dual or biometric authentication for Terminal Services

[waldadam]

Is there any methodologies anyone can recommend for encorporating dual authentication for remote terminal services connections?

The RSA dongles are way expensive. I am currently using biometric fingerprint devices on-site, is there a way that I could require a fingerprint scan from remote locations as well?

Example from home the user would bring up the TS session then be required to scan his thumbprint. I don't want it to be based off a password just stored locally on his machine, but one the information stored on the remote server.

Thanks!