No announcement yet.

Enumeration - Windows Users

  • Time
  • Show
Clear All
new posts

  • Enumeration - Windows Users

    The Microsoft Windows operating system works in two ways: either as a stand-alone or as a networked system which might be part of Active Directory (AD). A stand-alone Windows host will handle users locally and a networked installation will handle users in a centrealized manner.
    In many operating systems, the item that is most responsible for controlling access to the system is the user object. In windows, the fundamental object that is used to determine access is the user account. User accounts in Windows are used for everything from accessing file shares to running services that allow software components to execute with the proper privileges and access.

    Processes in Windows are run under one of the following contexts...

    Local Service
    A user account with higher than normal access rights to the local system but only limited access to the network.

    Network Service
    A user account with normal access to the network but only limited access to the local system.

    A super-user style account that has nearly unlimited access to the local system. This user has higher privileges that the Administrator account.

    Current User
    The currently logged-in user, who can run applications and tasks but is still subject to restrictions that other users are not subject to. The restrictions on this user account hold true even if the user account being used is an Administrator account.

    Each of these user accounts is used for specific reasons. In a typical Windows session each is running different processes. These users are not in particular related to the Microsoft Active Directory service.
    Certified Security Geek