Enterprise Server for .NET includes a default Windows logon provider. It is used when the system configuration provides no other provider. The Windows logon provider can also be explicitly configured. It uses the Windows LogonUser API to verify user credentials and create impersonation tokens. It has a variety of configuration options.