Windows 10: We are implementing on W2K10\11 machines MFA using interactive smart card card logons and...

We are implementing on W2K10\11 machines MFA using interactive smart card card logons and enabling hello so when the user pulls the card it locks. The system works fine no issues for the most part. My question is im the admin and we have remote users. Is there any way to get admin privilege's via any remote tool. We use teamviewer which works fine full install when i connect and do admin stuff say cmd w admin priv... it pops up a window and says the user needs to add in credentials. On the remote pc it has the u\n & p\w screen. Obviously they dont have the rights. Any help would be g

:)

 

Smart card is required for interactive logon and windows mobile

No.... I am not developing an application...

It is a general question about connecting windows mobile clients remotely (over a secure reverse proxy etc.), when the domain feature (Smartcard is required for interactive logon) on a user base is active...

What do you do then?

It is not possible to insert a separate smart card into the mobile which contains the certificates used for the domain authentication? Or is it?

Thanks for an answer

 

Group Policy Interactive Logon smart card enforced with admin username and password enabled?

Hello,

I have a gpo setup to enforce interactive logon: smart card authentication on some of the computers in my domain. That works as it should. Group policy is applied to my group of computers and users are forced to insert their card and logon with their pin.
No problem there.

Here is my question: It possible to leave that intact but allow a subset of admin accounts to be used normally (username/password) on those computers? Essentially I want to enforce smart cards but allow our admins to still elevate privileges normally without
having to create them admin smart cards.

Thank you.

 

Require Windows Hello or smart card

Hello

When I enabled security policy Interactive logon: Require Windows Hello or smart card with enabled service "Windows Hello" and configured Domain Logon with bio (fingerprint), I can't logon with Hello, only smart-card.

What did I do wrong?

Used Windows 10 1703 (15063.447)