|
Posted by bagins on August 7, 2006, 8:57 am
Please log in for more thread options <quote>
it is just currently much harder than it should be
</quote>
Why? You mean harder for admins or users? I am interested in your opinion,
because I don't have experience with enterprise networks using smart card
logon.
I agree with you about remote access and admin tasks being the most common
usage.
--
************************
Best regards
Bagins
************************
> microsoft.public.security news group, S. Pidgorny <MVP>
>
>> Thanks Paul... Guess Vista ecosystem will help smart card deployment
>> greatly. Looking at "identity management suites" that are glorified
>> password
>> synchronisation systems doesn't make me lough any more, and viable strong
>> uthentication as a primary mean of logging on to everything in the
>> enterprise seems to be a bit off.
>>
>> In your experience - are smart cards used primarily for admin tasks, for
>> general user logon, or for remote access/apps?
>
> In my experience, admin tasks and remote access with remote access
> being the most common usage.
> Until such time as all applications are Kerberos aware, requiring smart
> cards for interactive logon is going to continue to be a challenge. Not
> that it can't be done as I do have one customer with 130K users who are
> using smart cards for all authentication, it is just currently much
> harder than it should be.
>
> --
> Paul Adare - MVP Virtual Machines
> It all began with Adam. He was the first man to tell a joke--or a lie.
> How lucky Adam was. He knew when he said a good thing, nobody had said
> it before. Adam was not alone in the Garden of Eden, however, and does
> not deserve all the credit; much is due to Eve, the first woman, and
> Satan, the first consultant." - Mark Twain
|