In addition to deploying smart cards to the users in your organization, security settings in Active Directory Domain Services (AD DS) and other services further increase network security. They include:
Requiring smart cards for interactive logon
Requiring smart cards for logon at specific computers
Requiring smart cards for remote access logon
Configuring smart card removal behavior
Configuring smart card default settings
You can require a user to use a smart card for interactive logon by enabling the Smart Card Is Required For Interactive Logon option on the Account tab of the user’s object in AD DS. This method gives you flexibility in that you can enforce smart card use on a user-by-user ...