How is a user authenticated from a non-domain computer when connecting to domain services?

A user from a non-domain computer typically authenticates to domain services by manually entering domain credentials (username and password). Unlike computers joined to the domain, which use automatic Kerberos or NTLM authentication based on the current session, a non-domain computer cannot automatically obtain a Kerberos ticket.

The process is as follows:

• The user launches an application or connects to a resource that requires domain authentication.
• The system prompts for the domain username and password.
• This data is sent to the domain controller for verification.
• Upon successful verification, access is granted.

It is also possible to configure a VPN or another gateway that provides authentication and access to domain resources.