Windows 7 / Networking

Authentication vs Authorization

Two important security principles in use within a domain are authentication and authorization. In short, authentication is used to identify a user, and authorization is used to control access of the user.

As an example, if Joe is given a domain account, he can log on with that account. He uses it for authentication. However, just because Joe can log on doesn't mean he's automatically granted access to all the resources in the domain. Instead, his account is granted access to specific resources based on his needs and what he's authorized to access.

[Previous] [Contents] [Next]