+1 coinfor reading to the end
+1
Home / Glossary / TGT
Glossary · Security

TGT

Ticket Granting Ticket

In plain language

A pass you receive when you log in to a Windows network that lets you reach other services without typing your password again.

The metaphor

Like a festival wristband that gets you into stages without showing ID again.

Going deeper

How it works

  • You log in once and get the pass.
  • The pass is used to ask for access to other services.
  • It expires after a number of hours.
  • Stolen passes can be used to impersonate someone.

What can go wrong (example scenario)

An attacker on a firm's network copied a pass from a staff laptop and used it to reach shared folders for hours.

In practice
  • A user opens the file server with no extra prompt.
  • A technician resets passes after a breach.
  • A sign-out ends the pass.

A question owners ask

Why do I stay logged in all day?

Because your pass lets services trust you. Lock your screen when you step away.

Related terms
AAAAuthentication, Authorization, and AccountingAccount takeoverACLAccess Control ListAdmin accountAESAdvanced Encryption StandardAES-256Advanced Encryption Standards 256-bitAISAutomated Indicator SharingAPTAdvanced Persistent Threat

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →