Active directory and windows autehnication

I have the following questions about the active directory and windows auehtnication

1. Can you tell me what the difference is between the active directory and windows authenication when working with visual studio.net 2008?

2. Can the active directory and windows authenication work toegher? If so, can you tell me how?

3. Is the active directory and windows authenication the same thing? If so, please explain.

There is no much difference between windows authentication & AD authentication, when machine is not part of the domain user information is stored into local SAM database & during login, local authentication mechanism is utilized to validate the user where as using AD it is ldap based directory service authentication where user information is stored into AD(NTDS.DIT)database, so during login to domain its not local but its information from AD is used to authorize the user for domain access.

This is for user same is followed for machine account too during login to domain. Machine forms a secure channel with DC for securing the information & maintains its credentials which is default reset after 30 days. The authentication protocol used for domain login is Kerberos.

Yes, AD & windows authentication work together because while login to domain first machine has to authenticate itself from AD & then followed by users authentication.

http://technet.microsoft.com/en-us/library/cc781463%28WS.10%29.aspx

http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/523ae943-5e6a-4200-9103-9808baa00157.mspx?mfr=true

http://www.codeproject.com/KB/WC/Authentication_Mechanisms.aspx

http://www.techrepublic.com/article/understand-windows-authentication-to-improve-security/5054630

I'm no way Visual studio expert but i know Visual studio application use AD to query/pull information using LDAP query by authenticating itself against DS.

In AD windows authentication is same. In previous version of windows NTLM was the authenticating protocol but from windows 2000 MS introduced more secure ptotocol called Kerberos to be used default.

http://blogs.technet.com/b/askds/archive/2008/03/06/kerberos-for-the-busy-admin.aspx

Piyush

Lepide.com

2 Replies

Know the answer? Post it — somebody with the same question will find it here.

Piyush Agrawal15y ago
There is no much difference between windows authentication & AD authentication, when machine is not part of the domain user information is stored into local SAM database & during login, local authentication mechanism is utilized to validate the user where as using AD it is ldap based directory service authentication where user information is stored into AD(NTDS.DIT)database, so during login to domain its not local but its information from AD is used to authorize the user for domain access.
This is for user same is followed for machine account too during login to domain. Machine forms a secure channel with DC for securing the information & maintains its credentials which is default reset after 30 days. The authentication protocol used for domain login is Kerberos.
Yes, AD & windows authentication work together because while login to domain first machine has to authenticate itself from AD & then followed by users authentication.
http://technet.microsoft.com/en-us/library/cc781463%28WS.10%29.aspx
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/523ae943-5e6a-4200-9103-9808baa00157.mspx?mfr=true
http://www.codeproject.com/KB/WC/Authentication_Mechanisms.aspx
http://www.techrepublic.com/article/understand-windows-authentication-to-improve-security/5054630
I'm no way Visual studio expert but i know Visual studio application use AD to query/pull information using LDAP query by authenticating itself against DS.
In AD windows authentication is same. In previous version of windows NTLM was the authenticating protocol but from windows 2000 MS introduced more secure ptotocol called Kerberos to be used default.
http://blogs.technet.com/b/askds/archive/2008/03/06/kerberos-for-the-busy-admin.aspx

Piyush
Lepide.com
Amit Choudhary15y ago
Hi Friend,

Whenever you use Integrated windows authentication it always uses the active directory to search for the User and its credential information. To read the details of the Active Directory and the process of NTLM Authentication read this article here.