Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Smart card (un)privileged account access in Win 2k3 Server

Status
Not open for further replies.

bobmag00

MIS
Sep 14, 2010
1
US
Hi all,
I'm working on setting my users up with smart card enabled logins tied in with their AD accounts on a Win 2k3 server. The problem I'm running into is that, with the way things are currently setup, some users have a "normal"/underprivileged account for desktop work and such, and then they have another account with elevated privileges that they use when they need to do something requiring more access(admin the DC's).

I'm not sure if it's possible, but what I'm looking for is for a given user to be able to use their smart card to login to their desktops using their underprivileged account, and then use that same card to access their admin level account(like sudo on the Linux side) when the need arises.

If there's any way to do what I'm talking about without restructuring the AD I'm all ears.

Thanks
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top