这里给出了非常好的文章： Windows身份验证 [ ^ ]

Very nice article is given here : Windows Authentication[^]

这完全取决于客户端的位置。如果客户端位于基于域的Intranet上，则当用户登录其计算机时，将在客户端上进行身份验证。如果客户端是域外部的，则服务器从客户端请求Windows凭据，然后根据相应的域进行身份验证。

That depends entirely on where your client is. If the client is on a domain based intranet, then the authentication takes place on the client when the user logs into their computer. If the client is external from the domain, then the server requests Windows credentials from the client which are then authenticated against the appropriate domain.