LogonUser, LOGON32_LOGON_INTERACTIVE and LOGON32_LOGON_NETWORK

winapi impersonation
Bruce Blackshaw picture Bruce Blackshaw · Oct 1, 2009 · Viewed 11.7k times · Source

Can anyone provide a clear explanation of the difference between LOGON32__LOGON_INTERACTIVE and LOGON32_LOGON_NETWORK when used with LogonUser?

The MS documentation is here.

But I'm not clear what should be used. The scenario is similar to a telnet server that Windows users (local to the server, and domain users) are logging into - I want to impersonate the user in the thread. They may want to delete files or whatever.

Answer

Justin Grant picture Justin Grant · Oct 5, 2009

Look at http://www.bitvise.com/wug-logontype for a thorough discussion of the issue and a recommendation:

We recommend that users who require terminal shell access use the 'interactive' logon type.

Related questions

Why doesn't LogonUser(...) work for domain accounts?

I've been trying to use LogonUser(...) to get an access token for a user account, as in this MSDN sample. // Call LogonUser to obtain a handle to an access token. bool returnValue = LogonUser(userName, domainName, Console.ReadLine(), LOGON32_LOGON_INTERACTIVE, …

Read More
Is it possible to "decompile" a Windows .exe? Or at least view the Assembly?

A friend of mine downloaded some malware from Facebook, and I'm curious to see what it does without infecting myself. I know that you can't really decompile an .exe, but can I at least view it in Assembly or attach …

Read More
How to provide user name and password when connecting to a network share

When connecting to a network share for which the current user (in my case, a network enabled service user) has no rights, name and password have to be provided. I know how to do this with Win32 functions (the WNet* …

Read More