How to create processes on another computer using a Smartcard user

Hello,

I have an application that will be running as a "client". It will have a
card reader which will authenticate using a smartcard (DoD PKI CAC card to be
exact, but just lets say a certificate based logon). Once the client does
it's normal authentication on the client PC, I would like to create processes
as this user on my "server" which is running on a separate computer. I am
thinking I need to somehow get an CAccessToken from LogonUser(Ex) to create
the processes. The "server" application will be running as a Windows service.

Is this even possible?

Can I use Active Directory to authenticate this user on my "server"?

Can I pass across the public key certificate to create a valid token on my
"server"?

Can I authenticate or create processes and if so how if not any of the above?



I am using a windows XP and Windows 2003 server. I would also like to do
this from a Java (1.3 JDK) applet to a Windows backend as well.

Any tips or direction would be greatly appreciated.

Thanks,

--
-Tim
.

Relevant Pages