Smartcard logon problem on WindowsXP

From: Ersin Gulacti (ersingulacti_at_hotmail.com)
Date: 12/17/03

  • Next message: Jim: "Re: [HwoTo] Write boot sector of disk directly?" 
    Date: 17 Dec 2003 12:46:47 -0800

    We have a 3rd party CA in our Windows 2000 domain. Our Windows 2000
    client computers are using smartcard logon without any problems.
    Recently two new client computers with WindowsXP Professional OS were
    added to the domain. Users cannot perform smartcard logon on these XP
    computers (same users can logon to Windows 2000 computers using their
    iKey tokens).

    In the domain controller we found the following eventlog entry:
    ---------------------------------------------
    Source: Kerberos
    Event ID: 9

    The client has failed to validate the Domain
    Controller certificate for VIRGO. Contact your
    system administrator to determine why the Domain
    Controller certificate is invalid.

    Error data = 0x13 0x20 0x09 0x80
    ---------------------------------------------

    Any ideas?

  • Next message: Jim: "Re: [HwoTo] Write boot sector of disk directly?"

    Relevant Pages

    • RE: What is the Besy Way to Deploy Client
      ... You can use Remote Installation Service to install Windows XP on ... With RIS you can set up new client computers remotely by ... How To Use Remote Installation Service to Install Windows 2000 Professional ... Using Microsoft Systems Management Server 2.0 to Deploy Microsoft Windows ...
      (microsoft.public.windows.server.sbs)
    • Re: SBS 2003 Update for client deployment of XP SP2 has been released.
      ... > automatically deploy Windows XP SP2 to your SBS client computers. ... Windows Small Business Server 2003 Client Setup deploys Windows ... > XP Service Pack 1 to all client computers running Windows XP Professional. ...
      (microsoft.public.windows.server.sbs)
    • RE: migration problems
      ... accounts for client computers running Windows 95, Windows 98, or Windows ... configure these client computers for the destination server in "Step 6. ... Migrating from Small Business Server 2000 or Windows 2000 Server to Windows ...
      (microsoft.public.windows.server.sbs)
    • Re: Cannot browse network / Kerberos Error??
      ... Open the service console, check if the W32Time service is running. ... On client computers, check the TIME Zone settings to make sure that all ... Windows NT 4.0 domain ... setting of the domain controller in Windows XP or in Windows Server 2003 ...
      (microsoft.public.windows.server.sbs)
    • Re: Welcome screen dont show smartcard icon
      ... Smartcard logon only works in a domain environment... ... > Windows XP home or professional don't show on the welcome screen smartcard ... > The reader is perfect installed, and we have tested many readers, but on ...
      (microsoft.public.platformsdk.security)