T
Tyler789
Hello,
I have a gpo setup to enforce interactive logon: smart card authentication on some of the computers in my domain. That works as it should. Group policy is applied to my group of computers and users are forced to insert their card and logon with their pin. No problem there.
Here is my question: It possible to leave that intact but allow a subset of admin accounts to be used normally (username/password) on those computers? Essentially I want to enforce smart cards but allow our admins to still elevate privileges normally without having to create them admin smart cards.
Thank you.
Continue reading...
I have a gpo setup to enforce interactive logon: smart card authentication on some of the computers in my domain. That works as it should. Group policy is applied to my group of computers and users are forced to insert their card and logon with their pin. No problem there.
Here is my question: It possible to leave that intact but allow a subset of admin accounts to be used normally (username/password) on those computers? Essentially I want to enforce smart cards but allow our admins to still elevate privileges normally without having to create them admin smart cards.
Thank you.
Continue reading...