Requiring smart card use in a Windows domain

[Terri Shuey <mathair.jedi () gmail com>]

When testing the 2 different configuration options to require smart card
use for interactive logins (computer vs user account setting) we found both
options broke access to other applications that were linked to AD.  For
example corporate mail delivery to iDevices when the user account was
required to use a smart card.  Or RunAs Admin when computer account was set
to require it.

Since corporate mail delivery to an iDevice is normally considered mission
critical (heaven forbid if email is down) has anyone found a way to bypass
or limit either of these account configurations to just normal user
accounts on specific devices?  For example require the computer account to
use smart card but allow RDP or RunAs for admins without smart card
required?

Thanks
Terri

_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com