Accessing and Using Windows

Before a Windows user can use the system, they need to log on, and Windows has different types and methods to log on. Once the user logs on, they are provided with one or more access tokens that are used when Windows checks if the user can access a resource. Administrators can receive two tokens, an unprivileged token and a privileged token; using the privileged token requires that the administrator pass through User Account Control (UAC), which can be configured. Windows stores password hashes for local users in the Security Accounts Manager (SAM) database, while the passwords for domain users are in the Active Directory Domain Store; users with sufficient credentials can access the hashes. Malicious users may use password crackers like John the Ripper to determine the passwords from the hashes; they may also be able to use the hashes directly in Pass the Hash attacks.