Smart card is required for interactive logon

I have several users that logon without smart cards on a daily basis. I
also have users that are required to login with smart cards. I have one
user in particular that doesn't have a smart card and so his account is
setup to allow him to login with a username and password. The problem is
that for this one individual every day when he comes into work and
attempts to login it tells him he needs a smart card. So everyday he
calls me, I go into Active Directory, and sure enough "Smart card is
required for interactive logon" is checked. I uncheck this box and he is
fine for the rest of the day. Does anybody have any ideas on this?


--
In_the_desert
------------------------------------------------------------------------
In_the_desert's Profile: http://forums.techarena.in/members/in_the_desert.htm
View this thread: http://forums.techarena.in/windows-security/1110419.htm

http://forums.techarena.in

From: "In_the_desert"

| I have several users that logon without smart cards on a daily basis. I also have
| users that are required to login with smart cards. I have one user in particular that
| doesn't have a smart card and so his account is setup to allow him to login with a
| username and password. The problem is that for this one individual every day when he
| comes into work and attempts to login it tells him he needs a smart card. So everyday
| he calls me, I go into Active Directory, and sure enough "Smart card is required for
| interactive logon" is checked. I uncheck this box and he is fine for the rest of the
| day. Does anybody have any ideas on this? -- In_the_desert

First JUNK forums.techarena.in
Usenet is the best way to access the Microsoft News Groups.

This group;
news://msnews.microsoft.com/microsoft.public.windowsxp.security_admin

However your question might be *best* served in;
news://msnews.microsoft.com/microsoft.public.security.crypto

To me it sounds like a Group Policy is overriding your manual settings.

You may have to have two containers under the organizational unit for your users.
One where you use cryptographic logon enforcement through group policy management.
One where you don't have users use Smart cards and therefore the group policy is not set
for them.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp