🔑Windows Logon Session

What is Logon Session in windows OS ?

Intro

• A logon session (or login session) refers to the period of time during which a user is authenticated and actively interacting with a system, application, or service.

• It begins when a user successfully logs in (authenticates) and ends when the user logs out or the session is terminated due to inactivity, timeout, or manual closure.

Why is it Called a "Session"

• The term session originates from the idea of a "period of interaction" or a "continuous sequence of events."

• In computing, it refers to a bounded period during which a user or system interacts with a service or application. Here's why it's called a session:

  • Temporal Context: A session represents a specific time frame during which a user is actively connected to a system. It has a clear start (logon) and end (logoff).

  • Isolation: Each session is typically isolated from others, ensuring that one user's activities do not interfere with another's. For example, in a multi-user system, each user has their own session.

  • Continuity: A session allows for continuous interaction without requiring re-authentication for every action, as long as the session remains active.

Internal Meaning of a Session

• Internally, a session is represented by data structures and mechanisms that track the user's activities and maintain their state. For example:

  • Session ID: A unique identifier assigned to each session to distinguish it from others.

  • Session Tokens: Security tokens or cookies that validate the user's authenticated state.

  • Session Data: Information about the user's activities, preferences, and permissions stored temporarily in memory or on disk.

  • Timeouts: Mechanisms to automatically end the session after a period of inactivity or after a predefined duration.