This exercise shows you how to configure group policy to require smart card authentication.
- Open Active Directory Users And Computers Utility.
- Create a new top-level OU called Smart Card Test.
- Right-click the Smart Card Test OU and select Properties.
- In the Smart Card Test Properties dialog box, switch to the Group Policy tab and click Add. Click OK to accept the default GPO name, then click the Edit button.
- In the Group Policy Object Editor window, expand Computer Configuration, Windows Settings, Security Settings, Local Policies, Security Options.
- Double-click the Interactive Logon: Require Smart Card policy.
- In the Interactive Logon: Require Smart Card dialog box, first select Define This Policy Setting, then select Enabled and click OK.
- You will not need to use Active Directory Users And Computers until a little later on, but leave the window open anyway so that you do not lose your work.



