Using smart cards with system tools

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Using smart cards with system tools

In previous versions of Windows, smart cards were primarily used for user logon. In Windows XP and the Windows Server 2003 family, smart cards can be used with a number of system tools.

For making network connections, the user interface feature for mapping network drives can now use smart cards. The corresponding command-line tool Net also has the ability to use smart cards to provide credentials. For more information about Net, see Net use. For more information about mapping network drives, see To assign a drive letter to a network computer or folder.

In a secure environment, administrators will log on with normal user accounts for most of their regular work. When administrative functions need to be performed, a separate user account's credentials must be used. This is easily achieved with the Runas command. Smart cards can be used to provide the credentials to the Runas command, providing further enhanced levels of security. For more information about Runas, see Runas.

Domain administrators may also use smart cards to store their credentials. One operation that requires very secure credentials is installing Active Directory. This operation can accept credentials supplied from smart cards as well as the traditional user name and password. For more information, see Using the Active Directory Installation Wizard.