I am looking at hardening security by requiring smartcards for interactive logons VIA the GPO. However, users also use OWA from home, as well as access a few web applications remotely while in the field, these are just using Integrated Authentication through our ISA server. My question however, relates back to the GPO setting. I was always under the impression that when you enable "Require smartcard for interactive logon" that it effectively disabled the password on the account(excessively long and complex password is set). Is this true, and if so, does anybody have a trick to get around this? - Marc
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
