Smart card removal behavior

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options

Description

Determines what should happen when the smart card for a logged-on user is removed from the smart card reader.

The options are:

  • No Action

  • Lock Workstation

  • Force Logoff

By default, No Action is specified.

If Lock Workstation is specified, then the workstation is locked when the smart card is removed allowing users to leave the area, take their smart card with them, and still maintain a protected session.

If Force Logoff is specified, then the user is automatically logged off when the smart card is removed.