.