If you have any questions about WindowsNT logon types, checkout this page.
These are often used in the context of the .Net CLR or the Windows Event log. Good reference material if you find yourself wondering what type of login "8" is.
Send you a $1 PayPal payment if you comment on this with the answer for "What is logon type '8'?"
I am making this offer to prove a point -- no one reads this blog.
1 comment:
A little late, but somebody does read this blog.
Logon Type 8 – NetworkCleartext
This logon type indicates a network logon like logon type 3 but where the password was sent over the network in the clear text. Windows server doesn’t allow connection to shared file or printers with clear text authentication. The only situation I’m aware of are logons from within an ASP script using the ADVAPI or when a user logs on to IIS using IIS’s basic authentication mode. In both cases the logon process in the event’s description will list advapi. Basic authentication is only dangerous if it isn’t wrapped inside an SSL session (i.e. https). As far as logons generated by an ASP, script remember that embedding passwords in source code is a bad practice for maintenance purposes as well as the risk that someone malicious will view the source code and thereby gain the password.
Post a Comment