Windows XP Professional and Active directory

[Venom]

Hey people was up i have just got my new dell PC loaded with windows
xp Professioanl!

I was wanting to know if at all possible, could i set up the login to
be used with smart cards, instead of entering user names and
passwords!

I would like to have a smart card for myself, my wife and my 2
children. So actually 4 smart cards. I have actually 1 USB smart card
reader! I would like to know:

1: is the possible
2: could someone guide me in the right direction as far as doing this!

[Torgeir Bakken (MVP)]

Venom wrote:

Hi

Take a look at this Google newsgroup search:

http://groups.google.com/groups?as_q=xp%20smart%20card%20active%20directory%20&as_oq=login%20logon%20authenticate&as_ugroup=microsoft.public.*

and this Microsoft Knowledge Base article:

HOW TO: Configure a Certification Authority to Issue Smart Card Certificates in
Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;en-us;313274

From the summary part:

<quote>
This step-by-step article describes how to configure a Certification Authority
to issue smart card certificates.

You can configure a Windows 2000-based or Microsoft Windows XP-based computer
to require the use of a smart card to log on to either a computer or a domain.
To use a smart card, a domain user must have a smart card certificate, and you
must prepare a Certification Authority (CA) to issue smart card certificates
before the CA can issue them.

The CA must have both the Smart Card Logon and Enrollment Agent certificate
templates installed. If you want the CA to issue smart card certificates that
can be used for secure e-mail messages, you must also install the Smart Card
User certificate template.
</quote>

--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter