The application executed on the application server can be executed directly within the account used by the Terminal server (authorization by Terminal) or on another Windows user account (authorization by Windows). If the application is executed within a Windows user account, it executes with the environment and permissions of that Windows user. Using Windows user account for application execution allows a better control of the application from the operating system level.