Revision Summary Date Revision History Revision Comments 2/11/2011 1.0 New Released new document. 3/25/2011 2.0 Major Updated and revised the technical content. 5/6/2011 2.0 None No changes to the meaning, language, or formatting of the technical content. 6/17/2011 2.1 Minor Clarified the meaning of the technical content. 9/23/2011 3.0 Major Updated and revised the technical content. 12/16/2011 3.0 None No changes to the meaning, language, or formatting of the technical content. 3/30/2012 4.0 Updated and revised the technical content. 7/12/2012 4.0 None No changes to the meaning, language, or formatting of the technical content.
10/25/2012 5.0 Updated and revised the technical content. 1/31/2013 5.1 Minor Clarified the meaning of the technical content. 8/8/2013 6.0 Major Updated and revised the technical content. 11/14/2013 6.0 None No changes to the meaning, language, or formatting of the technical content. 2/13/2014 6.0 None No changes to the meaning, language, or formatting of the technical content. 5/15/2014 6.0 None No changes to the meaning, language, or formatting of the technical content. 6/30/2015 7.0 Significantly changed the technical content. 9/24/2015 7.1 Minor Clarified the meaning of the technical content. 10/16/2015 7.1 None No changes to the
Netlogon Remote Protocol This protocol is used for user and machine authentication on networks. Intranet Web Environment Protocol name Description Document short name Digest Protocol Extensions extensions extend the Digest Authentication standard and . Remote Certificate Mapping Protocol This protocol is used by servers that authenticate users by using X.509 certificates. This protocol allows the server to use a directory, database, or other technology to map the user's X.509 certificate to a security principal. This protocol returns the authorization information that is associated with the security principal in the form of a privilege attribute certificate (PAC), as specified in , that represents the user's identity and group memberships.
Field Field function Message Type The message type (3 is an error message; 1 is a reply; 0 is a request). Data Blob Type The Data Blob field type (1 is an authentication token; 2 is application protocol data; 3 is an error message). Length The length of the Data Blob field. Data Blob The data BLOB. The contents of this field are based on the Data Blob Type field. If the Data Blob Type field is 1, then this field contains the binary BLOB of the authentication token. If the Data Blob Type is 2, then this field contains the Request Type (0 is query; 1 is update), Stock Symbol, and Stock Price field values. If the Data Blob Type field is 3 and the Message Type field is 3, then this message contains an error code. Table 2: Stock Quote Service messages with authentication data support To update or retrieve the stock quote, a client and server exchange one or more request and response messages with an authentication token in the Data Blob field depending on the underlying
Index A Actors 46 46 74 41 42 43 42 41 22 44 Auxiliary 66 68 69 C 73 89 74 43 43 44 43 44 22 Conceptual overview authentication 5 11 11 5 Connecting to an SMB2 share 82 82 84 Considerations 74 74 D Dependencies 44 43 Design intent 46 auxiliary 66 68 69 46 network logon 49 59 55 54 52 45 security services - data 72 71 45 45 45 E 43 43 73 Examples connecting to an SMB2 82 84 82 75 interactive domain - service ticket for client computer 79 79 81 Extensibility 87 73 43 F Functional 22 requirements interactive logon authentication 23 25 24 network logon authentication 26 32 35 37 26 28 22 relationship between standards and Microsoft extensions 40 39 41 37 22 22 G 12 75 H
73 I 87 74 18 44 Interactive domain - service ticket for client computer 79 46 79 81 Introduction authentication 5 11 11 5 M 87 N Network logon 49 59 55 54 52 O Overview interactive authentication 23 25 24 network authentication 26 32 35 37 26 28 relationship between standards and Microsoft extensions 40 39 41 37 41 42 43 42 41 22 5 P 44 87 R 18 Requirements 74 73 interactive logon authentication 23 25 24 network logon authentication 26 32 35 37 26 28 22 44 relationship between standards and Microsoft extensions 40 39 41 37 S Security 74 services - data 72 71 74 Summary of supporting actors and system interests 45 45 System 22 dependencies 43 44 43 73 45 overview authentication 5 11 11 5 protocols 42 43 42 41 requirements interactive logon authentication 23 25 24
network logon authentication 26 32 35 37 26 28 22 relationship between standards and Microsoft extensions 40 39 41 37 use cases 46 auxiliary 66 68 69 46 network logon 49 59 55 54 52 45 security services - data 72 71 45 45 22 43 44 43 73 41 22 System use cases 46 45 45 T 41 42 43 42 41 89 U 45 46 auxiliary 66 68 69 46 network logon 49 59 55 54 52 45 security services - data 72 71 45 45 45 V Versioning 87 73