

It doesn't quite make sense, that you would enable this setting via GPedit and then also disable in the registry editor - you are setting the value to be=1, then setting the exact same value to be=0. The policy setting, and the registry key/value, you have mentioned, are exactly one and the same thing. Win 2008 R2 with all the nasty STIGs of course. I am in Safe Mode with Networking, but it doesn't let me get into the Group Policy. Under 'Computer Configuration>Policies>Windows Settings>Local Policies>Security Options>Interactive Logon: Require smart cards - enable' Well, since I want this to happen on all our servers and workstations, I set it in the domain group policy instead of locally. So if you don't want to use a smart card, you can hit Esc and logon with userid/password. Then go to the registry: 'HKLM\Software\Mocrosoft\Windows\CurrentVersion\Policies\System' and change the DWORD value of 'scforceoption' from '1' to '0'. Options and change 'Interactive logon: Require smart card' to 'enabled'.

So I got a set of instructions which basically said to access the Local Group Policy editor under Computer Configuration>Windows Settings>Security Settings>Local Policies>Security We are trying to emulate using smart cards on our system. I need to make a change in the domain controller group policy in the following:
