Anything different in the AV or host-based security config? Are all the working systems older or newer than the machines that don't work?
*ASB *(Professional Bio <http://about.me/Andrew.S.Baker/bio>) *Harnessing the Advantages of Technology for the SMB market... * On Tue, May 17, 2011 at 12:18 PM, Steven M. Caesare <[email protected]>wrote: > We have several XP machines that cannot pass Smart Card credentials via an > RDP connection to any servers (Win2K8R2). > > > > The XP boxes use ActivIdentity client software to enable providing > SmartCard services for logon. The local SP login works correctly (I.e- when > a SC is inserted, you are prompted for your PIN, and may login to your > affiliated AD account). Therefore it appears that the client software is > working correctly. > > > > However when RDP’ing to a TermServer, the option to “change user” to pick > the SC affiliated logon does not work. This despite the local RDP client > connection configured to pass the smart card device thru to the term server. > These broken XP clients will not work with ANY server, hence the belief that > he issue is client-side. > > > > Things tried/checked (as compared to a working XP install): > > > > - Same XP patch level > > -Same ActiveIdentity client software version > > -Same client software configuration settings > > -Machines in the same OU (hence same GPO’s) > > - Nothing obvious in Win event logs > > -Nothing obvious in ActiveIdentity logs > > -Upgraded ActiveIdentity client software to even newer version > > -Upgraded Terminal Services client to newer version > > > > Any ideas appreciated. I can’t figure out anywhere that the system is > complaining, it just doesn’t’ work like the machine sitting right next to > it, and we can’t figure out why… > > > > Thanks. > > > > -sc > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
