[thenewnoise]

I have a 2k3 server with a usb smart card installed. When users connect to the server via remote desktop the smart card is not available. Is this by design? is there a way to get the smart card to work over remote desktop. If we connect using VNC the smart card works.

[yuval14]

Did you deploy PKI and domain based smart card logon or set policy for the server/users? (You can review the smart card vendor docs also)

Terminal Server FAQ:

Group Policy:

How to apply Group Policy objects to Terminal Services servers

http://support.microsoft.com/default...b;EN-US;260370

Loopback Processing of Group Policy

http://support.microsoft.com/?kbid=231287

Security Settings - Software Restrictions

http://www.computerperformance.co.uk...strictions.htm

Introduction to Group Policy in Windows Server 2003

http://www.microsoft.com/windowsserv...w/gpintro.mspx

Windows Server 2003 Security Guide

http://www.microsoft.com/downloads/d...displaylang=en

Windows 2003 - Group Policy WMI Filters

http://www.computerperformance.co.uk...MI_filters.htm

Using Windows Terminal Services to Run a Single Application

http://www.windowsecurity.com/articl...plication.html

How to lock down a Windows Server 2003 or Windows 2000 Terminal Server session

http://support.microsoft.com/default...b;en-us;278295

Best Practices for Citrix Policy design for Presentation Server 3 or 4

http://www.brianmadden.com/content/content.asp?ID=503


Terminal Server Licensing:

The Ultimate Guide to Windows 2003 Terminal Server Licensing

http://www.brianmadden.com/content/content.asp?id=154



The Ultimate Guide to Terminal Server Printing - Design and Configuration

http://www.brianmadden.com/content/content.asp?ID=62


How to Configure Windows Network Load Balancing for pure Terminal Server environments

http://www.brianmadden.com/content/content.asp?id=278


Session Directory and Load Balancing Using Terminal Server

http://www.microsoft.com/windowsserv...directory.mspx


Terminal Services Client Cannot Connect to NLB Cluster TCP/IP Address

http://support.microsoft.com/?kbid=280805

Network Load Balancing: Frequently Asked Questions for Windows 2000 and Windows Server 2003

http://www.microsoft.com/technet/pro...ng/nlbfaq.mspx


Add on tools:


User Profile Hive Cleanup Service

http://www.microsoft.com/downloads/d...displaylang=en

RDP 5.2

http://www.petri.co.il/download_rdp_5_2.htm


Tips:


Printers That Use Ports That Do Not Begin With COM, LPT, or USB Are Not Redirected in a Remote Desktop or Terminal Services Session
View products that this article applies to.

http://support.microsoft.com/kb/302361/en-us

Windows 2000 Terminal Services server logs events 1111, 1105, and 1106

http://support.microsoft.com/?id=239088

Troubleshooting Remote Desktop Licensing Error Messages

http://technet2.microsoft.com/Window...97e2c1033.mspx

How to Configure ActiveSync for PDA Synchronization

http://support.citrix.com/article/CTX821115

[thenewnoise]

The smart card is not being used for logging into the server. Its a verisign card being used with the verisign website

[wullieb1]

Straight from the help files in Remote Desktop

To make a smart card available in a session
In the Remote Desktop Connection window, click Options.

On the Local Resources tab, Under Local devices, click Smart card.
Note

The option to enable smart card redirection is not displayed unless a smart card is present and the service is enabled.
Click Connect.
Notes

To open Remote Desktop Connection, click Start, point to Programs or All Programs, point to Accessories, point to Communications, and then click Remote Desktop Connection.
Depending on the policies of your network, smart card redirection might be disabled for some or all remote connections.
You might see a Remote Desktop Connection Security Warning, which asks whether you want to connect your local disk drives, local ports, or smart card to the remote computer. To enable one or more of these connections, check the appropriate check boxes. If you choose not to enable these connections, a Remote Desktop Connection is still established, but these resources are not available to the remote computer.
When you click Connect, the information you enter in Options becomes the default setting for all Remote Desktop connections and is saved in a file called Default.rdp.

[thenewnoise]

I dont want the smart card on the workstation to transfer to the server i want the smart card that is installed on the server to be available to the workstation that is remoting into it.

[yuval14]

mmm This issue should be address be the card vendor. Usually this type of support doesnt exiting.

Yuval