Home Active Directory (III) 5. Planning Security for Active Directory 5.7 Configuring Group Policy to Require Smart Card Logon

5.7 Configuring Group Policy to Require Smart Card Logon

Marţi, 18 August 2009 16:49 Eugen Morar
Email
In this video i will show you how to configure Group Policy to Require Smart Card Logon.

 
This exercise shows you how to configure group policy to require smart card authentication.
  1. Open Active Directory Users And Computers Utility.
  2. Create a new top-level OU called Smart Card Test.
  3. Right-click the Smart Card Test OU and select Properties.
  4. In the Smart Card Test Properties dialog box, switch to the Group Policy tab and click Add. Click OK to accept the default GPO name, then click the Edit button.
  5. In the Group Policy Object Editor window, expand Computer Configuration, Windows Settings, Security Settings, Local Policies, Security Options.
  6. Double-click the Interactive Logon: Require Smart Card policy.
  7. In the Interactive Logon: Require Smart Card dialog box, first select Define This Policy Setting, then select Enabled and click OK.
  8. You will not need to use Active Directory Users And Computers until a little later on, but leave the window open anyway so that you do not lose your work.