I am a developer and curious how Windows server machines are used.
- A) I believe that they show interactive login screen but run without any user had ever logged-in.
In context of definition of (*), under which account the booted Windows AD-joined-machine is identified/secured by AD DC (Domain Controller):
AD-joined machine show login screen permitting 2 basic logins thereafter:
- 1) Local user account
- 2) Domain user account
In which context - B) or C) - runs the following after A), i.e after login screen, the further logged-in local user 1)?
I know how identification, impersonation, and delegation of processes work.
This question is about when a Windows machine is booted and shows the interactive login screen with choices.
1) Under which machine account is it booted before any (interactive) user login? when it shows login screen?
Well, basically I am re-writing the original questions.
But, having read (*), I cannot understand why "Machine SID for computer DEMOSYSTEM" (in Table 1) is needed at all. It is not used to access other machine before joining machine to AD, even less it seems to be needed after (joining a machine to AD).
Also, it is difficult to believe that local user account of machine before joining to domain is the same as after joining. Computer is identified and channel is secured by DC even for local account of AD computer but not for workgroup one.
Subquestions forked from this question:
- workgroup Windows users (or groups) can use domain accounts? but not vice versa?
- Domain Admins vs. Administrators in Windows AD DC
- Windows workgroup LocalSystem vs. domain (AD) LocalSystem [closed]