Forum Discussion
sgiovanni
May 27, 2020Copper Contributor
Require Smart Card for Domain Admins
I want to set the "smart card required for interactive logon" attribute on the AD accounts of my domain admins via GPO, but the only setting I have found is computer level, which would require it for...
jeffj
Jun 02, 2021Brass Contributor
sgiovanni I know this is a older post. But you can mark an account as "Smart card is required for interactive logon" under Account tab in User and Computers.
I think marking "Account is sensitive and cannot be delegated" and adding to group "Protected Users" also should be done.
jeffj
Jun 02, 2021Brass Contributor
Also should not be the daily account. Admin account should be a second or 3rd account for that user.