SmartCard Login+certificate to to AD & admins using Remote Control

G

Guest

I have smart card login+ certificate to AD working, including W2K admins. The
solution that I have allows me to use MS Terminal Service Client, Citrix and
XP Remote Desktop with my smart card login+certificate to login to AD on a
remote W2K server since these all virtualize the remote desktop sessions with
the remote server (eg located at HK) while the admin resides at another
location (SF).

However, we also use Remote Control products such as RemotelyAnywhere,
PCAnywhere, HP/Compaq RILO, WinVNC, MS SMS Remote Control and IP KVMs where
it provides physical console access (as if you at are the actual console and
many cases outside of the W2K OS itself) even though you are thousands of
miles away. With the fact that smart card login to AD requires you to posess
and insert the smart card at the server console but you are using a tool
which gives you that conolse access/view from a remote distance creates a
situation where you can't physically insert the smart card (my arm is not
long enough to reach thousands of miles away :)). Again, we are talking about
products that gives you actual console access remotely, NOT virtualized
desktop sessions where you don't actually have physical console access so the
issues are different.

What are companies who have implemented this MS solution, including MS doing
for this situation? Does anyone have a solution for this? Is there no
solution?
 
M

Miha Pihler [MVP]

Hi,

You can use Smart Cards with RDP that comes with Microsoft operating system
(e.g. Windows Server 2003). You can actually have smart card attached to
e.g. your laptop (wherever you are) and you are logging into the server
remotely...

This also works with Citrx to some extend (e.g. logon to Citrix over Web
interface)...

I never used other solutions so I can't give you any advice on e.g. VNC,
KVMs etc...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top