Harun’s Microsoft Blog

Archive for October, 2009

How to Configure “Smart Card” as the Default Logon Alternative on “Windows 7″

by on Oct.13, 2009, under WINDOWS 7

Create a reference image for the Windows 7 client deployment, where SmartCard service is set to “Automatic” (Default is set to “Manual). After installing the clients run a task sequence thru SCCM or MDT 2010 that modifies the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\

DisableCAD = 1 (Default is 0)

 reg1

Copy and paste the following “Task Sequence command” todo that:
reg add “HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon” /v DisableCAD /d 1 /t REG_DWORD /f

And create the following registry key to have “Smart Card” as the default alternative during the first logon:

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\

LastLoggedOnProvider = {8bf9a910-a8ff-457f-999f-a5ca10b4a885}

reg2
Copy and paste the following “Task Sequence command” todo that:
reg add “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI” /v LastLoggedOnProvider /d {8bf9a910-a8ff-457f-999f-a5ca10b4a885} /t REG_SZ /f
 

When the OS installation and the task sequence is finished, you will only see the “Insert Smartcard to logon” tile.

Comments Off more...

Looking for something?

Use the form below to search the site:

Still not finding what you're looking for? Drop a comment on a post or contact us so we can take care of it!

Blogroll

A few highly recommended websites...