Windows 10: Windows 10 Hello for Business with Physical Smartcard and roaming uses across shared PC's

Hi,


We are looking to deploy a Multi-Factor authentication control across our Windows 10 environment. Whilst we have a number of users who have a direct 1-2-1 assignment of person with device, we also have a number of shift and transient workers who need to authenticate and access a number of different Windows 10 PC's.


We would like to use Windows Hello for Business, which we know with work for the users with the 1-2-1 assignment to device, however for the users on shared PC's, we would like to use Physical Smartcards that the users can use to authenticate as the second factor to whichever PC they need to use.


We need this to operate in a seamless and admin friendly way that does not require to pre-allocation of user credentials/accoutns to specific PC's, it needs to support a full roaming experience.


I am struggling to find detailed information on Windows Hello for Business and its operate with Physical Smartcards, can you please advise.


Thanks

:)

 

Network access to PCs that use Windows Hello

Our PCs at home have been updated to the April 2018 Update of Windows 10 and they're suggesting that we replace our passwords with Windows Hello. I've never used Windows Hello before, but I understand that it's a biometric login mechanism. So if that's the case, how can we access each other's PCs through the network? We currently use passwords to access network shares and Remote Desktop. I'm unsure if I should enable Windows Hello in case we all lose access to sharing each other's resources as biometric authentication is just for access to the local machine. Can someone confirm whether or not you can continue using Windows Hello-enabled computers through the network?

EDIT:

Just to clarify:

Q1. Can I still login to a Windows 10 Hello-enabled PC remotely via RDP using a traditional username & password?

Q2. Can I also still use a username & password to access a network share (i.e. map a drive letter) which is hosted on a remote Windows 10 computer that uses Windows Hello?

Q3. If the answer to the above questions is no, then is there another authentication method I must use instead?

 

Windows 10 Tweaks

Pressing “Windows+Pause Break” (it’s up there next to scroll lock) opens the “System” Window.

Windows 10: In the new version of Windows, Explorer has a section called Quick Access. This includes your frequent folders and recent files. Explorer defaults to opening this page when you open a new window. If you’d rather open the usual This PC, with links to your drives and library folders, follow these steps:

• Open a new Explorer window.
• Click View in the ribbon.
• Click Options.
• Under General, next to “Open File Explorer to:” choose “This PC.”
• Click OK

credit to Lifehacker.

 

Smartcard login

My new laptop, a Thinkpad T480s has a smartcard reader and is shipped with Window 10 Pro. How can I use the smartcard reader to log into Windows using a smartcard?

I'm not really interested in all kinds of technical stuff about smartcards, I'm just a home user and I have a smartcard reader and several smartcards that might be usable. Simple as that. I don't need filesystem encryption for now either.

I see it as just logging in with an alternative input - not unlike fingerprint login really.

But instead of fingerprint, I want to use smartcard.

How to do it?