fred

Hi, that GPO does not solve it. I dont actually understand what he means by "you need to disable EAP on your AAA server" I googled AAA server but got results for a RADIUS server, which we dont have. Or does he mean something else? Thanks for any help.

Hi, We use smartcards, but only for applications, not Windows authentication. If a user inserts their smartcard at a locked workstation (or login) screen they get asked for a PIN (which doesnt exist). Apparently there are lines in the GINA, probably related to... wlx_option_use_smart_card But thats about all I can figure out. Does anybody know how to edit the standard MS GINA to not react to a smartcards, or write another very basic gina to go in front that passes everything excpet smartcard behavior to the MS GINA? I have found this very hard, but somebody with GINA skills this is probably a piece of cake!! Thanks for any help Fred

Hi, We use smart cards, but not for login. After a user had used a smart card, Windows tries to be clever and then enables a PIN request when the user tries to unlock their workstation. Is there a way of stopping Windows from enabling the pin request? There is a GPO for saying if they have to use a smart card, but seemingly nothing to say never use a smartcard. Thanks for any help.