Smart Card Logon RODC

microsoft.public.windows.server.security - Supporting MS Windows network? Read here before it's too late! 

Subject Author Date Smart Card Logon RODC jcarlen 05-22-2008  Re: Smart Card Logon RODC Brian Komar \(M... 05-22-2008  Re: Smart Card Logon RODC jca 05-23-2008  Re: Smart Card Logon RODC Brian Komar \(M... 05-23-2008  Re: Smart Card Logon RODC jca 05-26-2008

Posted by jcarlen on May 22, 2008, 11:06 am Please log in for more thread options Hi. When using smart cards against an RODC, is there anything I should do to diffrent from a normal smart card logon against a "Real" DC Thanks Johan Posted by Brian Komar \(MVP\) on May 22, 2008, 12:53 pm Please log in for more thread options No show/hide quoted text > Hi. > When using smart cards against an RODC, is there anything I should do to > diffrent from a normal smart card logon against a "Real" DC > Thanks > Johan Posted by jcarlen on May 23, 2008, 7:20 am Please log in for more thread options Oki thank you, let me put it this way. I have a lab with 3 DC 2 standrad and 1 RODC n diffrent sites. When i logon to the RODC site with password it will authenticate against the RODC. But when I logon with smart card it will authenticate aginst the primary site. This becomes more clear when I simulate that the link goes down between the sites. I can still logon with password but with smart card it still tries to logon against the primary site and after the timeout then user will be loged on locally on the client, and not against the RODC. "Brian Komar (MVP)" wrote: show/hide quoted text > No > > Hi. > > When using smart cards against an RODC, is there anything I should do to > > diffrent from a normal smart card logon against a "Real" DC > > Thanks > > Johan > > Posted by Brian Komar \(MVP\) on May 23, 2008, 10:04 am Please log in for more thread options How are your sites defined in AD? Brian show/hide quoted text > Oki thank you, let me put it this way. > I have a lab with 3 DC 2 standrad and 1 RODC n diffrent sites. > When i logon to the RODC site with password it will authenticate against > the > RODC. > But when I logon with smart card it will authenticate aginst the primary > site. This becomes more clear when I simulate that the link goes down > between > the sites. I can still logon with password but with smart card it still > tries > to logon against the primary site and after the timeout then user will be > loged on locally on the client, > and not against the RODC. > "Brian Komar (MVP)" wrote: >> No >> > Hi. >> > When using smart cards against an RODC, is there anything I should do >> > to >> > diffrent from a normal smart card logon against a "Real" DC >> > Thanks >> > Johan >> Posted by jcarlen on May 26, 2008, 3:16 am Please log in for more thread options Hi. I’ve got 2 sites. 1 with 2 DC and 1 with 1 RODC. They have different V-lan and different subnets. they replicate every hour. /Johan "Brian Komar (MVP)" wrote: show/hide quoted text > How are your sites defined in AD? > Brian > > > Oki thank you, let me put it this way. > > I have a lab with 3 DC 2 standrad and 1 RODC n diffrent sites. > > When i logon to the RODC site with password it will authenticate against > > the > > RODC. > > But when I logon with smart card it will authenticate aginst the primary > > site. This becomes more clear when I simulate that the link goes down > > between > > the sites. I can still logon with password but with smart card it still > > tries > > to logon against the primary site and after the timeout then user will be > > loged on locally on the client, > > and not against the RODC. > > "Brian Komar (MVP)" wrote: > >> No > >> > Hi. > >> > When using smart cards against an RODC, is there anything I should do > >> > to > >> > diffrent from a normal smart card logon against a "Real" DC > >> > Thanks > >> > Johan > >> > > Similar Threads Posted smart card offline logon July 7, 2005, 9:02 am Certificate attributes for Smart Card Logon January 13, 2009, 3:31 am Smart Card Login + Certificate Login to AD -> Lost smart card December 15, 2005, 10:03 pm Smart card reader and card supplier in Australia May 5, 2008, 10:37 pm Re-initialize smart card June 3, 2005, 8:34 am Smart Card - two readers December 8, 2006, 8:28 am Smart Card and VPN in Vista. May 26, 2008, 3:36 am Base Smart Card CSP Update December 7, 2005, 3:12 pm Q: Seconary certificate on a smart card August 5, 2006, 6:24 am Question Regarding Smart Card Deployment September 12, 2007, 2:16 pm