Re: Smart card is required for interactive logon

From: "In_the_desert" <In_the_desert.3mmp3b@xxxxxxxxxxxxx>

| I have several users that logon without smart cards on a daily basis. I also have
| users that are required to login with smart cards. I have one user in particular that
| doesn't have a smart card and so his account is setup to allow him to login with a
| username and password. The problem is that for this one individual every day when he
| comes into work and attempts to login it tells him he needs a smart card. So everyday
| he calls me, I go into Active Directory, and sure enough "Smart card is required for
| interactive logon" is checked. I uncheck this box and he is fine for the rest of the
| day. Does anybody have any ideas on this? -- In_the_desert

First JUNK forums.techarena.in
Usenet is the best way to access the Microsoft News Groups.

This group;
news://msnews.microsoft.com/microsoft.public.windowsxp.security_admin

However your question might be *best* served in;
news://msnews.microsoft.com/microsoft.public.security.crypto

To me it sounds like a Group Policy is overriding your manual settings.

You may have to have two containers under the organizational unit for your users.
One where you use cryptographic logon enforcement through group policy management.
One where you don't have users use Smart cards and therefore the group policy is not set
for them.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


.

Relevant Pages

  • Problems with trying to create a logon banner ( or login banner)
    ... I am trying to make a logon (login) banner that will display the rules ... Microsoft Windows XP Operating System Group Policy Result tool ... Filtering: Not Applied ...
    (microsoft.public.windows.server.active_directory)
  • Re: Server Logins
    ... Logon on Locally in Domain group policies and Local ... determine which Group Policy is being applied on server and look the user ... > user to be able to login, ... > by default cannot login to W2k server. ...
    (microsoft.public.windows.server.security)
  • Re: Problems with trying to create a logon banner ( or login banner)
    ... I am trying to make a logon (login) banner that will display the rules ... OR that you made the changes to the Default Domain Policy (and ... Applied Group Policy Objects ...
    (microsoft.public.windows.server.active_directory)
  • Re: Server Logins
    ... Users can logon to "ordinary computer" but by default are not able to logon ... What you can do is create new OU named e.g. Servers OU. ... this OU and create new group policy. ... > user to be able to login, ...
    (microsoft.public.windows.server.security)
  • Re: Smart Card Authenticatyion to standalone PC
    ... Once they login with their Smart Cards on the Domain, their credentials will be cached and ... they will be able to logon when not connected to the Domain. ... Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp ...
    (microsoft.public.security)
Quantcast