Smart card logon is supported for Windows 2000 and Windows Server 2003. To implement smart cards, you must deploy an enterprise certification authority rather than a stand-alone or third-party certification authority to support smart card logon to Windows Server 2003 domains. Windows Server 2003 supports industry standard Personal Computer/Smart Card (PC/SO-compliant smart cards and readers and provides drivers for CCNA certification commercially available plug and play smart card readers. Windows Server 2003 does not support non-PC/SC-compliant or non-plug and play smart card readers. Some manufacturers might provide drivers for non-plug and play smart card readers that work with Windows Server 2003; however, it is recommended that you purchase only plug and play PC/SC-compliant smart card readers.
The cost of administering a smart card program depends on several factors, including:
• The number of users enrolled in the smart card program and their location.
• Your organization's practices for MCSE exams issuing smart cards to users, including the
requirements for verifying user identities. For example, "will you require users to
simply present a valid personal identification card or will you require a back¬
ground investigation? Your policies affect the level of security provided as well as
the actual cost.
• Your organization's practices for users who lose or misplace their smart cards. For
example, will you issue temporary smart cards, authorize temporary alternate
logon to the network, or make users go home to retrieve their smart cards? Your
policies affect how much worker time is lost and how much help desk support is
needed.
Your smart card authentication strategy must describe the network logon and authentication methods you use, including(http://www.certtopper.com):
• Identify network logon and authentication strategies you want to deploy.
• Describe smart card deployment considerations and issues.
• Describe PKI certificate services required to support smart cards.
In addition to smart cards, third-party vendors offer a variety of security products to provide two-factor authentication, such as MCITP Enterprise Administrator "security tokens" and biometric accessories. These accessories use extensible features of the Windows Server 2003 graphical logon user interface to provide alternate methods of user authentication.
Exam Tip Know what you must do to deploy smart cards.

A lot of business owners often say that marketing is a tough job. They have tried it and it didnt work. Perhaps you have also uttered these same words once or twice already.
Read

When you choose to use templates to design and print postcards, you will be able to save a significant amount of money..
Read

There are several advantages when you print postcards for your marketing campaigns..
Read

Online transactions can sometimes be a very risky affair. Thus, if you are planning to design and print your very own custom envelopes with the help of the internet for instance, you may want to be very cautious as you place all those online printing issues and transactions.
Read

some of the things that you must know and keep in mind to know what a printer can do for your business.
Read

A trust path is a series of trust relationships that must be traversed in order to pass authentication requests between any two domains..
Read

The saved RSoP console containing the archived data has an .msc file name extension and appears on the Administrative Tools menu..
Read

In this exercise, you create a domain local group that you use to assign permissions to gain access to sales reports..
Read

Do not use the same firewall at each border. If an intruder successfully penetrates the external firewall,you do not want her to be able to use the same attack on the internal firewall..
Read

Windows 2003 certification, and tests professionals on their ability to plan and maintain a Windows 2003 network infrastructure..
Read