Enforcing Smart Cards to Log on to a Local Computer

  • [アーティクル]

Applies To: Windows 7, Windows Server 2008 R2

Symptom

You deployed a Group Policy setting that configures a computer to require smart card authentication to log on to the domain. Now, users of the computer cannot log on to the computer by using their user name and password.

Cause

When a computer is configured to require smart card logon, all users of that computer must log on by using a smart card.

Resolution

You can verify that all users of the computer have smart cards to log on to the computer, you can disable the Group Policy setting that requires a smart card to log on to the computer, or you can change the Group Policy setting to allow users to log on by using either their credentials or their smart card.

Requiring a smart card to log on is most appropriate for remote computers, such as a remote domain controller or remote Terminal Services gateways.