SCL Screen Saver ?

[Guest]

We're currently using Smart Card Logon and we've got an issue with not
having a password to use when the Screen Saver kicks on. Is there a way to
enable the same PIN requirement in the Screen Saver security like when you
log onto the workstation? Because of existing security policies we MUST keep
the screen saver password enabled, but right now it's locking users out.

 

[Steven L Umbach]

Offhand I do not know if that is possible. There is a security option you
can try on a computer with smart card readers in Local Security Policy/local
policies/security options - Interactive logon: smart card removal behavior
which can be set to none, lock, logoff. You might want to try and set it to
lock or logoff to see if that helps and train smart card users to remove
their smart card when they leave their workstation which they REALLY should
be doing which is MUCH more secure than screen saver locking the computer
after a period of idle time as a malicious user would most likely easily be
able to do what they want on a workstation well before the screensaver locks
the computer at the commonly used 10 minute idle period. To find out for
sure to answer your direct question I would suggest you also post in the
Microsoft.public.crypto.security newsgroup where some smart card/PKI experts
monitor.. --- Steve