Forum Discussion
sgiovanni
May 27, 2020Copper Contributor
Require Smart Card for Domain Admins
I want to set the "smart card required for interactive logon" attribute on the AD accounts of my domain admins via GPO, but the only setting I have found is computer level, which would require it for...
jeffj
Jun 02, 2021Brass Contributor
sgiovanni I know this is a older post. But you can mark an account as "Smart card is required for interactive logon" under Account tab in User and Computers.
I think marking "Account is sensitive and cannot be delegated" and adding to group "Protected Users" also should be done.
- jeffjJun 02, 2021Brass ContributorAlso should not be the daily account. Admin account should be a second or 3rd account for that user.