Microsoft TechNet
United States (English) Sign in
Home Library Wiki Learn Gallery Downloads Support Forums Blogs
TechNet Library
TechNet Archive
Windows 2000 Server
Windows 2000 Server
Resource Kits
Windows 2000 Professional Resource Kit
Windows 2000 Group Policy Reference
Computer Configuration
Windows Settings
Security Settings
Local Policies
Security Options
Number of previous logons to cache (in case domain controller is not available)
Clear virtual memory pagefile when system shuts down
Amount of idle time required before disconnecting a session
Digitally sign client communications (when possible)
Secure channel: Digitally encrypt or sign secure channel data (always)
Secure channel: Digitally sign secure channel data (when possible)
Unsigned non-driver installation behavior
Rename guest account
Recovery console: Allow automatic administrative logon
Digitally sign server communications (always)
Audit use of Backup and Restore privilege
Message text for users attempting to log on
Restrict floppy access to locally logged-on user only
LAN Manager Authentication Level
Automatically log off users when logon time expires (local)
Message title for users attempting to log on
Do not display last user name in logon screen
Restrict CD-ROM access to locally logged-on user only
Additional restrictions for anonymous connections
Recovery console: Allow floppy copy and access to all drives and all folders
Strengthen default permissions of global system objects (e.g. Symbolic links)
Send unencrypted password to connect to third-party SMB servers
Unsigned driver installation behavior
Secure channel: Require strong (Windows 2000 or later) session key
Allow system to be shut down without having to log on
Digitally sign client communications (always)
Allowed to eject removable NTFS media
Shut down system immediately if unable to log security audits
Digitally sign server communications (when possible)
Audit the access of global system objects
Disable CTRL+ALT+DEL requirement for logon
Prevent users from installing printer drivers
Smart card removal behavior
Prevent system maintenance of computer account password
Rename administrator account
Secure system partition (for RISC platforms only)
Prompt user to change password before expiration
Allow server operators to schedule tasks (domain controllers only)
Expand Minimize
2 out of 4 rated this helpful - Rate this topic

Smart card removal behavior

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options

Description

Determines what should happen when the smart card for a logged-on user is removed from the smart card reader.

The options are:

  • No Action

  • Lock Workstation

  • Force Logoff

By default, No Action is specified.

If Lock Workstation is specified, then the workstation is locked when the smart card is removed allowing users to leave the area, take their smart card with them, and still maintain a protected session.

If Force Logoff is specified, then the user is automatically logged off when the smart card is removed.

Did you find this helpful?
(1500 characters remaining)
© 2013 Microsoft. All rights reserved.