MysticLlama
Golden Member
I have a bit of a condundrum at work with a few machines that need to be secured.
The users that are supposed to be accessing them have good usernames and passwords, and the other users in the domain aren't allowed to login to the machines.
It seems like it's good enough to me, but management wants some sort of hardware authentication as well.
I've looked into using Smart Cards and USB Tokens, but to get them actually working correctly in an environment I need to have a certification authority and some other stuff, which seems like overkill at this point.
I do want to be using smart cards for all the employees, but not for at least a year, and maybe more like 18-24 months. These machines have to be dealt with in the next 30 days however.
What products can I look at that just install on the local machine and do this sort of authentication? I have an MSI board with a SmartKey on a computer, and it seems to work pretty good for this, but I don't have MSI boards in the other machines.
My ultimate solution would be to get Windows-compliant smart card readers and cards that would migrate to the CA at a later date, but have some software to allow them to work locally in the meantime. Does such a beast exist? Everything I run across needs a domain and a CA, and I want this to be independent.
The users that are supposed to be accessing them have good usernames and passwords, and the other users in the domain aren't allowed to login to the machines.
It seems like it's good enough to me, but management wants some sort of hardware authentication as well.
I've looked into using Smart Cards and USB Tokens, but to get them actually working correctly in an environment I need to have a certification authority and some other stuff, which seems like overkill at this point.
I do want to be using smart cards for all the employees, but not for at least a year, and maybe more like 18-24 months. These machines have to be dealt with in the next 30 days however.
What products can I look at that just install on the local machine and do this sort of authentication? I have an MSI board with a SmartKey on a computer, and it seems to work pretty good for this, but I don't have MSI boards in the other machines.
My ultimate solution would be to get Windows-compliant smart card readers and cards that would migrate to the CA at a later date, but have some software to allow them to work locally in the meantime. Does such a beast exist? Everything I run across needs a domain and a CA, and I want this to be independent.
