Re: Unable to access domain resources after smart card logon

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 07/09/05


Date: Sat, 9 Jul 2005 05:46:24 -0700

You probably should check in the IE security options to see
whether automatic use of credentals has been disallowed
for your intranet zone.
In IE's Tools dropbox, Internet Options, Security tab, select
zone and click Custom Level, and scroll to bottom at User
Authentication.

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Yossi Mor" <YossiMor@discussions.microsoft.com> wrote in message
news:9FB8CFFF-C303-45DC-81D8-7890351E6050@microsoft.com...
> Thanks steven for  your advise,
>
> It is also happening when trying to access to an email account via  on the
> outlook 2003 client. i am asked to type in the smart card pin as well.
>
> Regards,
>
> Yossi
>
> "Steven L Umbach" wrote:
>
> > I would check to see if that computer has mapped drive with persistent
> > credentials or if using XP Pro check to see if it has stored
credentials. If
> > so you can delete both.  The problem seems to be related to that one
> > computer from your description. --- Steve
> >
> >
> >
> > "Yossi Mor" <YossiMor@discussions.microsoft.com> wrote in message
> > news:3C91254A-C2EF-4595-A5E7-51498399FC37@microsoft.com...
> > > Hi forum,
> > >
> > > I have a very wired situation.
> > >
> > > In an organization were smartcard interactactive logon policy is
> > > implemented
> > > i have one station that cause me problems. The user is successfully
> > > perform
> > > smart card logon to the domain but when trying to access any domain
> > > resource
> > > such as shared folders or outlook he required to authenticate twice.
This
> > > user got an additional PC were he authenticate with the same smart
card
> > > and
> > > access tranparently to the resources that i have mentioned above.
> > >
> > > In the domain controller event viewer i have notice that there was a
login
> > > failure due to bad username or password with event id 529.
> > >
> > > I assuming that there is somthing with that laptop that causing that
> > > situation.
> > >
> > > Please advice? should i remove and then connect the laptop back to the
> > > doamin etc ?
> > >
> > > Kindly regards,
> > >
> > > Yossi Mor
> >
> >
> >


Relevant Pages

  • [NT] Citrix MetaFrame Password Manager Credentials Not Encrypted Under Certain Configurations
    ... Get your security news from a reliable source. ... encrypted database and automatically providing credentials to applications ... administrator inadvertently fails to configure the Citrix MetaFrame ... The local credential store is protected by Windows File Access Control ...
    (Securiteam)
  • RE: Hacker Stories, Certs, vs Projects - Was Re: Technitium MAC Address Changer v3.1 (FREEWARE)
    ... requirement of 6 years of security work prior to being eligible for the ... Most of which are new requirements instituted a few years ago when a very young Indian gentleman passed the CISSP exam earning the right and fame to claim as the o7ungest certified CISSP in existance. ... And I do know certified fewls that have not a single skill in security bascis nor a clue as to any concepts of networking. ... I'm sorry you fgeel so threatened cause your cert has such little real merit except to a HR rep or a clueless manager on the prowl for a cheap hire and a cya glance over of the credentials offered by a potential candidate for a position, ...
    (Pen-Test)
  • Re: Keep prompting for credential in accessing a website
    ... that the user is accessing is in the Local Intranet Zone. ... do with the credentials and it does not know what to supply for credentials. ... to "Digest authentication for Window domain" with a valid Realm (with ... You could use Integrated Windows auth and have you users add the site ...
    (microsoft.public.inetserver.iis.security)
  • RE: Hacker Stories, Certs, vs Projects - Was Re: Technitium MAC Address Changer v3.1 (FREEWARE)
    ... general security credential. ... I understand that a CISSP can tell me that ... Credentials can only be looked at to strengthen the credibility of a ... Download FREE whitepaper on how a managed service ...
    (Pen-Test)
  • Re: Windows Authentication "ausloggen"
    ... dem Webserver die Integrated Security aktiviert ist. ... Damit werden bei einem Zugriff auf die Site die Credentials abgefragt. ... Die Inhalte der in dieser Newsgroup eingestellten Inhalte stammen von ... > Dazu soll sich der eigentliche PC Besitzer ausloggen und der Mitarbeiter, ...
    (microsoft.public.de.german.entwickler.dotnet.asp)