Local Authentication in Windows
In this hands-on lab, you will learn about local authentication mechanics in the Windows operating system, including user accounts, the authentication process, and different types of authentication. You will practice identifying when a user account has logged on and logged off, including the type of authentication.

Course Content
Upon completing this lab, you should be able to:
- Define the concept of a user account, and describe the importance of understanding Windows local user accounts and how they authenticate to a Windows system.
- Identify how and where local accounts are defined within a modern Windows system (including the concept of SIDs and RIDs).
- Describe the process of authenticating to a Windows system, including the differences between different types of authentication (local interactive, remote interactive, etc.).
- List and describe the most common artifacts of Windows local logon/logoff events.
- Accurately identify when a specific user account has logged on and logged off to a Windows system, including the type of authentication.
- Given a date/time, accurately identify all user accounts authenticated to a Windows system at that time, including the type of authentication.















