Windows 10: Group Policy Interactive Logon smart card enforced with admin username and password enabled?

Hello,


I have a gpo setup to enforce interactive logon: smart card authentication on some of the computers in my domain. That works as it should. Group policy is applied to my group of computers and users are forced to insert their card and logon with their pin. No problem there.


Here is my question: It possible to leave that intact but allow a subset of admin accounts to be used normally username/password on those computers? Essentially I want to enforce smart cards but allow our admins to still elevate privileges normally without having to create them admin smart cards.


Thank you.

:)

 

windows 10 requires smart card for admin

Hi,

Welcome to Microsoft Community.

Sorry to know that the Windows 10 prompts Smart card for Administrator rights. I will certainly help you.

I suggest you to follow the below steps to disable the Interactive Smart card prompt and check if it resolves the issue.

1. Right click on Start menu and select
Run.

2. Type gpedit.msc and press Enter.

3. Navigate to Computer Configuration\Windows Settings\Security Settings\Local Policies\Security


Options.

4. Locate Interactive logon: Require smart card
policy setting.

5. Double click on the Policy and select Disabled option.

6. Click on Apply and OK to save changes.

7. Check to see if the issue is resolved. If not, restart the system.

Hope this helps. If the issue remains unresolved, please get back to us and we would be happy to help.

Thank you.

 

admin password?

You can reset the Admin Password using Windows XP repair; See Here for step by step.

*Toast :toast:

 

Disable smart card Surface LTE

Hi Jishua9,

Thank you for posting your concern on Microsoft Answer Community.

Please try the below suggested steps and let us know if it helps.

1. Right click on
   Start menu and select Run.
   
2. Typegpedit.msc
   and press Enter.
   
3. Navigate to Computer Configuration\Windows Settings\Security Settings\Local Policies\SecurityOptions.
   
4. LocateInteractive logon: Require smart card
   policy setting.
   
5. Double click on the Policy and select
   Disabled option.
   
6. Click onApply
   and OK to save changes.
   
7. Check to see if the issue is resolved. If not,
   restart the system.
   

Hope it helps.

Aditya Roy

Microsoft Community – Moderator