Overview#

Winlogon is the component of Windows Client Authentication Architecture within Microsoft Windows that is responsible for handling the Windows Logon Type for Interactive

Winlogon (since Windows 8) uses the Credential Service Provider Architecture

Winlogon process is responsible for:

• Microsoft Windows station and desktop protection
• loading your user profile into the Windows registry which allows programs to use the keys under HKEY_CURRENT_USER and is different for each Windows user account.
• Screen saver control
• Standard Secure Attention Sequence (SAS) events recognition
• Assignment of security to user shell
• optionally locking the computer when a screensaver is running
• Multiple network provider support

The actual obtainment of user credentials and Authentication is performed by other components within the Windows Client Authentication Architecture.

More Information#

There might be more information for this subject on one of the following:

• Security Support Provider Interface
• Windows Authentication Package
• Windows Credential Provider