3.2.4 Message Processing Events and Sequencing Rules

Netlogon is used to securely transport data for authentication packages between the client and the server. This is accomplished by packages calling the NetrLogonSamLogon or NetrLogonSamLogonEx methods. Netlogon takes the data specified in the input parameters by the authentication package on the client and sends it unexamined over the secure channel to the server. The server delivers the data to the target authentication package.