Q: What is an interactive Windows logon session and how can users start an interactive logon session? Are there any Group Policy Object (GPO) settings I can use to control user interactive logons in my Active Directory (AD) environment? Can you also tell me where a user’s last interactive logon time is stored in AD?
A: An interactive Windows logon session is the result of an interaction between a user and the Windows OS. An interactive logon session is always initiated by a user and tells Windows that the user wants to authenticate either to a local machine or to a domain. Following this user action, Windows will prompt the user for a set of authentication credentials. Because of the interaction between the OS (requesting credentials) and the user (providing credentials), Microsoft calls this method of starting an authentication process "interactive” logon. Interactive logon is also referred to as "local logon." A successful interactive logon results in a logon session. In Windows, a user can start an interactive authentication or logon process in different ways: . . .
Register
